Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa
File:                     Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa (raw, json)
Hash identifier:          BxTfTm+8cQnSWQSpH3WCyvFDH70w0SNtnPi6+y9/1Rw=
Subject key identifier:   2E:FF:EA:3D:1D:1E:17:1B:0A:3E:BF:2F:F4:9D:66:BE:23:06:FF:8B
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       87
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa
Signing time:             Sat 01 Nov 2025 01:31:47 +0000
ROA not before:           Sat 01 Nov 2025 01:31:47 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        160.249.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Nov  1 01:31:47 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=2EFFEA3D1D1E171B0A3EBF2FF49D66BE2306FF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8e:eb:f7:5c:72:29:3e:c8:36:26:fa:9d:1e:
                    7a:39:0a:c6:d2:49:03:55:3c:74:83:a3:18:5a:6a:
                    de:f6:1d:4e:4e:46:18:0b:66:24:4d:d8:0e:06:a9:
                    58:73:56:ec:60:96:c3:be:f8:bc:59:97:da:9a:77:
                    99:f9:6d:4c:25:eb:b3:c0:dd:bf:3b:a7:3d:11:12:
                    c4:e8:f1:d8:cc:a5:c2:25:25:e4:b2:6a:16:5a:fd:
                    7f:ea:25:5f:03:34:56:68:57:72:ac:76:68:5a:18:
                    78:c0:cc:4f:cf:77:0d:0f:22:b4:8d:75:2e:03:ac:
                    e8:1f:99:22:06:34:82:c5:73:34:cb:63:3a:0a:c9:
                    4b:26:07:3b:b2:48:a6:a9:c0:02:da:94:87:a0:c9:
                    0c:cb:3c:19:3e:cc:5e:66:06:08:3a:1d:f2:d2:3f:
                    5c:58:da:d0:75:db:42:a6:a8:a3:c3:c2:98:cc:af:
                    f4:21:83:8c:b4:0a:b9:31:46:ef:9f:6d:eb:45:d9:
                    73:14:01:ab:92:07:3d:f2:74:08:a7:b3:15:91:4b:
                    24:64:c8:e6:12:60:84:20:81:46:31:c4:2e:8f:d8:
                    cf:6b:43:24:a7:a5:be:75:b6:3d:74:b8:c7:51:be:
                    f0:ac:93:8a:ef:da:51:0a:2a:23:e3:63:b9:3f:6c:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:EA:3D:1D:1E:17:1B:0A:3E:BF:2F:F4:9D:66:BE:23:06:FF:8B
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lv_qPR0eFxsKPr8v9J1mviMG_4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:71:f7:1b:de:6a:9f:7a:b1:53:dc:fb:c8:91:02:f0:1c:cc:
         e6:3e:2c:f5:c9:26:0d:c9:a3:02:1f:7c:c3:11:92:c9:7c:5b:
         ff:a3:eb:c7:70:15:5c:e4:69:a5:28:53:de:93:59:8e:1d:bc:
         5e:01:5a:e6:e3:d8:ee:1d:53:b2:0c:0e:00:24:61:73:7b:ec:
         d3:4d:e7:3c:2a:72:ee:5f:ce:76:f4:5c:4e:24:84:da:0a:aa:
         9c:61:4d:53:ed:25:e1:b2:8a:be:7a:33:57:76:59:29:e1:62:
         4d:c2:2c:dc:18:70:5f:69:55:c7:1e:55:9e:01:37:46:e8:77:
         b7:d7:8e:46:6e:33:d2:70:2b:c9:8a:2e:b1:fe:36:f0:57:49:
         0a:7a:73:a3:3f:62:2d:65:75:aa:13:84:35:bc:59:28:b6:ff:
         c3:46:8e:97:dd:71:fe:8c:b7:68:66:b3:e6:ad:7c:fa:26:39:
         a2:fa:29:ad:f0:36:f2:e8:09:79:de:2c:d0:57:70:de:c5:d6:
         a5:9c:0a:d4:46:74:d9:81:42:9b:67:f1:b0:7b:43:ad:84:5f:
         fb:86:e2:6c:47:7f:1d:04:92:91:3c:48:77:95:7e:b9:0d:a0:
         1a:f4:2d:a3:7e:9b:3f:92:45:9f:8a:c4:0c:32:34:55:cd:cf:
         4c:de:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:07:26 2025 by rpki-client