Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/805M3jKit23HC8GK0xsxX-Ty_CU.roa
File:                     805M3jKit23HC8GK0xsxX-Ty_CU.roa (raw, json)
Hash identifier:          OxHKt16YbVWIYIMp8I3Lb1+6kP+Qk/Mi9+XgGGzPBjE=
Subject key identifier:   F3:4E:4C:DE:32:A2:B7:6D:C7:0B:C1:8A:D3:1B:31:5F:E4:F2:FC:25
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       4E
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/805M3jKit23HC8GK0xsxX-Ty_CU.roa
Signing time:             Mon 01 Sep 2025 01:37:02 +0000
ROA not before:           Mon 01 Sep 2025 01:37:02 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:37:02 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=F34E4CDE32A2B76DC70BC18AD31B315FE4F2FC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:b2:60:97:0e:ab:19:8c:25:db:6c:86:1e:
                    a5:fb:80:7c:c7:25:46:ff:80:c7:df:97:98:4d:6d:
                    b5:e8:9b:98:9a:54:6d:c2:60:eb:4f:94:7f:3b:29:
                    84:66:49:bf:62:bb:0d:f4:6e:cc:e6:2d:c1:9e:d3:
                    95:30:62:f6:f2:3a:f7:17:5e:a2:ee:64:d8:00:75:
                    51:5f:aa:fb:aa:49:4e:3f:19:a1:7c:81:7d:51:4a:
                    02:2c:2f:2e:35:76:27:25:ed:0a:66:78:5e:0a:75:
                    a7:ab:df:22:ac:ed:b0:2d:83:ab:25:e2:36:b8:b3:
                    4e:d0:68:59:c6:a9:f9:d8:6a:dd:97:be:3f:93:aa:
                    85:27:8f:1b:de:52:39:bd:3e:5f:54:e8:da:f2:9c:
                    14:6d:d7:3a:c1:df:44:38:8f:37:fa:3e:15:48:8d:
                    2c:9c:38:0d:1c:82:80:cc:c1:b7:2a:5e:97:a3:fa:
                    a7:53:aa:0f:bd:ba:c8:45:b1:10:df:b4:d9:78:93:
                    06:ee:42:2f:09:14:b4:38:3c:fe:93:e4:00:ca:46:
                    08:49:4c:8f:d2:ac:1c:1f:03:95:f9:23:a4:cf:8d:
                    f9:31:9a:cb:01:90:3f:2e:13:a6:87:a1:bb:c0:1a:
                    58:d4:7b:b0:28:00:6c:11:ff:d3:d5:3e:80:cc:4b:
                    73:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4E:4C:DE:32:A2:B7:6D:C7:0B:C1:8A:D3:1B:31:5F:E4:F2:FC:25
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/805M3jKit23HC8GK0xsxX-Ty_CU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:5f:34:2a:db:e9:d4:13:b1:79:fd:f3:c0:c5:70:79:90:84:
         08:9e:a1:04:70:c8:a5:9b:82:e6:3d:00:df:57:97:d1:ac:0b:
         49:84:29:20:ca:b9:da:c9:8b:2c:fc:11:b9:99:a6:89:12:63:
         38:55:8c:81:c2:e2:c0:d8:7b:d4:1c:62:a0:f1:ff:8e:d8:ac:
         a0:2a:f9:31:84:cc:6b:d2:1e:a6:0b:a8:7a:23:55:87:28:5e:
         5c:79:0e:93:72:a0:7e:b9:3d:e9:bc:be:27:10:06:19:76:e5:
         a6:0e:13:6e:e1:4d:55:1d:f7:1a:e5:00:70:1d:85:85:75:a1:
         a0:d6:b8:a9:c7:e1:70:29:28:39:6a:31:6d:ac:86:43:42:fc:
         a9:61:c8:ef:b3:c9:59:45:b3:cb:63:6c:27:f2:53:e1:70:23:
         9a:a0:6b:5c:5b:36:76:e9:5f:27:b6:4b:86:ef:af:26:f4:19:
         27:51:f5:b6:b4:17:3a:67:ec:fe:53:0c:f3:09:ab:35:ac:61:
         fa:a5:de:4a:cc:68:ed:89:0e:16:0b:29:04:0f:27:e6:31:a6:
         fe:60:11:66:18:78:e3:2f:cf:ac:2c:8e:8e:5f:fc:07:14:50:
         4e:db:f1:38:81:82:e5:68:0e:4a:e4:83:ad:ce:1d:44:84:52:
         a7:cc:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:05:15 2025 by rpki-client