Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/LtekSqM6jfjfx_RNgIrlt7VZljw.roa
File:                     LtekSqM6jfjfx_RNgIrlt7VZljw.roa (raw, json)
Hash identifier:          R+bPC688JdacYX/NYU+TM6OPYbeZ1yxIOU2WE0cWTrc=
Subject key identifier:   2E:D7:A4:4A:A3:3A:8D:F8:DF:C7:F4:4D:80:8A:E5:B7:B5:59:96:3C
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       53
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/LtekSqM6jfjfx_RNgIrlt7VZljw.roa
Signing time:             Thu 25 Sep 2025 04:20:06 +0000
ROA not before:           Thu 25 Sep 2025 04:20:06 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     7671
IP address blocks:        103.28.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Sep 25 04:20:06 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=2ED7A44AA33A8DF8DFC7F44D808AE5B7B559963C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:77:b7:e4:a0:74:e0:be:2c:c8:cf:1b:4c:
                    f9:25:3d:bd:4a:81:17:12:b0:3d:73:96:87:89:c9:
                    24:b0:d3:4b:f4:5e:8b:6e:08:a4:22:59:e2:5e:a8:
                    83:45:c2:a9:97:8e:71:a9:d4:7f:16:a4:aa:79:21:
                    a6:db:03:9b:54:86:52:70:35:22:8f:2c:6e:fd:dd:
                    74:1d:ff:d9:91:31:27:22:8f:27:4a:46:a0:97:d2:
                    8f:83:ad:1a:91:c2:fd:8b:53:7d:48:5b:36:dd:d7:
                    9a:e9:14:49:a9:52:c7:77:1a:6d:48:b2:83:46:3f:
                    1c:8a:69:6c:bb:1b:a4:2f:ed:a3:92:95:cd:6f:ac:
                    cb:1d:a1:37:c8:d9:3d:1c:af:50:90:64:d9:5c:75:
                    26:42:2b:99:56:0c:7e:bd:fb:b9:ea:26:db:8a:b9:
                    72:33:da:a3:d0:6b:36:78:ff:6a:5e:d0:c7:c5:83:
                    ac:18:65:8d:85:d6:87:75:2e:7f:a9:c5:81:45:84:
                    d5:9c:3a:f8:69:b0:8a:5d:b7:a2:a3:cb:3f:06:78:
                    a9:77:bc:2f:03:19:6d:cb:5f:66:d6:45:48:93:47:
                    08:76:49:f9:ac:4a:b8:af:c1:8b:61:17:a0:f5:f3:
                    9b:f3:09:ac:21:cd:6b:2f:b5:23:3e:91:93:ee:23:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:A4:4A:A3:3A:8D:F8:DF:C7:F4:4D:80:8A:E5:B7:B5:59:96:3C
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/LtekSqM6jfjfx_RNgIrlt7VZljw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:72:46:a4:51:84:81:e5:7d:a5:92:c6:9c:64:1e:a4:cb:6c:
         43:70:d2:8a:30:cb:b4:93:58:6d:b5:ba:63:41:35:cb:a4:b3:
         f8:41:20:62:03:4b:93:30:de:f2:44:65:aa:59:25:f8:9c:17:
         57:10:e0:31:2a:24:29:a2:fc:e5:03:4a:e5:95:e0:40:b8:88:
         19:0b:3f:af:2f:eb:95:ab:3a:c8:b7:85:1f:91:eb:74:5d:10:
         37:f2:01:dd:c7:15:1c:ca:1e:43:6b:fd:fe:61:7a:4b:e8:ae:
         2c:a5:6a:ff:97:6d:78:f9:ff:6e:4c:8e:28:5d:be:dd:9b:de:
         17:b5:89:d7:73:1e:b3:d3:a2:f1:a1:8f:80:46:7a:ae:eb:fd:
         56:d2:c7:f6:35:aa:8c:2e:33:3f:43:9d:6e:04:fe:c7:6d:8a:
         18:4b:59:9e:77:14:4c:27:78:07:05:b5:3d:bd:a7:14:8a:db:
         8e:0e:50:3f:0e:2f:11:38:73:28:b2:86:e2:d7:72:50:61:04:
         a2:85:a7:e2:b2:f1:1c:e8:7a:22:3f:d4:b6:8d:fe:41:c8:a9:
         5a:92:d1:bc:6d:28:3e:78:18:4a:6e:6d:49:9e:bc:bc:7f:09:
         b6:a3:f8:16:da:6f:13:a1:52:69:b9:63:7a:fd:d1:03:4c:f4:
         7b:60:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:33:53 2025 by rpki-client