Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/LinJu5ENMSo0cORVwCZHolWEsKE.roa
File:                     LinJu5ENMSo0cORVwCZHolWEsKE.roa (raw, json)
Hash identifier:          nyucqrpxy8Mh9mmoH9MCXLuKtu+b2WI6Wz/PYqtje78=
Subject key identifier:   2E:29:C9:BB:91:0D:31:2A:34:70:E4:55:C0:26:47:A2:55:84:B0:A1
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       034E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LinJu5ENMSo0cORVwCZHolWEsKE.roa
Signing time:             Fri 01 Aug 2025 01:43:38 +0000
ROA not before:           Fri 01 Aug 2025 01:43:38 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     9824
IP address blocks:        219.105.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug  1 01:43:38 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=2E29C9BB910D312A3470E455C02647A25584B0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:fa:8e:62:5b:43:10:0c:34:57:20:d3:1a:
                    06:b2:52:9b:7c:95:32:89:a7:fb:6f:f0:84:61:f4:
                    fe:bc:46:b5:28:ec:c5:97:1f:a7:f2:3c:d3:5b:fa:
                    71:4a:95:64:3a:f1:84:db:6e:25:70:aa:0b:09:2a:
                    2d:fa:18:a4:68:64:a5:ac:9a:36:7f:37:c3:29:1d:
                    c6:fb:0a:75:3e:e5:3b:23:b1:c8:8c:db:3f:4e:3f:
                    fa:ed:b9:fe:44:73:39:87:5b:c3:5b:65:1b:21:42:
                    34:b7:4c:c8:07:bf:c6:a3:7f:c3:c6:a7:db:51:1d:
                    32:4d:ec:3c:50:0d:8c:f2:00:8a:20:91:df:82:0f:
                    78:6c:4b:1e:72:b3:55:5a:1b:0e:55:fb:8c:6a:4a:
                    62:26:ec:1c:9a:e8:d2:98:95:38:d6:5c:91:3c:af:
                    4c:51:46:9f:91:53:a3:5d:9f:0c:4d:59:40:fa:45:
                    f1:d5:82:2c:56:eb:91:fa:c6:ac:f4:96:f0:ea:11:
                    8f:e6:e8:6e:bc:39:83:fe:5a:19:96:04:1c:ce:0f:
                    cf:dc:d0:73:40:72:8b:e2:6e:91:ac:4b:af:ae:81:
                    a7:92:2d:d7:85:87:fd:7e:44:2e:15:e8:49:ce:5a:
                    fa:f9:46:7a:e1:b1:57:3c:89:8f:ee:63:c7:5e:a8:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:C9:BB:91:0D:31:2A:34:70:E4:55:C0:26:47:A2:55:84:B0:A1
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/LinJu5ENMSo0cORVwCZHolWEsKE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:3f:7c:aa:99:7d:a3:f1:1d:11:6b:73:83:e2:2d:ee:e2:
         05:22:b5:1d:0f:3d:8c:86:9a:f5:34:98:1f:67:43:14:c7:a8:
         cf:a0:d7:2d:0a:75:6c:85:00:b8:4e:05:c5:e3:8e:d6:4c:0d:
         fb:99:b0:c1:31:1f:da:50:fa:35:b4:1e:90:0b:d4:94:ac:fe:
         c5:11:93:dd:3e:43:a3:c0:15:55:44:7a:71:85:93:47:33:92:
         85:a8:2f:0c:0b:1a:2d:bb:69:b5:f1:5b:ee:c1:4e:33:70:28:
         1d:2c:0a:9a:f2:6e:45:70:52:55:39:64:b1:94:c4:72:53:12:
         d4:bb:85:ee:05:b9:dc:d9:19:0f:0a:17:1c:c6:05:3c:53:b1:
         12:25:57:a4:45:4f:ec:e9:38:e8:57:a3:84:bf:6b:92:5c:4c:
         04:d0:bc:79:f9:d1:97:68:22:a7:a8:26:37:9c:8d:c6:ef:bd:
         2b:de:99:47:81:e7:0b:ed:cc:3f:d4:e2:70:ad:ed:98:bb:57:
         75:46:9d:63:13:5e:c9:98:32:48:2b:f4:e6:61:9a:1f:32:16:
         1b:8f:46:73:a5:f6:99:c3:f6:18:f0:3a:82:14:3a:e6:03:ff:
         3f:57:2a:49:84:f1:0b:fa:15:99:d0:e8:a4:77:98:4c:d2:98:
         85:2b:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:19:39 2025 by rpki-client