Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/FBKrP688X-FSuOuNkfn-7e_LUKs.roa
File:                     FBKrP688X-FSuOuNkfn-7e_LUKs.roa (raw, json)
Hash identifier:          aiSnIz4+f1fVe2bGOfIvbK2sUVVhBVq2yTgprBZ3Lok=
Subject key identifier:   14:12:AB:3F:AF:3C:5F:E1:52:B8:EB:8D:91:F9:FE:ED:EF:CB:50:AB
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       50
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/FBKrP688X-FSuOuNkfn-7e_LUKs.roa
Signing time:             Sat 01 Nov 2025 01:35:06 +0000
ROA not before:           Sat 01 Nov 2025 01:35:06 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     131923
IP address blocks:        133.88.94.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 20:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Nov  1 01:35:06 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=1412AB3FAF3C5FE152B8EB8D91F9FEEDEFCB50AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:18:26:60:da:1c:48:f2:f3:09:65:d1:57:
                    25:c9:2c:24:a0:ae:bc:4d:bc:28:51:1c:54:a0:39:
                    ac:a1:96:46:72:32:01:ad:ab:9e:9d:7a:07:be:0b:
                    5b:12:5a:82:e7:cf:b9:c8:93:94:92:af:d2:d2:b3:
                    db:09:9d:99:82:2d:26:a7:5d:31:5e:0e:8a:d8:d9:
                    88:e3:e4:89:61:9e:54:2d:87:5c:c0:bb:59:2a:c3:
                    8d:fb:c3:1f:cb:3b:cc:da:51:4a:b6:d8:48:59:a2:
                    08:e4:2e:ba:39:04:b9:4b:9d:45:8f:c4:66:cb:df:
                    a8:03:90:d6:40:b0:23:ae:cc:17:18:3d:48:00:ab:
                    97:cb:b4:96:d8:e7:65:fa:bf:0a:ac:46:a3:b9:fd:
                    87:87:d6:14:50:78:e9:ec:c3:b0:f2:47:f4:41:a7:
                    b6:87:1d:de:6c:c8:bd:be:98:a8:eb:a3:8c:55:5f:
                    b6:1b:f1:8d:c0:e0:6e:7d:63:eb:6e:5c:2c:a6:2a:
                    2d:fd:fb:13:a6:59:89:c6:32:b4:8c:7e:eb:e4:12:
                    44:d8:7c:1a:e3:c6:a1:12:1e:10:26:38:bd:46:9e:
                    f0:5c:de:ed:8f:94:37:13:99:70:87:e4:e8:f5:fb:
                    c3:c4:cd:3c:57:92:8a:10:c8:8f:28:79:f5:7c:c7:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:12:AB:3F:AF:3C:5F:E1:52:B8:EB:8D:91:F9:FE:ED:EF:CB:50:AB
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/FBKrP688X-FSuOuNkfn-7e_LUKs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:12:5b:55:7d:cd:42:88:fd:da:0d:35:13:59:55:30:27:b3:
         f2:28:44:3a:c0:cc:50:2e:f7:9c:53:58:e5:23:f7:29:34:c8:
         38:e9:43:ec:64:5c:83:19:09:c0:79:e3:b5:28:dd:97:58:ad:
         fe:a9:6a:1f:87:f6:68:32:b4:7e:a7:aa:28:e5:df:a3:d3:b2:
         ff:b0:58:c4:2b:3b:a0:d6:d6:77:d7:af:e4:ff:c3:07:ef:6e:
         9a:ee:e1:b2:ac:a8:19:84:50:e1:d8:e1:8e:85:55:91:80:6e:
         27:f6:86:42:15:65:f3:ca:f8:57:75:49:57:95:ce:fd:08:c1:
         43:5e:f9:22:ae:8d:ad:f3:57:fd:3c:71:b3:fb:03:e8:f1:ed:
         fe:07:ab:43:b4:44:c8:6e:74:a8:04:a4:c6:17:f3:39:21:a3:
         b3:09:e6:31:ac:39:0d:c6:62:ea:64:0e:18:ea:13:2c:bd:9a:
         e0:05:4c:b4:1a:7b:3b:d9:a2:d6:09:70:8d:01:df:d5:d9:0d:
         d5:7a:8b:78:bf:46:00:a5:b5:7b:36:a8:5f:e0:1d:5a:23:4d:
         df:c2:d2:7e:1e:df:d5:1f:a5:8c:5b:b7:89:72:27:6b:f7:d8:
         fb:5c:3d:99:30:7b:b6:c1:de:2c:9e:f1:92:1b:ba:c7:a1:81:
         20:f7:44:fb
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy
QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI1MTEwMTAx
MzUwNloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTQxMkFCM0ZBRjNDNUZF
MTUyQjhFQjhEOTFGOUZFRURFRkNCNTBBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALzDGCZg2hxI8vMJZdFXJcksJKCuvE28KFEcVKA5rKGWRnIyAa2r
np16B74LWxJagufPuciTlJKv0tKz2wmdmYItJqddMV4OitjZiOPkiWGeVC2HXMC7
WSrDjfvDH8s7zNpRSrbYSFmiCOQuujkEuUudRY/EZsvfqAOQ1kCwI67MFxg9SACr
l8u0ltjnZfq/CqxGo7n9h4fWFFB46ezDsPJH9EGntocd3mzIvb6YqOujjFVfthvx
jcDgbn1j625cLKYqLf37E6ZZicYytIx+6+QSRNh8GuPGoRIeECY4vUae8Fze7Y+U
NxOZcIfk6PX7w8TNPFeSihDIjyh59XzHR+UCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQUEqs/rzxf4VK4642R+f7t78tQqzAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG
8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5
UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDM0L0ZCS3JQNjg4WC1GU3VPdU5rZm4tN2VfTFVLcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACFWF4wDQYJKoZIhvcNAQELBQADggEBAEcSW1V9zUKI/doNNRNZVTAn
s/IoRDrAzFAu95xTWOUj9yk0yDjpQ+xkXIMZCcB547Uo3ZdYrf6pah+H9mgytH6n
qijl36PTsv+wWMQrO6DW1nfXr+T/wwfvbpru4bKsqBmEUOHY4Y6FVZGAbif2hkIV
ZfPK+Fd1SVeVzv0IwUNe+SKuja3zV/08cbP7A+jx7f4Hq0O0RMhudKgEpMYX8zkh
o7MJ5jGsOQ3GYupkDhjqEyy9muAFTLQaezvZotYJcI0B39XZDdV6i3i/RgCltXs2
qF/gHVojTd/C0n4e39UfpYxbt4lyJ2v32PtcPZkwe7bB3iye8ZIbusehgSD3RPs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:11:43 2025 by rpki-client