Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/KWCHVoNNqRQgvCWA4LPeylGKUaY.roa
File:                     KWCHVoNNqRQgvCWA4LPeylGKUaY.roa (raw, json)
Hash identifier:          u+XoGtAB7wD7IyOfmwlGveqE79jZ1jrhMKDyuB4PRE0=
Subject key identifier:   29:60:87:56:83:4D:A9:14:20:BC:25:80:E0:B3:DE:CA:51:8A:51:A6
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       3D
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/KWCHVoNNqRQgvCWA4LPeylGKUaY.roa
Signing time:             Mon 01 Sep 2025 01:32:05 +0000
ROA not before:           Mon 01 Sep 2025 01:32:05 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:32:05 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=29608756834DA91420BC2580E0B3DECA518A51A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:45:19:03:f3:ee:3f:63:56:85:d9:15:8b:
                    db:c1:b8:d7:76:38:4f:f8:d8:11:42:cb:0e:54:ca:
                    e7:75:54:76:e2:88:09:30:75:47:4b:8f:4d:e2:ea:
                    c9:b0:a2:e2:36:7e:a7:13:02:5e:c7:a6:8c:aa:57:
                    30:0e:8e:11:7d:4e:0f:28:7a:be:bb:2e:94:61:a9:
                    ed:10:d8:ed:7e:04:fd:9e:1f:c4:43:91:8d:4f:db:
                    43:95:7a:19:83:ad:31:ce:bd:6e:1d:63:ca:39:be:
                    77:8f:e4:54:2a:d3:04:10:65:d3:8c:a9:76:2d:26:
                    cf:86:13:3f:93:0d:1a:27:4f:0a:44:8c:25:a9:cd:
                    9a:0e:b4:39:bf:b5:b4:e5:07:b2:8e:ec:59:98:fd:
                    6f:f4:b9:37:4a:d5:45:85:f1:05:5a:b9:e5:0d:e4:
                    04:18:cd:10:91:21:01:32:27:80:73:ec:12:c8:c7:
                    2e:0d:8d:7b:3a:9b:5a:7e:a4:bf:08:79:d1:14:21:
                    8e:25:69:d9:a3:bd:20:88:01:2f:58:f7:0a:90:19:
                    e5:a7:e5:f4:7a:c5:84:82:15:27:b2:46:d1:3b:f4:
                    02:5d:f3:d3:be:01:b5:0d:f3:99:e2:41:9b:e2:9e:
                    96:c1:77:79:c5:c5:b3:b8:cb:bf:ec:96:e0:27:2b:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:60:87:56:83:4D:A9:14:20:BC:25:80:E0:B3:DE:CA:51:8A:51:A6
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/KWCHVoNNqRQgvCWA4LPeylGKUaY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:d5:77:c7:fa:81:b0:45:42:12:8a:43:21:b5:39:82:c5:
         0f:51:06:2f:22:19:f6:51:c4:a2:c7:b2:dd:5a:73:cd:62:47:
         7f:f6:ca:43:61:6e:f7:f8:7f:4e:7f:d9:99:ff:8b:3c:c6:3a:
         30:48:b1:4a:70:e0:c8:a5:78:cd:8a:be:57:1d:4a:c6:b9:fd:
         4e:3b:8e:84:36:09:2e:e7:30:7a:fe:8f:1a:bc:2f:0d:11:10:
         58:df:15:57:a6:fb:24:27:f9:ea:49:23:db:e3:6e:5f:e6:f5:
         10:b3:e2:d8:6b:61:42:a2:b4:66:3d:f9:65:9f:59:a9:47:02:
         5d:4b:3e:30:a3:da:5e:5d:f3:c9:19:b3:6d:21:1e:0d:76:b1:
         f2:d6:43:13:31:57:5d:83:a3:cd:d7:59:0a:7f:79:b8:d8:87:
         19:3c:21:dc:c8:9b:a8:66:91:80:8c:2e:3c:a7:ba:8b:47:1a:
         e4:f9:4a:1e:58:73:85:32:03:d6:b5:25:dc:4c:7b:72:f2:7f:
         cc:65:08:1d:b0:b1:4f:93:eb:ad:1f:f3:84:ce:23:39:64:5d:
         11:83:40:43:62:b4:52:40:2d:55:75:a2:f7:47:80:03:9f:33:
         ec:0b:43:ab:4f:f2:29:98:d2:9d:8b:a8:38:f9:87:e4:3f:cf:
         55:a9:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:05:09 2025 by rpki-client