Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/lbzaSpxOOVQqZean1HtQtgRbLNg.roa
File:                     lbzaSpxOOVQqZean1HtQtgRbLNg.roa (raw, json)
Hash identifier:          oBmWynwR/ZncCaIqJZmCTY2FD3uLXbQQN948/aJxgW4=
Subject key identifier:   95:BC:DA:4A:9C:4E:39:54:2A:65:E6:A7:D4:7B:50:B6:04:5B:2C:D8
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       47
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/lbzaSpxOOVQqZean1HtQtgRbLNg.roa
Signing time:             Wed 01 Oct 2025 01:31:30 +0000
ROA not before:           Wed 01 Oct 2025 01:31:30 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7511
IP address blocks:        110.92.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 20:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Oct  1 01:31:30 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=95BCDA4A9C4E39542A65E6A7D47B50B6045B2CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:60:75:0a:01:9c:89:62:3f:17:6b:c2:09:
                    7e:ac:75:cc:59:9e:01:c4:7c:6c:1d:b7:1e:89:0c:
                    fa:06:57:d2:74:cd:75:8e:cc:5e:00:85:5e:8a:ab:
                    5a:f2:c7:71:da:59:03:64:70:be:31:8d:c2:25:fa:
                    3b:ac:a8:37:be:2b:2f:c4:73:82:2b:7c:b1:57:99:
                    96:b7:97:8a:a5:c3:14:46:4a:7b:18:85:9b:14:32:
                    d2:62:03:5e:42:5a:6c:0f:4d:fd:c4:3a:3f:8b:88:
                    6b:2a:af:fc:97:1f:ae:76:a1:2f:e2:26:1c:62:04:
                    03:62:65:74:9a:34:88:48:b4:bc:d6:f3:cf:8b:2b:
                    08:8c:4a:9b:7f:98:13:1d:67:c0:b1:f9:89:c7:7f:
                    61:ef:c2:ce:7d:92:78:27:3f:c4:ec:b0:34:96:de:
                    0f:cb:d1:86:3b:8d:c3:2b:d7:95:4c:a5:83:01:61:
                    66:fb:6b:c0:a5:b1:a0:46:35:c8:a2:d5:b3:19:61:
                    a6:f6:fb:83:f6:14:83:34:d4:46:66:7a:78:b6:17:
                    d6:5b:29:16:7c:fb:b9:f6:30:33:4e:c6:be:c3:8a:
                    8a:7d:ee:e4:9c:bb:2b:db:bd:b9:8c:29:6d:09:df:
                    59:59:b3:78:fa:aa:1f:2e:7d:d3:65:cb:5d:9a:1b:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:DA:4A:9C:4E:39:54:2A:65:E6:A7:D4:7B:50:B6:04:5B:2C:D8
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/lbzaSpxOOVQqZean1HtQtgRbLNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:8d:a0:84:3b:11:34:fd:6d:5a:9d:54:24:91:e9:3e:36:
         75:1e:e0:64:a5:1f:5a:26:1c:6f:24:f0:d5:da:38:0c:96:a4:
         ed:3e:92:a9:56:3e:2a:bf:87:7c:f5:ac:ae:14:18:3d:6f:71:
         b9:b2:c4:21:0b:6c:05:89:27:39:7f:cc:4d:25:0a:3a:6c:af:
         fa:88:20:90:55:ce:f7:48:2c:fb:2a:aa:f1:43:87:ca:9e:cf:
         0a:6c:97:b7:9d:7d:3c:37:a5:5f:72:c0:4f:02:21:5b:b3:a9:
         6d:7f:5e:a0:2f:d3:79:ea:a7:54:67:fa:01:87:47:0a:b9:4a:
         61:6f:57:e6:11:ce:df:38:12:d3:8f:3b:f5:50:32:81:e0:a2:
         35:ec:ad:54:be:e5:3f:cd:7e:3b:9e:e3:e6:0d:75:73:2b:7f:
         3a:c5:57:52:09:bb:5c:95:2b:e9:83:9f:ee:46:26:6d:9c:98:
         bd:af:fd:99:4b:df:ac:dd:7b:b1:af:30:cb:29:7f:b1:34:ef:
         35:b4:a6:b6:76:6d:41:8d:d0:65:54:92:08:7e:34:95:99:e4:
         47:6c:a7:6b:ca:ad:8c:cb:1e:19:5a:c9:cd:ae:04:4d:2e:54:
         9c:23:6f:2a:d2:39:ae:53:84:42:9c:62:6d:74:67:c8:84:1e:
         a0:11:d8:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:27 2025 by rpki-client