Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/7rip9NGfOi684yfy0j0tMBLmxPg.roa
File:                     7rip9NGfOi684yfy0j0tMBLmxPg.roa (raw, json)
Hash identifier:          CRjmBNfNiGEZoAm+dNSEimud8x5nJK0xjM5oUm+3gcI=
Subject key identifier:   EE:B8:A9:F4:D1:9F:3A:2E:BC:E3:27:F2:D2:3D:2D:30:12:E6:C4:F8
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       53
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/7rip9NGfOi684yfy0j0tMBLmxPg.roa
Signing time:             Mon 01 Sep 2025 01:37:07 +0000
ROA not before:           Mon 01 Sep 2025 01:37:07 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     131969
IP address blocks:        2405:25c0:a2f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 16:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:37:07 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=EEB8A9F4D19F3A2EBCE327F2D23D2D3012E6C4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:67:d3:0b:dd:ea:30:d8:a2:57:4a:d7:af:
                    20:83:cf:f3:58:f9:96:51:2d:fd:a1:97:06:72:47:
                    a8:df:b9:7a:fd:80:83:90:39:5c:f2:cf:bf:7c:2d:
                    05:95:6a:27:4d:f7:08:64:e8:a6:22:e3:16:24:f0:
                    6e:63:8b:b5:da:69:3f:52:1a:20:5b:53:cf:cf:f5:
                    d6:7b:11:75:62:60:ce:f3:45:58:57:6a:ab:39:8f:
                    46:13:98:04:79:2b:8d:20:c9:6d:51:d2:77:f2:f6:
                    b5:dc:5c:47:53:c3:4c:d9:bc:ba:9a:ad:14:cd:1a:
                    5e:6d:ed:25:b7:57:b6:d5:87:8f:4c:48:f3:13:46:
                    3d:30:81:77:2e:fe:a8:08:46:fa:19:4d:c7:31:d5:
                    2f:c3:50:a2:ef:af:0d:17:94:b5:b0:5f:4c:af:29:
                    02:df:c3:0a:5d:94:ea:4c:63:d6:d8:68:ed:0c:8a:
                    fc:00:7d:85:f5:50:30:0d:b4:43:67:d9:b6:f9:4a:
                    3f:dc:28:6a:38:6c:12:2c:4b:26:2c:83:af:0d:d3:
                    9d:c7:d6:f3:43:64:ac:11:13:ec:27:44:81:97:81:
                    87:84:29:c7:87:08:e7:b7:12:50:26:4d:77:ff:e3:
                    c0:d2:ad:cf:1c:cb:ef:3a:f6:e3:6e:3f:c2:fb:7f:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B8:A9:F4:D1:9F:3A:2E:BC:E3:27:F2:D2:3D:2D:30:12:E6:C4:F8
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/7rip9NGfOi684yfy0j0tMBLmxPg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a2f2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:05:86:15:19:05:7e:19:07:b3:90:6e:7a:ff:33:26:7b:
         ef:d0:fb:ad:7a:c9:24:3b:86:c1:2e:70:58:0d:a8:49:c7:3c:
         f8:37:95:26:4a:fa:f2:e1:24:9e:d7:68:f2:bb:ec:75:d5:2f:
         66:e2:7f:e3:06:dd:2d:ef:71:66:bd:ea:2b:94:4e:6d:9d:ed:
         78:7b:cf:ce:a0:aa:f5:ed:bf:9f:61:f5:a0:2d:7c:d7:19:18:
         fe:a4:1f:82:93:20:e3:da:1b:ec:22:c5:26:fe:54:4d:a1:f4:
         fc:9d:ab:d1:e7:4e:06:ce:5e:45:56:8b:0f:f7:0d:6e:d9:c4:
         24:e6:ba:32:d7:2d:b6:e0:ce:09:3e:fd:22:df:a5:67:e6:ae:
         c6:6d:78:e7:ad:97:35:3b:7a:69:a0:c2:37:04:d4:e6:bb:9e:
         e7:59:f1:fa:a8:77:b0:86:fc:a9:9b:d5:06:09:3d:8b:e5:8a:
         75:ac:67:7e:85:9d:a6:1e:3a:db:18:1c:48:e3:d6:ec:10:2e:
         9b:47:36:c2:0f:5e:f5:84:99:dc:04:7c:65:35:22:bf:58:bc:
         85:a5:7a:df:2c:b2:d1:2e:42:fe:c7:86:76:50:58:b1:c6:35:
         81:d5:f8:d7:ef:8c:84:b8:79:fa:d5:b8:14:95:0b:fd:a9:d5:
         ef:e2:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:36:21 2025 by rpki-client