Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/V5ZzlXh4q-wjyzamyEhBcOUvvOM.roa
File:                     V5ZzlXh4q-wjyzamyEhBcOUvvOM.roa (raw, json)
Hash identifier:          6o+aH6PoHGVgQQGhZxLVWG69b+Nt8JVd5cpRfbvMF+8=
Subject key identifier:   57:96:73:95:78:78:AB:EC:23:CB:36:A6:C8:48:41:70:E5:2F:BC:E3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0485
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/V5ZzlXh4q-wjyzamyEhBcOUvvOM.roa
Signing time:             Wed 01 Oct 2025 01:39:53 +0000
ROA not before:           Wed 01 Oct 2025 01:39:53 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10013
IP address blocks:        175.28.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  1 01:39:53 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=579673957878ABEC23CB36A6C8484170E52FBCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:e1:85:07:07:0b:9f:11:82:f2:52:ff:e0:
                    5d:99:a2:93:38:ac:2a:d9:cc:86:01:c2:d6:d7:da:
                    08:60:88:e8:28:b4:40:93:36:7f:78:00:b4:79:3a:
                    7e:d6:fa:7c:74:35:97:0c:b8:36:fa:94:02:07:0f:
                    ba:26:67:d7:6a:32:6d:6a:f6:c2:e7:ec:26:3b:a7:
                    bf:d4:73:97:cc:bf:a1:9e:5a:a9:4f:e1:9e:70:94:
                    e5:8f:0f:6c:d1:79:b0:5a:d4:0f:19:3e:68:e1:75:
                    59:66:bb:0e:f2:a1:ad:51:4c:a0:ae:fa:da:05:ae:
                    2c:ae:61:81:f9:3c:6e:04:e4:35:ff:00:c1:a7:b5:
                    a5:ef:09:32:a3:fb:0b:67:be:ab:c4:93:69:1a:a2:
                    36:88:e1:0a:80:d2:a3:75:81:81:bd:08:fc:ef:f7:
                    6e:7a:7b:3c:d5:d2:e3:54:14:61:fc:7e:4b:96:3d:
                    cf:c3:fb:bc:9a:43:cb:e7:bf:22:c0:af:72:7c:d4:
                    01:a7:8b:c5:e6:87:b8:8d:20:bf:4b:2b:bc:ab:5d:
                    c1:c7:5a:ba:00:73:02:fe:17:23:73:e6:63:fc:53:
                    a2:e9:7b:cf:7c:57:5a:6e:5a:39:1f:43:a4:48:8e:
                    fc:30:bf:6c:98:13:8c:74:be:87:f2:d4:53:a2:5a:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:73:95:78:78:AB:EC:23:CB:36:A6:C8:48:41:70:E5:2F:BC:E3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/V5ZzlXh4q-wjyzamyEhBcOUvvOM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:d8:d3:0f:32:9a:5a:5c:67:5c:d7:d2:84:ef:a8:b2:8d:4a:
         17:12:6a:e7:99:e0:c1:e9:c0:15:33:5f:a4:7f:23:ac:14:83:
         25:e7:10:ca:5c:3d:44:6e:d5:66:45:ce:b8:aa:d7:b5:ef:79:
         42:a3:81:2a:e7:05:fc:48:40:01:5f:3b:8c:d2:02:4e:ae:a1:
         a6:35:36:c2:29:c5:91:54:12:10:22:ba:42:88:2a:4e:99:04:
         0e:d6:a3:a6:7b:1a:74:bf:d5:c6:8d:85:0d:51:5a:db:62:7d:
         ed:a8:62:3f:f6:87:fa:b6:0c:8e:09:30:54:18:eb:0e:89:ab:
         74:85:5d:3f:38:0f:43:89:3b:6f:98:02:95:5b:d6:79:d7:d8:
         d4:f8:fe:54:54:01:eb:d7:88:f5:7f:85:28:33:87:a2:ab:d0:
         c1:26:cb:4e:a0:1f:45:01:1f:68:c0:28:55:fd:53:16:71:ba:
         9d:0a:ab:7d:7e:66:b0:75:86:ca:66:14:05:56:ac:00:cc:50:
         14:7c:48:eb:a5:90:01:cc:74:89:e3:4a:52:d7:39:1e:76:65:
         e2:1a:bd:79:f1:07:21:20:b3:c2:da:b8:68:b9:c3:da:e0:00:
         3e:e1:e4:02:bd:23:de:3d:7c:42:52:4a:dc:a2:64:e5:66:dd:
         b3:ac:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:12 2025 by rpki-client