Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/s_-FapLO6mf2Cm66pEUnQxJxNF8.roa
File:                     s_-FapLO6mf2Cm66pEUnQxJxNF8.roa (raw, json)
Hash identifier:          JPsw8w5gzuIXX0g4pj3lluDM6ovgEVwIQ4Xqv6lXXMc=
Subject key identifier:   B3:FF:85:6A:92:CE:EA:67:F6:0A:6E:BA:A4:45:27:43:12:71:34:5F
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       54
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/s_-FapLO6mf2Cm66pEUnQxJxNF8.roa
Signing time:             Mon 01 Sep 2025 01:37:08 +0000
ROA not before:           Mon 01 Sep 2025 01:37:08 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     18068
IP address blocks:        2405:25c0:a300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 16:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep  1 01:37:08 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=B3FF856A92CEEA67F60A6EBAA44527431271345F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:d3:cc:ec:f5:4e:2e:f2:a8:5d:a0:e2:15:
                    3d:d4:aa:a8:c2:dd:72:61:61:e4:4b:f0:e4:57:3b:
                    d6:29:f2:b2:a9:3d:9c:85:96:aa:42:e5:9c:60:82:
                    f9:f1:58:3a:62:22:ff:18:b6:f8:39:91:7d:21:3c:
                    ce:2c:5d:01:72:ab:9d:51:6a:27:92:de:16:1a:27:
                    87:64:8f:0d:d8:b5:eb:84:29:9b:62:b6:11:1e:bc:
                    8f:ab:33:ef:2f:05:bb:3d:0e:bc:42:ed:80:f5:41:
                    01:63:bd:54:45:13:be:d9:4c:ca:ba:46:48:eb:d0:
                    92:8c:75:1b:f5:3f:f0:94:9e:d1:2d:4a:20:0a:3a:
                    43:ca:50:89:c6:8b:08:fe:be:99:77:17:75:69:7a:
                    80:86:41:4f:a4:cb:d1:c2:ba:5c:b2:32:a7:24:31:
                    3e:35:4c:08:8a:34:fb:65:79:5e:ee:98:a2:ac:1f:
                    b1:63:70:91:56:fe:09:b5:b9:9b:7b:61:9a:bf:5c:
                    97:6f:72:99:c2:ac:f2:f6:be:55:9c:75:19:1f:b2:
                    e8:1c:13:39:d1:7f:2a:45:e9:d6:d6:ec:7f:a1:70:
                    53:91:f3:51:c7:67:98:06:be:ef:e0:7e:8d:4b:ec:
                    b4:dd:47:5e:4f:20:0f:b0:33:25:d0:ea:00:af:13:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:85:6A:92:CE:EA:67:F6:0A:6E:BA:A4:45:27:43:12:71:34:5F
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/s_-FapLO6mf2Cm66pEUnQxJxNF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a300::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:fc:d2:74:04:c1:91:f7:97:d2:2f:42:3b:be:39:1d:45:18:
         78:9e:72:94:7e:6d:52:57:28:86:f1:ec:3a:89:9e:95:4c:f2:
         a6:a3:0c:c0:6c:f3:ec:3a:3c:4c:14:59:98:ef:15:fd:4e:d8:
         02:5a:5e:f5:8c:bd:45:fe:70:14:8d:6e:3a:bb:b8:0f:7a:2c:
         7d:32:15:7f:30:d3:4e:08:dc:ca:61:8b:4b:4e:d2:f5:51:c7:
         93:08:f8:cb:0f:dd:89:44:b1:e2:78:70:d9:25:70:3e:57:3a:
         9e:ec:fd:eb:ac:da:c8:60:61:d0:07:d1:46:8b:8b:d1:80:e9:
         c7:ca:31:86:02:6f:57:49:1e:27:d6:a2:57:17:f3:40:b5:87:
         ca:6c:06:aa:6b:43:85:bd:71:8b:33:14:fb:c6:e2:80:09:77:
         54:c2:68:21:72:61:f6:12:4f:ef:c7:4c:e0:71:02:a4:34:a7:
         5b:71:8e:2d:b8:db:da:ba:85:03:31:ad:03:8c:34:ae:fe:c1:
         35:57:52:28:88:ef:31:7f:e1:a4:e3:cf:70:5d:5f:e1:b8:7f:
         55:12:f8:bf:e6:61:a6:18:e5:f3:ec:7c:0b:7e:a9:2c:b7:90:
         29:e1:42:6f:d2:6b:1f:1a:e4:6f:01:9c:fa:1a:d8:cd:53:34:
         a6:19:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:36:22 2025 by rpki-client