Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IlpVAhsEA5zMCjzch8tR5rw5cEc.roa
File:                     IlpVAhsEA5zMCjzch8tR5rw5cEc.roa (raw, json)
Hash identifier:          i3PBE+ZlkzDpyR6wAet/zATn+2ieXau/2VrEzbvsEOg=
Subject key identifier:   22:5A:55:02:1B:04:03:9C:CC:0A:3C:DC:87:CB:51:E6:BC:39:70:47
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       050E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IlpVAhsEA5zMCjzch8tR5rw5cEc.roa
Signing time:             Wed 27 Aug 2025 05:23:00 +0000
ROA not before:           Wed 27 Aug 2025 05:23:00 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:42:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 03:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Aug 27 05:23:00 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=225A55021B04039CCC0A3CDC87CB51E6BC397047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:88:f4:73:ab:63:df:56:ae:07:f6:79:0e:
                    58:61:e2:0e:20:42:c2:2e:85:68:ff:f5:44:43:1c:
                    1d:97:4f:23:89:33:5b:2a:3c:14:3b:db:53:9b:da:
                    a0:21:9e:f6:3a:d0:35:ec:14:ac:94:61:a6:bf:96:
                    c0:23:d1:3c:d1:4e:46:f9:c0:5c:5d:f5:e5:32:18:
                    9c:49:34:9b:97:49:fb:65:a2:c3:f6:7b:52:a7:48:
                    15:97:b4:d8:cf:ec:13:ca:25:7a:12:da:cf:44:81:
                    57:cf:17:34:95:e3:48:78:84:47:1f:f4:98:85:72:
                    c9:b2:36:2f:51:2f:87:cd:43:2a:1b:fb:26:46:63:
                    b0:b9:66:21:ab:cf:a5:58:56:6c:d0:74:d2:c1:7a:
                    b5:70:ce:b0:d7:dc:92:a0:7b:2a:bc:20:cd:61:0c:
                    1c:20:75:4b:9e:e6:8d:d8:ce:8b:a9:c8:26:df:9c:
                    0e:88:7f:f4:fe:34:2b:df:9e:51:6b:1d:5b:de:cf:
                    8c:17:9b:80:8d:52:96:0b:9b:50:b3:f7:02:7e:1a:
                    9f:e2:e8:f3:d9:e6:ec:a2:e7:f7:17:5a:7f:92:4d:
                    a1:45:e2:34:12:70:98:72:30:34:cd:d2:60:a3:b6:
                    0c:8e:1d:b0:54:5b:6b:bb:c6:3e:63:c7:87:66:42:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5A:55:02:1B:04:03:9C:CC:0A:3C:DC:87:CB:51:E6:BC:39:70:47
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IlpVAhsEA5zMCjzch8tR5rw5cEc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:42:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:94:53:f6:c4:8e:cb:d8:f3:a6:fb:79:d8:ec:bf:77:8b:14:
         72:0d:31:05:56:f5:89:c1:b7:c3:a4:ad:32:02:09:17:76:19:
         c5:ac:7e:0c:12:9e:15:83:8d:08:23:a6:1c:9b:90:48:dd:9d:
         3c:d0:00:11:b1:fa:d6:77:d6:36:6c:25:b7:6f:c6:e8:a9:08:
         a9:f1:81:33:74:5d:25:56:13:bf:68:c3:23:e5:ac:fe:9b:34:
         81:fb:84:7d:1c:5d:5e:ff:de:b1:ea:4a:41:97:55:30:56:9b:
         4b:ed:96:6c:bd:77:4a:fe:8a:fc:56:77:59:02:0b:20:df:dc:
         94:55:0b:41:15:81:3c:55:8c:44:6d:ac:22:86:c1:a3:af:0f:
         f2:01:d5:95:44:56:d1:6c:ed:f9:ca:4b:72:9e:a2:51:6b:5b:
         cb:b4:c6:ec:86:37:33:10:50:8e:df:3d:a0:35:ad:70:12:ff:
         12:c2:c5:f4:4d:bd:f5:d9:a6:4d:d4:63:f7:3d:69:88:7d:1e:
         54:58:71:0e:2b:f3:5d:4f:3e:6d:85:f3:ca:0f:a3:6d:47:cd:
         e3:8d:f9:bd:b5:e0:04:3c:84:9b:1a:be:5a:aa:36:00:16:0d:
         10:f2:66:4a:78:4e:cc:d4:b0:74:bc:58:61:d2:de:e9:04:b0:
         61:26:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 07:04:22 2025 by rpki-client