Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/0QBYS7R_uQ-o9BgaaKBae1kaRaY.roa
File:                     0QBYS7R_uQ-o9BgaaKBae1kaRaY.roa (raw, json)
Hash identifier:          khiWglRODzZTe1uYRbx+fIyqzsgvqojTdGNiYSOrFmA=
Subject key identifier:   D1:00:58:4B:B4:7F:B9:0F:A8:F4:18:1A:68:A0:5A:7B:59:1A:45:A6
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       3F
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/0QBYS7R_uQ-o9BgaaKBae1kaRaY.roa
Signing time:             Mon 01 Sep 2025 01:32:06 +0000
ROA not before:           Mon 01 Sep 2025 01:32:06 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:32:06 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=D100584BB47FB90FA8F4181A68A05A7B591A45A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:5e:32:83:95:18:d7:97:86:b6:4b:6d:a8:
                    cc:38:88:0d:a3:f7:3a:33:5d:58:64:02:26:85:c5:
                    ef:8b:59:13:42:6d:ef:a9:21:3e:01:f8:f8:7f:0d:
                    3e:53:02:6a:39:b9:d6:59:db:11:10:f6:95:6c:21:
                    08:8c:47:df:c0:62:89:e3:a8:b5:2f:f2:d2:45:eb:
                    f9:fb:a6:2a:26:33:9b:51:9d:5c:e2:83:36:a1:31:
                    1f:af:09:9b:73:57:2f:5e:a8:1e:f6:37:81:1d:a4:
                    27:95:2e:d0:d2:31:11:88:92:33:8a:24:c1:f1:62:
                    68:fb:56:8c:51:63:c1:24:23:b0:e8:b6:82:19:6e:
                    6b:c4:7b:2a:23:b2:77:0d:b7:a4:57:f7:b6:86:be:
                    58:e1:74:e3:eb:45:03:72:66:59:c2:d3:db:a4:a4:
                    5b:cd:74:0e:61:d3:12:dc:8f:90:d2:2a:7a:ea:03:
                    5f:b0:11:8b:65:54:d8:38:27:e9:2e:2f:70:4b:e8:
                    2e:90:14:0f:aa:3d:93:cb:e2:cd:1a:68:0d:a2:c1:
                    8e:02:07:91:f4:10:02:3d:10:38:99:b5:c1:f4:4b:
                    5f:26:6c:16:96:af:77:b8:7a:b4:9e:df:81:c0:49:
                    ee:bb:f1:3c:79:48:e6:21:2f:13:66:f1:05:86:e6:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:00:58:4B:B4:7F:B9:0F:A8:F4:18:1A:68:A0:5A:7B:59:1A:45:A6
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/0QBYS7R_uQ-o9BgaaKBae1kaRaY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:b8:d0:d1:bc:41:fa:73:5f:66:8b:9c:9f:e0:5a:93:b5:
         3e:92:8d:a7:68:0a:03:44:eb:1b:57:f9:38:2a:a7:dc:d4:b5:
         ef:81:3a:1c:28:28:6f:8d:ae:9e:60:7a:c9:8d:07:20:51:82:
         fb:54:e6:85:31:2b:b7:d3:c4:0e:24:9c:18:2c:db:2c:79:ff:
         2e:7b:58:cb:d0:9c:b5:3c:75:2e:5d:d6:a8:86:e7:25:bd:6e:
         4c:4f:e1:ff:50:b4:19:60:e8:84:3d:a6:03:59:69:cf:84:db:
         e8:92:72:0d:b8:83:ca:4a:2a:17:2d:18:a6:5e:34:4b:14:7e:
         d9:62:5c:ca:46:53:97:99:f5:db:e8:93:df:2e:0d:9a:c3:64:
         fd:5f:72:8f:24:eb:e1:8f:85:3f:38:c6:96:90:f8:7d:4d:f5:
         96:db:be:ce:bd:7d:f2:3a:dc:07:16:5f:7a:b2:1b:47:67:7d:
         30:79:e4:36:2b:3c:25:f5:10:3c:1b:db:f2:6d:fb:cf:14:db:
         67:78:a8:0e:4a:65:1e:9d:a4:11:54:2b:5d:c5:a6:84:16:ce:
         41:db:5f:a7:b7:48:51:3e:b8:f7:35:35:e9:a7:2d:cc:b3:64:
         62:5c:ff:a9:ef:03:77:c1:93:33:54:cf:63:1f:d6:34:fb:b8:
         81:57:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:44 2025 by rpki-client