Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/r1BHsX-fhnflRsGxZIpJxR3fFOw.roa
File:                     r1BHsX-fhnflRsGxZIpJxR3fFOw.roa (raw, json)
Hash identifier:          qpaxceBXH0RBT8A9v/t58KFrIjrZw9RGl9IQ0WWb0gc=
Subject key identifier:   AF:50:47:B1:7F:9F:86:77:E5:46:C1:B1:64:8A:49:C5:1D:DF:14:EC
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       48
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/r1BHsX-fhnflRsGxZIpJxR3fFOw.roa
Signing time:             Mon 01 Sep 2025 01:32:11 +0000
ROA not before:           Mon 01 Sep 2025 01:32:11 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:ad00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:32:11 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=AF5047B17F9F8677E546C1B1648A49C51DDF14EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:42:e3:05:55:88:92:b3:09:f8:b7:2d:d7:
                    c0:f2:59:0d:4a:12:62:6f:78:d6:a2:7c:62:63:eb:
                    3b:25:3f:06:5d:cf:27:11:b0:d5:12:a0:ca:87:d4:
                    38:bf:dd:df:f7:c6:27:e2:99:3e:e6:66:b6:40:75:
                    c5:68:17:2c:c8:86:72:1d:32:23:58:77:e3:4e:92:
                    65:a1:be:42:1c:4a:4d:8d:3b:79:c2:98:f7:84:35:
                    b2:f4:eb:9d:6d:a2:41:7a:f2:7d:1e:8b:bb:82:30:
                    a7:bd:54:ae:64:4d:a1:53:f0:8c:4f:fa:6e:bc:ab:
                    61:a4:aa:2d:4f:8b:1e:1d:a1:e0:28:37:49:ff:a9:
                    71:e2:3f:1f:52:26:40:cb:27:ae:d6:52:38:99:4d:
                    21:de:8f:d9:72:3a:9e:b9:87:c6:3a:ef:34:e6:11:
                    dd:8c:70:99:58:a4:65:fa:40:79:5b:fe:3f:2a:5d:
                    63:a2:79:19:ef:a1:c1:a7:23:1b:bf:6c:a9:d3:cb:
                    32:1e:a4:cd:41:28:7e:50:3b:db:92:20:8e:05:57:
                    e5:75:ec:1b:d3:58:f0:04:6b:3e:0e:01:69:6d:27:
                    53:45:e0:d0:bf:84:bc:32:28:88:d3:bc:53:fa:9b:
                    3f:1e:ca:11:85:cd:97:3b:27:b5:8a:e8:0c:43:d6:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:50:47:B1:7F:9F:86:77:E5:46:C1:B1:64:8A:49:C5:1D:DF:14:EC
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/r1BHsX-fhnflRsGxZIpJxR3fFOw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:f6:58:00:3e:a4:f4:a2:a5:6e:c2:8a:98:7b:0b:80:f2:2a:
         2d:4a:0f:59:d3:20:d9:33:79:8e:d7:44:94:b9:97:15:2b:fa:
         ed:56:cb:09:de:a1:33:1f:d9:73:65:0b:b2:b7:2a:ef:65:a2:
         82:dd:c9:39:f2:3f:a6:15:31:66:0b:b1:43:3c:0f:cf:c4:ea:
         79:92:b7:8a:3c:6f:b8:b4:c3:f5:7e:5e:4e:7b:5c:04:27:ae:
         4e:47:0f:65:6e:e0:28:3f:48:ec:05:07:0b:be:a7:3d:b5:a8:
         b4:45:77:23:90:b4:f7:ac:f7:74:d3:d4:33:3f:cc:d0:79:2b:
         65:d3:b9:6d:23:7c:65:22:1f:3b:be:3a:f3:b7:6e:60:90:92:
         31:12:f3:a6:d0:d2:18:0d:2c:61:04:70:75:04:fd:7c:8b:fd:
         6d:d6:24:72:92:0d:36:6d:4e:f3:b6:88:8e:cd:fd:ec:f5:56:
         9b:1d:52:ed:bf:b0:91:09:0e:8d:89:72:25:76:59:69:26:22:
         d4:f4:a6:43:83:40:49:d3:c8:fe:49:47:56:b5:e8:b1:36:ce:
         2a:a9:18:e7:98:e3:bf:2a:64:8b:63:94:43:6a:10:5c:a6:55:
         f0:ee:ec:e9:cc:6b:f2:ad:f8:a9:5d:53:ce:24:3e:74:e9:00:
         ba:3f:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:05:15 2025 by rpki-client