Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30286/5rrKPVEwzY0213QHcGrzQgzB_To.roa
File:                     5rrKPVEwzY0213QHcGrzQgzB_To.roa (raw, json)
Hash identifier:          N8cuETFS1cL8rmm4g5DaVQE3iB/4Bd6XYqVkgl3qezE=
Subject key identifier:   E6:BA:CA:3D:51:30:CD:8D:36:D7:74:07:70:6A:F3:42:0C:C1:FD:3A
Certificate issuer:       /CN=0CE9148428894A9D99226AC1F46D15383D64D856
Certificate serial:       3E
Authority key identifier: 0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/5rrKPVEwzY0213QHcGrzQgzB_To.roa
Signing time:             Sat 01 Nov 2025 01:32:15 +0000
ROA not before:           Sat 01 Nov 2025 01:32:15 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     23805
IP address blocks:        2405:fc80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 16:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE9148428894A9D99226AC1F46D15383D64D856
        Validity
            Not Before: Nov  1 01:32:15 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=E6BACA3D5130CD8D36D77407706AF3420CC1FD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:2c:8c:67:5b:03:79:50:5f:3c:47:2e:a0:
                    cb:dc:14:d6:6c:01:dd:96:bb:e8:e3:d5:f8:a4:b8:
                    ce:b8:fe:86:6a:06:c5:f8:df:de:8c:29:1a:a0:12:
                    b1:1c:fa:87:d8:ca:51:8d:44:11:b0:4d:db:75:de:
                    ae:52:39:7a:bc:f1:78:be:6d:fe:e8:63:07:08:67:
                    73:51:d1:7d:52:5a:5e:83:1a:22:46:5e:0c:e4:3e:
                    44:9d:df:f7:f5:17:94:7e:7d:f2:03:d8:19:15:2a:
                    87:94:fb:df:16:62:aa:50:29:03:fa:02:35:03:f2:
                    bd:ad:df:6d:5a:22:28:55:82:71:94:8c:61:02:5b:
                    e0:aa:1f:a0:f7:84:68:64:21:51:95:aa:26:40:4b:
                    6e:4b:89:61:35:14:1b:ea:f3:ee:a5:88:00:70:db:
                    ab:65:06:ae:c7:6f:da:50:80:a6:dc:37:c3:59:10:
                    56:f2:71:22:28:69:83:13:0d:15:34:36:77:c5:1b:
                    ea:f0:57:85:30:9d:06:9c:c7:27:c3:6a:e6:86:71:
                    7c:44:71:11:ce:46:8f:b9:99:e3:db:2a:48:d4:88:
                    05:b8:ab:ef:78:d7:48:da:0f:d9:34:98:d9:a9:81:
                    c0:b5:bc:80:64:14:55:f9:fd:17:a9:15:3d:b3:1b:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BA:CA:3D:51:30:CD:8D:36:D7:74:07:70:6A:F3:42:0C:C1:FD:3A
            X509v3 Authority Key Identifier:
                keyid:0C:E9:14:84:28:89:4A:9D:99:22:6A:C1:F4:6D:15:38:3D:64:D8:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/DOkUhCiJSp2ZImrB9G0VOD1k2FY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DOkUhCiJSp2ZImrB9G0VOD1k2FY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30286/5rrKPVEwzY0213QHcGrzQgzB_To.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:21:a9:ae:6b:c3:10:cb:2a:62:b8:cf:50:fc:84:8c:d9:65:
         46:a4:99:ad:72:59:65:fb:1d:68:7c:51:d7:ad:c5:09:22:dd:
         47:d2:7e:14:49:95:3c:3a:35:36:e4:80:f8:35:46:a5:53:e4:
         42:31:d3:3f:29:9e:de:fd:c1:b3:02:f5:ab:40:9b:51:12:70:
         aa:83:f6:31:5b:c5:5e:95:0c:23:68:51:79:c8:33:8a:be:41:
         23:c1:fa:87:b3:eb:53:ea:0e:57:e8:f5:f4:07:c7:35:df:84:
         2b:94:29:e6:d6:b0:29:2b:16:34:9a:71:56:2c:35:14:17:d8:
         91:bf:5b:54:54:02:9a:e2:f9:91:74:71:cf:f9:2b:02:6e:98:
         b4:4e:3d:a1:db:61:5d:32:4c:fe:59:2e:94:fb:d8:a0:f4:7c:
         9b:f6:d8:c0:f0:12:63:93:cf:26:07:d7:e5:c0:c2:9d:49:e3:
         01:4b:03:7d:1f:3b:7c:55:d8:0d:4c:e8:bf:71:6f:fa:2f:a3:
         8f:02:15:a5:6c:4c:ef:65:bf:08:f5:ed:b4:2a:37:89:d0:97:
         b6:d6:a9:68:96:1a:dd:d0:eb:2b:57:65:9f:a6:2f:6d:b2:32:
         16:07:e5:e9:db:ce:d8:79:94:93:b9:65:32:df:5b:7b:70:16:
         b6:94:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:32:29 2025 by rpki-client