Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/IDoNXt4ftRR1nGiZr7Q_3SbVv5M.roa
File:                     IDoNXt4ftRR1nGiZr7Q_3SbVv5M.roa (raw, json)
Hash identifier:          qK7Hg/vASw41iVrhP0rRTWdrFRxf+CTq5Fg2B/RSjyE=
Subject key identifier:   20:3A:0D:5E:DE:1F:B5:14:75:9C:68:99:AF:B4:3F:DD:26:D5:BF:93
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       49
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/IDoNXt4ftRR1nGiZr7Q_3SbVv5M.roa
Signing time:             Wed 01 Oct 2025 01:35:19 +0000
ROA not before:           Wed 01 Oct 2025 01:35:19 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2516
IP address blocks:        240b:240::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct  1 01:35:19 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=203A0D5EDE1FB514759C6899AFB43FDD26D5BF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:eb:ce:07:42:80:32:4c:37:ce:59:45:d7:
                    30:25:8c:cc:fd:39:1d:80:36:de:ed:55:9e:cf:8d:
                    31:73:1b:4d:f4:ae:28:de:4d:0d:98:f9:6e:30:bc:
                    49:06:12:ad:82:48:3f:64:60:4a:04:cb:5f:a3:d5:
                    57:00:84:93:f6:e3:ea:1b:38:f6:77:31:40:9d:01:
                    aa:41:fc:c9:93:fc:90:5d:d0:31:cf:db:d5:0c:7e:
                    c7:2d:dd:3c:d4:cc:ad:c3:42:37:1a:28:c0:91:4f:
                    4f:18:76:bd:39:d8:17:ce:b9:4c:98:54:d5:b4:5e:
                    6c:ac:60:77:fc:81:e1:f5:5f:fd:16:35:8d:e2:a1:
                    99:43:67:82:c1:39:dd:1a:85:34:4e:e6:80:4c:2b:
                    8b:63:f1:07:45:7e:2c:6e:6a:b1:c9:31:7c:68:03:
                    1f:3b:38:61:45:9a:c0:16:cd:9a:5b:14:64:73:9d:
                    95:0c:ad:61:5f:11:82:85:dd:f6:d1:ec:06:6d:84:
                    0f:0f:21:86:37:e6:1e:26:9c:ff:f4:66:29:d2:da:
                    22:e2:1c:b5:97:dd:ee:d7:1c:e8:9f:bf:37:39:79:
                    0a:94:fd:86:4a:99:c8:71:dd:b3:6d:7d:1b:1d:57:
                    47:61:e9:da:e7:71:a1:89:54:dc:fd:79:07:e3:8a:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3A:0D:5E:DE:1F:B5:14:75:9C:68:99:AF:B4:3F:DD:26:D5:BF:93
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/IDoNXt4ftRR1nGiZr7Q_3SbVv5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:240::/26

    Signature Algorithm: sha256WithRSAEncryption
         96:92:ff:95:53:3f:74:c8:90:60:d4:a2:4c:53:b1:c7:de:f5:
         79:a0:bf:1b:7e:0c:65:82:f0:0e:4c:6f:82:73:da:1a:a4:f7:
         12:be:4a:03:f7:6a:49:8f:29:5e:a8:73:35:84:b1:6d:7a:3a:
         1f:ae:62:b8:f6:88:23:d9:38:4a:89:74:a5:b1:4c:65:01:81:
         e0:39:2b:83:43:ac:3c:63:ff:3f:67:f8:0a:38:65:90:c3:16:
         fb:74:e0:30:4e:77:1b:24:4b:bd:ca:b7:20:e9:80:3e:99:0f:
         9c:c9:38:c6:da:d0:d2:b4:96:fb:78:de:8c:37:3b:f1:89:d4:
         a5:68:fa:61:2e:79:a0:3e:0a:79:ef:cd:8b:f1:2d:1b:92:b1:
         b6:fd:f3:98:23:0f:ba:d6:a6:d9:cb:c8:5e:9a:22:59:52:e8:
         80:d3:fe:9b:2f:3c:56:98:6a:31:c0:06:c5:46:83:e0:c3:b4:
         68:ad:d9:18:2f:a7:7c:70:1c:5b:d3:03:77:06:bc:1e:cb:43:
         22:52:e4:01:e5:ff:18:e6:a6:ec:92:56:72:b0:bf:c8:74:3e:
         dd:9a:e0:1f:48:04:d5:94:e1:b9:63:5e:99:c2:c7:f1:31:53:
         d4:1f:1a:d6:ba:eb:18:67:73:26:7b:e1:aa:04:70:4d:26:03:
         f0:fa:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:28:19 2025 by rpki-client