Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Hc0bAVsGCyzOn4TOCMNKGCaMBrE.roa
File:                     Hc0bAVsGCyzOn4TOCMNKGCaMBrE.roa (raw, json)
Hash identifier:          ZWvJpf4ShmZfG1Feg+5uDZ0Gq7SUCxffdBcLPoHPT94=
Subject key identifier:   1D:CD:1B:01:5B:06:0B:2C:CE:9F:84:CE:08:C3:4A:18:26:8C:06:B1
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       35
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Hc0bAVsGCyzOn4TOCMNKGCaMBrE.roa
Signing time:             Mon 01 Sep 2025 01:31:58 +0000
ROA not before:           Mon 01 Sep 2025 01:31:58 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:31:58 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=1DCD1B015B060B2CCE9F84CE08C34A18268C06B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:46:68:b8:24:90:6f:0a:91:39:95:26:bf:
                    74:48:78:8c:bd:4c:a5:43:fe:b1:b5:25:b7:fd:87:
                    0c:4d:1b:ce:06:c4:79:d3:1a:86:77:ef:a2:6d:de:
                    ce:6d:f2:75:57:fe:42:09:74:b8:91:a1:4f:3f:b2:
                    3a:f1:78:2d:04:a8:1d:86:7d:71:af:df:82:ee:66:
                    1a:37:da:b6:a7:f1:c6:ef:66:8c:6a:a4:1c:48:77:
                    40:1e:ac:a5:2b:be:56:4e:44:53:42:9f:ce:26:8c:
                    82:c8:bf:fd:18:8d:f8:85:a9:6c:46:b9:55:b3:41:
                    7a:67:7c:19:f8:d9:f1:0d:bb:61:62:d5:2f:a9:3b:
                    52:82:8d:1d:ff:51:3a:d9:2e:0b:be:42:39:a4:7a:
                    5c:b4:40:53:61:52:e0:97:ff:d2:02:b1:98:88:44:
                    a2:35:db:f1:d3:29:d6:47:34:d6:bd:2d:01:8e:64:
                    3f:91:71:9d:a0:a3:86:ad:ca:b1:1d:c0:3e:ce:fc:
                    db:cf:59:ad:09:d9:97:8c:52:4e:d4:c8:ab:24:9e:
                    e3:f1:21:30:3b:3e:3c:6d:60:59:a9:1f:6d:38:62:
                    b8:5a:77:7e:0d:c9:86:2d:03:6c:f0:55:be:1a:23:
                    35:0d:2d:57:32:b9:5d:de:6b:9d:aa:59:ce:de:c3:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CD:1B:01:5B:06:0B:2C:CE:9F:84:CE:08:C3:4A:18:26:8C:06:B1
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Hc0bAVsGCyzOn4TOCMNKGCaMBrE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:f7:d9:22:2f:70:27:ea:d3:76:d1:17:94:94:47:60:41:
         18:82:38:f1:e8:62:12:36:c8:b2:2e:c8:35:99:e7:57:22:84:
         da:4f:fd:49:47:75:f2:80:17:e1:95:43:5e:f9:ce:84:ca:ec:
         85:7a:7f:5a:b1:2b:55:d9:a4:39:00:d6:36:52:97:f7:67:8e:
         ac:61:a1:0e:90:6b:45:74:69:2a:c1:bb:50:95:b6:e4:4a:e4:
         93:2c:1e:32:d4:24:ed:a0:70:4f:fe:ea:e4:fb:01:ae:e4:da:
         3a:a0:da:2b:7d:02:7b:45:2a:82:5b:38:19:6f:2e:e3:67:18:
         d3:97:21:f5:35:5b:c7:73:2e:2b:08:6c:1d:59:3a:50:ad:3f:
         77:ca:47:c2:c2:70:95:51:87:de:cc:93:72:bd:81:0f:c4:b2:
         84:a4:0d:a1:d9:aa:cd:00:a0:7a:09:e7:e4:af:45:ee:7f:6a:
         02:ef:17:9a:0c:18:6b:be:96:96:7a:93:76:27:30:d3:e8:df:
         88:7f:77:c7:24:79:a5:41:30:d1:6a:f5:a2:ff:fc:69:0c:46:
         98:13:ac:d5:c5:a8:80:a0:e5:d6:7b:21:05:ab:dc:1b:67:0d:
         6e:16:e6:22:65:92:36:a5:e2:0c:1f:6a:8c:4d:63:2f:d3:1f:
         d1:e4:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:44 2025 by rpki-client