Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/XJsbkiRt3pfrKbgS0Qi8J9PRx_E.roa
File:                     XJsbkiRt3pfrKbgS0Qi8J9PRx_E.roa (raw, json)
Hash identifier:          Edk1QTeRzI3Nk1pVvfGb6Q0G4ClYHdpX3own/9WK6sc=
Subject key identifier:   5C:9B:1B:92:24:6D:DE:97:EB:29:B8:12:D1:08:BC:27:D3:D1:C7:F1
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       40
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/XJsbkiRt3pfrKbgS0Qi8J9PRx_E.roa
Signing time:             Mon 01 Sep 2025 01:32:06 +0000
ROA not before:           Mon 01 Sep 2025 01:32:06 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:a500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:32:06 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=5C9B1B92246DDE97EB29B812D108BC27D3D1C7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:52:0d:f2:6e:95:0d:a2:d2:ba:7a:15:24:
                    30:4d:51:83:10:0a:04:4d:32:e4:25:5a:39:6b:59:
                    16:02:ad:06:e7:ec:15:75:28:8a:99:8a:5a:ff:63:
                    3e:df:47:e6:7a:72:f6:6c:dc:24:08:58:86:74:a1:
                    53:47:6d:ad:66:29:f7:07:ba:90:56:ee:a5:89:c9:
                    c3:b4:c5:db:4e:93:97:42:53:b8:f8:9d:2d:49:86:
                    c9:a7:60:74:fd:b7:f5:13:b7:a2:f0:67:fe:9b:d3:
                    41:88:16:b8:81:da:c5:e5:89:ce:f9:29:47:53:87:
                    ae:d0:37:f4:b0:fd:70:cf:6f:a2:d0:44:fc:22:8c:
                    bd:f5:50:9d:19:28:da:2f:c0:98:db:64:89:e7:82:
                    a5:24:71:d6:a0:b8:48:ab:da:9c:e1:e7:18:67:59:
                    36:d2:78:a3:9c:f0:8e:38:9a:49:cd:c4:22:43:da:
                    6d:30:40:5b:3c:9d:2b:b4:ed:ed:9a:f9:5e:64:ae:
                    65:36:cc:f6:6d:76:8a:95:e2:77:2f:fb:94:ac:8b:
                    d4:e9:a6:83:b0:25:49:7f:51:21:82:ee:c6:c0:89:
                    58:85:3b:5b:84:a2:69:12:68:5c:7f:23:d7:8c:8f:
                    02:c7:d8:96:a6:d3:5b:f2:8e:a7:18:ba:07:a8:de:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9B:1B:92:24:6D:DE:97:EB:29:B8:12:D1:08:BC:27:D3:D1:C7:F1
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/XJsbkiRt3pfrKbgS0Qi8J9PRx_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a500::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:c3:58:9f:a2:1b:2c:2f:12:d9:cd:0f:86:9a:71:14:b2:
         ca:59:57:74:8d:59:68:04:67:f1:e9:63:9f:07:41:15:b4:c5:
         2d:28:71:5f:77:c2:08:da:9a:98:94:7c:3c:e4:ad:73:51:2b:
         d6:f0:d0:7c:8a:18:e8:e6:65:09:b2:1d:a3:49:b5:3c:26:0a:
         0f:db:e5:4e:7b:05:cc:9f:24:db:7d:6f:65:e1:69:66:d9:8c:
         02:12:57:07:3e:5c:3d:b9:33:fb:c2:1a:c7:ba:da:a1:21:41:
         d9:a3:c1:1a:53:4e:61:67:26:ad:e7:9d:f1:78:57:fa:a7:a5:
         67:4b:82:e0:a7:b8:67:e6:78:28:03:4f:f5:f0:12:2f:c2:dc:
         d2:5b:3b:62:21:cf:cd:1f:f7:f4:da:08:fe:1c:52:b2:40:e7:
         99:0e:f8:ed:4a:3a:b0:19:c0:96:ae:30:d7:78:24:c2:ba:08:
         b4:4b:16:ef:9c:e2:8f:fe:97:e1:b5:c5:53:53:f2:cb:d4:97:
         2c:19:c4:88:0f:62:8c:9d:28:98:55:1a:65:a6:7a:8d:70:44:
         94:3a:21:ab:3e:08:7d:bd:a4:da:64:6b:cb:ce:bd:c8:57:6f:
         8f:09:89:f1:dc:81:a8:74:65:97:22:71:32:13:ff:a6:6e:2c:
         5b:af:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:42 2025 by rpki-client