Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa
File:                     Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa (raw, json)
Hash identifier:          5bFxdYZ758EkXLXK3PDzGGyTLnsBzgLmuyidR+abhA0=
Subject key identifier:   4E:2C:EA:F4:69:4C:33:68:95:3A:C6:99:B5:91:16:F3:20:98:CD:A4
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       39
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa
Signing time:             Mon 01 Sep 2025 01:32:02 +0000
ROA not before:           Mon 01 Sep 2025 01:32:02 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:32:02 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=4E2CEAF4694C3368953AC699B59116F32098CDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3c:49:a4:81:33:cd:5c:4f:fa:bd:04:bb:9b:
                    04:3c:55:5f:6e:be:a1:dc:3e:a3:0d:79:23:88:5c:
                    f2:55:b7:68:c3:50:45:5e:4a:0d:b2:e3:73:36:93:
                    b3:a4:b0:76:e0:81:22:e0:b4:bf:e7:b7:65:b8:e8:
                    71:da:14:d9:c5:13:4e:8c:bb:3f:15:b4:46:ee:ac:
                    19:a2:07:b8:da:54:61:9b:e7:b3:94:23:56:6b:b5:
                    0c:b7:08:f3:47:ea:26:7b:6e:7b:60:db:b4:b3:4e:
                    ec:15:df:42:89:f0:fb:a3:2d:f1:56:8d:37:f5:3c:
                    66:53:05:2d:b1:03:bb:60:53:57:ac:2e:25:13:56:
                    a4:d6:ec:bf:71:08:5c:51:99:82:8c:16:ba:41:a4:
                    dc:6d:52:4a:c8:61:14:b8:43:75:30:85:d0:fd:45:
                    dc:2f:0e:50:c0:36:a1:92:a2:8c:9e:d6:93:60:02:
                    db:44:f8:3d:2f:b9:8f:0d:ca:3f:3a:af:ce:c4:db:
                    c9:c7:4e:a3:7d:b4:9d:44:16:7d:7c:e4:32:f2:77:
                    59:12:45:87:e8:a3:6e:00:da:93:bf:10:50:44:e9:
                    77:78:4a:b2:0c:a0:f8:41:bd:7b:a4:32:0b:9a:e0:
                    c5:ca:f7:a6:54:b6:ed:c1:72:71:27:10:b1:31:82:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2C:EA:F4:69:4C:33:68:95:3A:C6:99:B5:91:16:F3:20:98:CD:A4
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/Tizq9GlMM2iVOsaZtZEW8yCYzaQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:1d:97:f5:6d:e0:16:cf:d9:8d:b2:51:92:d7:cc:70:16:
         80:8d:7b:1f:65:40:29:76:ba:95:0c:7d:81:fd:43:5f:ac:67:
         e8:72:f6:3f:c2:43:c8:2d:87:ea:bc:5e:e9:6c:7e:27:a5:35:
         91:f3:5d:0e:d8:d8:dd:96:8d:5e:51:28:ed:89:68:e8:36:7e:
         dc:24:15:4b:d1:91:fc:07:99:99:ea:91:23:60:e2:b0:7d:c5:
         a7:9d:49:e9:b5:a0:89:4e:92:7c:49:0f:87:97:e8:3c:93:cb:
         8f:ba:cf:f2:6b:fa:63:d3:94:d6:9b:03:d2:d9:2d:d8:51:0d:
         a9:03:d6:48:24:14:12:53:36:2d:ed:74:2c:58:2f:75:67:c3:
         86:ef:64:d6:0d:a5:7e:25:43:6a:91:6a:15:6a:df:42:ad:29:
         e4:ef:31:c8:8a:a5:6f:83:63:25:b1:86:81:34:30:26:1a:7f:
         24:18:6a:a0:ed:06:e5:22:3b:de:08:0e:17:07:d4:8d:65:9a:
         04:83:0a:d6:e4:e8:4f:65:58:2a:6c:8b:5e:96:34:cc:61:d7:
         a0:67:4c:57:f8:d4:23:17:e4:a4:ee:eb:cb:be:64:69:2a:c9:
         a8:66:47:a4:3f:29:53:89:c3:18:ee:aa:5f:84:dc:9c:e6:8a:
         c8:4a:90:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:05:04 2025 by rpki-client