Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39002/GxFOVPiHb1DMccPAB6Wcklpb4Bo.roa
File:                     GxFOVPiHb1DMccPAB6Wcklpb4Bo.roa (raw, json)
Hash identifier:          Okk3hEjuiR6zmPiCXs7uX8CkzqjgWicU0gD/cw5AYeM=
Subject key identifier:   1B:11:4E:54:F8:87:6F:50:CC:71:C3:C0:07:A5:9C:92:5A:5B:E0:1A
Certificate issuer:       /CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Certificate serial:       38
Authority key identifier: F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/GxFOVPiHb1DMccPAB6Wcklpb4Bo.roa
Signing time:             Mon 01 Sep 2025 01:28:11 +0000
ROA not before:           Mon 01 Sep 2025 01:28:11 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     0
IP address blocks:        2001:de8:8:9::/64 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 12:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
        Validity
            Not Before: Sep  1 01:28:11 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=1B114E54F8876F50CC71C3C007A59C925A5BE01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:14:19:97:f6:8f:f8:1b:ae:ed:02:32:90:
                    df:6b:40:1c:94:bd:b1:87:a6:92:46:42:06:2e:45:
                    5c:17:ff:e8:ab:2b:61:e9:26:5d:2e:a6:df:00:42:
                    73:a0:ee:e0:e2:a3:82:32:ba:bf:2c:80:91:d5:1e:
                    6b:18:37:d6:07:74:5d:4b:1b:23:80:fd:5e:63:cd:
                    6f:55:07:68:0d:06:49:4a:4a:14:5a:45:ee:03:26:
                    b0:34:c0:85:84:68:5a:75:8c:58:f8:49:7d:45:a2:
                    fe:b5:99:a8:97:8e:8e:7a:2c:4a:e2:f0:f0:a8:e5:
                    65:84:c5:73:a8:7b:89:a3:e7:05:98:0f:d1:3f:79:
                    51:5e:e2:cd:5a:4b:18:9d:2e:00:0e:81:cd:77:f6:
                    08:c6:38:87:2f:41:a1:18:94:60:41:91:75:46:cd:
                    f6:a1:bc:9e:30:4f:81:08:53:95:b5:73:b8:cb:a0:
                    18:81:ad:4c:bd:a4:14:62:0c:e5:17:c3:17:fa:92:
                    32:ab:e3:7c:c5:f5:ac:bd:55:d1:d1:66:ed:af:15:
                    4b:9f:ce:ad:31:1e:cc:5c:48:86:5a:1e:62:f8:b7:
                    97:74:6c:9b:9d:98:1d:99:21:58:0e:98:31:ab:53:
                    37:c6:2e:62:47:bf:89:e4:45:8f:d6:a2:af:0d:43:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:4E:54:F8:87:6F:50:CC:71:C3:C0:07:A5:9C:92:5A:5B:E0:1A
            X509v3 Authority Key Identifier:
                keyid:F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/GxFOVPiHb1DMccPAB6Wcklpb4Bo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:de8:8:9::/64

    Signature Algorithm: sha256WithRSAEncryption
         4e:0a:e4:71:0a:89:b8:49:b7:70:ef:05:b2:7c:06:3a:64:cf:
         c0:f9:ec:86:e8:5e:5e:03:b8:0c:7b:13:ff:d5:54:28:e6:b3:
         02:f6:c5:f3:9d:4b:d4:6a:85:2e:ae:b1:19:e6:88:87:61:23:
         83:0a:b8:c8:df:81:f5:80:cf:18:71:42:5b:52:33:91:6f:ca:
         77:28:02:13:bc:2e:1c:9b:51:f1:a8:7e:aa:b6:b2:b2:0d:24:
         91:fa:1b:af:0c:a1:b7:c7:08:2e:a6:be:b2:8c:53:80:8a:6c:
         39:83:98:7a:d4:9c:83:11:4c:2f:fc:f1:54:af:72:a9:68:46:
         33:ea:51:73:f7:3a:b9:65:e5:e5:97:ec:0e:ae:72:8f:a4:10:
         65:09:bd:b6:0d:4f:5b:7b:23:e1:19:fa:92:8d:95:6f:0d:d9:
         ba:dd:ce:29:24:a1:4b:87:66:04:2a:1a:eb:48:73:8c:9a:f5:
         31:0f:44:b5:ff:73:31:9e:3f:88:e3:21:4b:c3:ee:90:9e:20:
         a0:eb:72:27:b5:d9:b6:18:4f:31:ce:2a:87:0d:d2:84:7c:5e:
         b2:f5:b6:a4:c6:39:61:17:a6:f1:51:9f:1e:c0:2a:da:23:60:
         98:a2:af:5e:f8:a8:e2:08:02:62:1e:eb:66:c4:0b:5f:61:29:
         c4:c4:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:45 2025 by rpki-client