Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/pGpjFGYnlW3b9FyCn9796lk9kxE.roa
File:                     pGpjFGYnlW3b9FyCn9796lk9kxE.roa (raw, json)
Hash identifier:          x/lanXsArnFmlzE/qVR685p2ipqdpoZTl002ZO+oEuI=
Subject key identifier:   A4:6A:63:14:66:27:95:6D:DB:F4:5C:82:9F:DE:FD:EA:59:3D:93:11
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       41
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/pGpjFGYnlW3b9FyCn9796lk9kxE.roa
Signing time:             Mon 01 Sep 2025 01:32:07 +0000
ROA not before:           Mon 01 Sep 2025 01:32:07 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:a600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:32:07 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=A46A63146627956DDBF45C829FDEFDEA593D9311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:b0:17:db:e5:26:ac:16:d3:12:ba:30:ef:
                    19:eb:bd:b1:e3:aa:1d:ba:90:f8:e5:c5:7c:38:b6:
                    e0:2f:ea:5e:28:c8:ad:89:25:4f:c0:97:b9:74:62:
                    8f:b6:00:ee:ee:c6:d8:1d:32:85:a6:3e:30:68:25:
                    2a:a2:d8:27:95:8b:d3:b5:1a:ab:e5:a1:2c:31:7a:
                    c0:53:58:9a:7d:61:87:41:d0:42:60:b6:4e:32:f9:
                    0d:a2:4e:6c:a7:ad:c2:1e:36:bd:19:0f:92:cc:c0:
                    d9:40:c8:1c:c9:3e:be:46:cd:bf:2a:13:1c:e4:ad:
                    0f:91:9c:e3:94:da:19:fc:a9:00:68:60:92:e6:2e:
                    f7:54:f7:66:3b:f5:e8:2b:67:30:23:58:ee:5c:a0:
                    8f:09:05:aa:3b:4a:e6:54:3b:80:2b:03:80:89:f5:
                    ad:41:81:7b:c4:d5:a3:6c:2b:fe:38:ee:cb:ec:a6:
                    e3:a2:6a:30:37:01:86:9b:cf:e8:43:fd:a0:f1:d1:
                    86:7f:ec:bc:af:03:5a:b1:fd:a1:be:70:87:6f:20:
                    d7:30:70:64:fb:e7:8a:06:0b:ee:c7:e4:f8:7b:fd:
                    50:f0:00:95:ce:7d:fd:26:b9:8a:46:c7:09:d9:fe:
                    ee:21:99:1f:f5:79:f7:ec:ed:8c:9c:3e:7a:8c:73:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:63:14:66:27:95:6D:DB:F4:5C:82:9F:DE:FD:EA:59:3D:93:11
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/pGpjFGYnlW3b9FyCn9796lk9kxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a600::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:99:60:57:9b:b4:25:18:5e:e1:76:91:5d:5b:ee:fb:ec:
         b1:92:0f:df:74:8f:43:49:18:30:5f:e0:49:7e:cf:2c:f4:ca:
         f4:dd:4d:08:e6:47:67:db:1d:05:36:93:3e:8f:c8:c4:35:77:
         00:4b:79:c4:4e:e9:9a:b5:99:fd:8d:f7:3f:08:27:de:ca:73:
         3f:5d:8a:f9:08:fd:e3:bf:21:57:fd:46:59:8a:da:81:ca:58:
         1f:98:7d:d3:7f:6e:72:9e:15:fe:89:a9:31:eb:10:2c:3d:d1:
         7e:37:25:fe:f7:1a:65:c6:ba:d4:f6:4e:fa:2a:69:92:fc:95:
         83:33:95:0c:80:88:3f:e5:d2:87:75:7e:56:74:2e:3c:d4:10:
         25:74:50:5d:ec:64:93:f8:eb:b3:86:f2:52:34:8e:4e:75:b2:
         ea:53:d7:01:e8:47:28:1d:49:6f:f4:0f:f3:a8:16:3b:f4:4d:
         a0:f3:b0:57:b0:7d:8d:fd:97:4e:5d:c5:b7:7b:75:f7:04:03:
         11:50:cb:75:b2:07:d5:36:2c:37:ef:9c:4b:b5:a6:88:e5:7a:
         54:9a:50:26:db:a5:f3:ce:0f:d7:aa:0e:f1:66:d7:08:93:8d:
         14:19:eb:a4:c9:46:e4:bc:36:77:09:3f:4e:c3:de:3f:12:e6:
         21:a6:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:05:13 2025 by rpki-client