Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/RtGoXeuQfNTWrNakBM_Q97CSBQk.roa
File:                     RtGoXeuQfNTWrNakBM_Q97CSBQk.roa (raw, json)
Hash identifier:          +L2s+Gn+ltQJ8P+8o3wMPtR1uH6ZUCdjgl05vkVMRPw=
Subject key identifier:   46:D1:A8:5D:EB:90:7C:D4:D6:AC:D6:A4:04:CF:D0:F7:B0:92:05:09
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       51
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/RtGoXeuQfNTWrNakBM_Q97CSBQk.roa
Signing time:             Mon 01 Sep 2025 01:37:06 +0000
ROA not before:           Mon 01 Sep 2025 01:37:06 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     131969
IP address blocks:        2405:25c0:a200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:37:06 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=46D1A85DEB907CD4D6ACD6A404CFD0F7B0920509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9f:86:c8:18:c9:aa:7a:be:f7:5e:b4:94:68:
                    2e:04:d8:63:26:d1:8e:ac:c6:32:0b:82:98:1a:bb:
                    d9:65:3d:10:b4:95:b0:0f:b6:e0:50:e6:dd:d3:9f:
                    91:a0:e6:89:80:bb:de:4d:b0:6d:2b:5c:ce:bb:66:
                    a9:12:a9:f8:6e:c5:b6:a9:1e:cb:87:cc:ab:a8:e8:
                    0c:ea:56:95:36:fb:ab:b5:cf:5e:3c:24:05:c4:b5:
                    2d:8c:61:d9:d8:ee:90:8e:b2:96:af:2f:a2:88:ac:
                    52:d8:ab:4a:78:62:d1:f4:58:78:f5:a5:22:11:15:
                    8a:f6:15:31:20:a0:c4:2c:71:c6:6c:3f:8e:ed:ee:
                    e6:97:40:a4:98:51:37:9c:95:8c:8e:98:18:98:68:
                    58:c1:c0:ba:8e:f7:f6:7d:8e:39:7f:dc:a6:fc:1b:
                    53:07:77:a7:d1:fa:27:eb:f5:4c:d8:cc:c2:aa:de:
                    9e:3b:d9:0a:68:d7:f9:84:f8:88:a4:26:a0:58:51:
                    ee:f8:0b:11:54:9b:74:25:71:bc:d1:50:ac:50:1a:
                    bf:14:04:29:9d:75:83:7b:26:08:b8:58:b8:0c:d5:
                    18:20:09:23:fa:e7:28:25:89:69:ef:1d:cb:bf:5e:
                    b4:70:ab:03:d9:81:d4:3f:75:60:0f:d7:e5:d8:66:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D1:A8:5D:EB:90:7C:D4:D6:AC:D6:A4:04:CF:D0:F7:B0:92:05:09
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/RtGoXeuQfNTWrNakBM_Q97CSBQk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:38:be:2a:83:47:03:33:c9:94:65:c0:62:f7:7d:6f:1f:0d:
         bf:36:b5:65:4e:8a:8f:ce:a2:30:9e:f9:32:7b:cd:4c:fa:d9:
         65:54:3f:d3:bc:61:5a:fb:53:ac:d6:fc:c4:1b:84:ae:9c:26:
         01:5d:9d:41:1f:10:38:a8:12:0f:fa:4b:43:13:f8:d4:e7:ea:
         d4:ac:4d:29:62:f4:e9:94:13:37:cf:f2:bf:f9:84:5d:8f:fd:
         dc:30:36:46:ff:eb:c2:08:dc:cf:6f:3c:07:2a:68:46:03:c0:
         c0:76:b8:ac:d6:91:f4:c2:34:2f:e7:b7:10:3e:12:83:9c:b5:
         86:6e:95:1b:47:3b:05:2e:04:58:fa:7c:10:ba:ed:b0:a2:58:
         b9:c1:ee:3a:25:14:cf:31:69:bd:78:ac:76:ef:f0:37:b6:e2:
         15:99:64:02:7a:64:1b:b1:96:f1:89:8d:2c:d7:a1:86:5a:ff:
         2d:8b:46:af:a3:18:32:c2:ec:f9:da:c3:8b:82:c3:e2:7b:7a:
         17:bb:e3:14:5f:c6:1c:c0:7b:68:46:a9:94:fd:a5:26:d4:46:
         3f:c7:21:1a:82:2f:a2:87:c8:06:37:a8:53:6c:b6:29:b1:be:
         de:5e:7a:7c:06:34:ec:be:69:7d:cb:87:7a:7c:e9:91:86:18:
         f3:10:af:8c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB
MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI1MDkwMTAx
MzcwNloXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNDZEMUE4NURFQjkwN0NE
NEQ2QUNENkE0MDRDRkQwRjdCMDkyMDUwOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOafhsgYyap6vvdetJRoLgTYYybRjqzGMguCmBq72WU9ELSVsA+2
4FDm3dOfkaDmiYC73k2wbStczrtmqRKp+G7Ftqkey4fMq6joDOpWlTb7q7XPXjwk
BcS1LYxh2djukI6ylq8vooisUtirSnhi0fRYePWlIhEVivYVMSCgxCxxxmw/ju3u
5pdApJhRN5yVjI6YGJhoWMHAuo739n2OOX/cpvwbUwd3p9H6J+v1TNjMwqrenjvZ
CmjX+YT4iKQmoFhR7vgLEVSbdCVxvNFQrFAavxQEKZ11g3smCLhYuAzVGCAJI/rn
KCWJae8dy79etHCrA9mB1D91YA/X5dhmUc8CAwEAAaOCAiowggImMB0GA1UdDgQW
BBRG0ahd65B81Nas1qQEz9D3sJIFCTAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6
Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm
cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzQ5L1J0R29YZXVRZk5UV3JOYWtCTV9ROTdDU0JRay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBSXAojANBgkqhkiG9w0BAQsFAAOCAQEAcTi+KoNHAzPJlGXAYvd9
bx8Nvza1ZU6Kj86iMJ75MnvNTPrZZVQ/07xhWvtTrNb8xBuErpwmAV2dQR8QOKgS
D/pLQxP41Ofq1KxNKWL06ZQTN8/yv/mEXY/93DA2Rv/rwgjcz288BypoRgPAwHa4
rNaR9MI0L+e3ED4Sg5y1hm6VG0c7BS4EWPp8ELrtsKJYucHuOiUUzzFpvXisdu/w
N7biFZlkAnpkG7GW8YmNLNehhlr/LYtGr6MYMsLs+drDi4LD4nt6F7vjFF/GHMB7
aEaplP2lJtRGP8chGoIvoofIBjeoU2y2KbG+3l56fAY07L5pfcuHenzpkYYY8xCv
jA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 17:40:33 2025 by rpki-client