Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/0kjXV2y4i55_JLcwnZyeGJOlkJM.roa
File:                     0kjXV2y4i55_JLcwnZyeGJOlkJM.roa (raw, json)
Hash identifier:          chGkxZAs7QvWmgjU+JNISXReiGEINMXcbnMIMcqivmw=
Subject key identifier:   D2:48:D7:57:6C:B8:8B:9E:7F:24:B7:30:9D:9C:9E:18:93:A5:90:93
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       3E
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/0kjXV2y4i55_JLcwnZyeGJOlkJM.roa
Signing time:             Mon 01 Sep 2025 01:32:06 +0000
ROA not before:           Mon 01 Sep 2025 01:32:06 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:32:06 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=D248D7576CB88B9E7F24B7309D9C9E1893A59093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:29:c9:e5:15:f5:89:e0:00:ff:c5:46:10:
                    b6:7d:f7:b2:06:9f:99:a4:92:f6:7f:c0:c3:08:ad:
                    19:6e:ac:be:b0:d1:02:8c:bb:40:e6:89:ed:4b:91:
                    9a:e3:f2:aa:41:8a:da:67:9c:78:d7:32:dd:32:2c:
                    fc:31:79:9d:56:2f:26:74:2f:26:1f:0d:08:96:fe:
                    1b:09:ec:2e:18:e2:b3:d0:72:a5:4b:73:25:73:a7:
                    05:fc:b6:f2:da:d1:81:63:78:c1:1f:d7:d5:58:b3:
                    f0:8f:d3:39:16:c0:ab:c6:87:03:20:7d:cc:db:97:
                    a2:bc:f1:90:dc:08:14:02:bd:f3:50:78:33:d3:5b:
                    12:35:45:7b:7c:cd:b4:ea:4d:38:d6:72:67:47:8c:
                    af:9a:77:4b:5b:2a:f1:9a:96:c9:55:2a:ea:06:0c:
                    ca:80:6e:a6:90:c2:1e:24:2e:c0:78:28:cb:3a:09:
                    e4:4d:69:4a:fc:e2:20:f7:f6:1b:f0:5b:22:fc:6e:
                    66:53:5e:21:8f:cc:b0:5f:ad:47:6a:f1:79:28:fd:
                    3a:07:c1:90:b4:de:7e:20:c6:2e:6e:fa:22:d7:22:
                    17:8e:e4:d4:c5:07:58:9b:9a:77:7e:4d:b5:13:2a:
                    5c:e0:4d:a3:94:c0:ab:60:6e:88:1e:63:db:29:3a:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:D7:57:6C:B8:8B:9E:7F:24:B7:30:9D:9C:9E:18:93:A5:90:93
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/0kjXV2y4i55_JLcwnZyeGJOlkJM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:94:f7:61:e2:7f:36:be:4a:57:15:9c:15:de:b6:70:7b:
         35:f8:b7:3d:71:4d:e8:f0:91:d9:57:d3:4e:65:a0:7e:5c:6f:
         be:ce:c0:d2:63:02:77:ad:2d:26:82:2c:b8:e3:ad:bb:77:74:
         5a:01:3e:d5:e9:2f:bc:12:44:18:4a:65:2c:71:2a:f9:41:11:
         6c:39:ee:49:dd:3f:b2:0a:95:88:19:6c:90:56:72:f9:e0:75:
         94:dc:74:93:f0:7e:bd:b9:48:05:a5:60:63:7d:66:49:a7:c9:
         c5:6e:47:d4:30:60:f0:f1:4c:5b:32:59:50:7c:71:3f:ef:30:
         27:e5:a9:0d:4f:2f:98:13:9c:19:80:74:2b:1b:b9:98:b9:26:
         2f:53:e6:7b:91:18:89:ef:6f:df:c8:d5:af:b1:a4:c9:37:ae:
         6b:61:1a:cf:c8:3f:9f:2c:bb:fb:17:8a:8a:29:92:3a:a6:28:
         91:90:e4:10:09:58:da:e6:2c:1b:7a:99:9d:73:93:9c:c7:79:
         06:5e:29:e6:08:fa:7a:ac:b9:08:21:cd:9c:4f:d9:dc:41:f1:
         12:5e:19:6a:ae:88:57:58:99:bc:c8:57:7d:5a:63:3c:f3:84:
         2a:83:82:c8:91:2b:bd:b6:7d:e2:20:89:e5:cd:74:10:c3:b4:
         af:54:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:05:05 2025 by rpki-client