Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/LlcUdSTGWmiELSkiC2ZO93Ley9I.roa
File:                     LlcUdSTGWmiELSkiC2ZO93Ley9I.roa (raw, json)
Hash identifier:          2XvarHH/8wUfniUXFpmbuB/Uy68wtxQtuis+vDblMGk=
Subject key identifier:   2E:57:14:75:24:C6:5A:68:84:2D:29:22:0B:66:4E:F7:72:DE:CB:D2
Certificate issuer:       /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial:       1A
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/LlcUdSTGWmiELSkiC2ZO93Ley9I.roa
Signing time:             Tue 07 Oct 2025 01:30:02 +0000
ROA not before:           Tue 07 Oct 2025 01:30:02 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18281
IP address blocks:        202.224.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
        Validity
            Not Before: Oct  7 01:30:02 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=2E57147524C65A68842D29220B664EF772DECBD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:b2:36:f5:2a:6c:81:a7:23:21:a1:42:f9:
                    c9:da:0e:1f:00:7b:86:57:9a:10:21:bb:44:0a:b9:
                    c4:1e:70:35:fc:22:c7:f6:b4:bc:44:98:c9:10:67:
                    1a:e9:d4:0e:38:8b:b5:97:b6:a2:5c:7b:a6:80:d3:
                    28:c9:b2:16:84:26:b3:4b:f2:dd:70:ca:7d:74:5d:
                    b5:88:6e:5a:96:06:cb:75:08:1e:b3:c6:aa:cf:3d:
                    95:c2:fc:84:4b:ca:e2:63:9b:c3:84:53:85:cc:6e:
                    da:f1:93:8c:24:6f:cc:48:79:25:b2:0b:64:7c:19:
                    9f:0b:50:3c:5b:7a:34:91:86:4e:71:49:aa:33:22:
                    86:a7:58:d1:53:8b:47:67:40:94:c6:30:7e:13:d5:
                    3e:80:17:00:dc:b1:5f:73:e3:2a:63:90:c2:6b:9c:
                    31:79:86:a8:89:a0:68:da:88:9b:a9:f9:a8:5b:e8:
                    62:16:71:10:f6:de:0d:94:b5:4d:ce:a6:38:14:78:
                    ce:33:b4:9d:e5:fa:42:89:77:0d:cf:23:c7:50:82:
                    73:a7:9c:ca:53:37:6f:5a:40:cc:98:12:ec:65:40:
                    01:1c:6f:dc:02:df:16:e7:48:c3:f8:9a:5e:1c:3f:
                    70:65:b7:c9:5f:a5:ad:8b:78:71:9f:bf:23:56:8d:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:57:14:75:24:C6:5A:68:84:2D:29:22:0B:66:4E:F7:72:DE:CB:D2
            X509v3 Authority Key Identifier:
                keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/LlcUdSTGWmiELSkiC2ZO93Ley9I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:af:16:64:18:ff:10:02:8b:86:6c:4d:bf:c7:64:e8:9d:c3:
         a5:b1:e0:ae:e5:1e:14:ed:9c:07:50:26:1e:ac:16:0a:c8:a6:
         7f:53:64:9a:75:38:1a:2a:79:a2:99:ba:92:02:b2:90:3e:80:
         b2:75:52:21:96:07:f5:84:11:68:78:22:f4:dc:b6:23:ed:5c:
         8c:7a:a6:59:99:0e:c4:29:ef:cc:9e:a7:f0:cf:3b:a5:68:f2:
         ce:2a:93:ae:f5:14:46:ed:00:53:a3:24:bd:8d:20:e0:bb:31:
         9f:1d:80:89:13:97:28:c9:04:d4:63:2b:de:7c:c1:d7:7c:b3:
         6e:74:1c:dd:ce:e6:13:16:70:ca:69:78:1f:06:fe:5f:84:b1:
         f2:10:27:71:b7:e9:66:d4:03:2f:c3:dc:6d:b4:34:10:ce:35:
         0c:e5:fd:6a:46:f9:2d:27:5d:ce:d5:68:85:ef:83:73:d9:13:
         d3:e4:a7:0a:99:39:31:08:90:bd:8f:07:ad:4e:64:64:50:1d:
         fe:f7:d4:4f:4a:82:04:f9:6d:76:48:d7:6c:d6:51:e9:6a:7c:
         c1:e6:e6:cc:fe:65:46:e5:e3:9f:bb:c1:d4:9e:73:46:23:dc:
         e7:09:d7:59:95:4e:43:60:dc:48:0a:5f:b5:b5:6b:4b:7c:79:
         85:19:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:23:14 2025 by rpki-client