Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0Fl0xS6NkneuKaXL2AIoVv5wT78.roa
File:                     0Fl0xS6NkneuKaXL2AIoVv5wT78.roa (raw, json)
Hash identifier:          XQ5OwZhHuvHHjunCU0tPiN9SCjlGn8PeiSOT0HJAaZo=
Subject key identifier:   D0:59:74:C5:2E:8D:92:77:AE:29:A5:CB:D8:02:28:56:FE:70:4F:BF
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       B7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0Fl0xS6NkneuKaXL2AIoVv5wT78.roa
Signing time:             Thu 24 Jul 2025 01:09:49 +0000
ROA not before:           Thu 24 Jul 2025 01:09:49 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:49 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=D05974C52E8D9277AE29A5CBD8022856FE704FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:de:e3:9f:be:e6:03:0f:1a:68:55:1d:bc:
                    05:30:55:51:2a:83:73:19:d1:0a:74:4b:2b:5e:81:
                    51:46:c0:9a:50:e6:a0:9c:30:6c:ce:63:b3:66:11:
                    27:c3:e8:f4:99:c6:09:bb:21:9d:e5:78:48:75:0c:
                    1f:bf:5a:b1:6d:ae:02:79:03:1c:88:1a:e2:b3:c0:
                    52:15:24:91:9b:de:9f:1e:87:0a:a1:06:84:5e:0f:
                    23:df:ac:3d:01:e6:17:68:a4:78:b3:f3:c6:f0:4b:
                    15:82:14:34:32:49:28:55:a4:6e:bd:6e:88:a5:f6:
                    36:9d:3e:6b:4a:b1:d0:90:f3:e7:48:a6:b6:c5:e4:
                    21:26:92:81:61:94:3a:1b:61:07:f9:b7:65:e1:a8:
                    d6:cd:10:84:70:10:30:f8:d0:5d:e8:30:25:2b:f9:
                    39:7f:b2:b7:9d:1f:63:87:cb:e0:21:2b:ad:1b:20:
                    c7:7d:60:a6:a5:49:fd:0d:ff:af:1e:cd:60:f0:d2:
                    96:44:aa:54:ec:8d:d4:9c:19:9d:83:e9:d4:3c:34:
                    d2:09:3a:fc:2a:37:86:52:c4:33:c2:12:a1:c8:f0:
                    ae:b1:4c:b5:2d:b2:f9:a4:59:f9:ab:63:b7:9b:e8:
                    c9:c9:76:d5:b5:e4:5b:48:66:2b:bc:e5:2a:90:cd:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:59:74:C5:2E:8D:92:77:AE:29:A5:CB:D8:02:28:56:FE:70:4F:BF
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/0Fl0xS6NkneuKaXL2AIoVv5wT78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c9:b0:86:9e:3c:08:1e:7f:99:12:d8:46:43:1a:fb:d4:32:55:
         0d:6d:97:ac:83:25:be:90:b0:2a:0b:85:ab:73:fd:8b:2d:41:
         44:84:b2:5e:b9:1c:6d:a6:7b:f0:70:e7:98:12:30:ae:9e:09:
         6f:d6:8b:b4:84:88:f6:e0:8e:c2:51:ed:24:78:3e:da:a7:6d:
         fa:cc:d3:64:7e:03:e5:bb:9e:e5:ec:24:4e:d6:ec:ce:ea:35:
         29:dd:a8:fe:13:af:14:18:a3:68:0d:77:86:2b:46:eb:9e:b8:
         4b:a5:85:12:f8:3f:b4:76:f1:54:5c:10:f1:3e:0c:4b:59:84:
         97:28:a7:32:df:83:ab:73:99:91:11:8a:5b:d3:8d:d5:83:d2:
         27:e0:b4:20:6f:07:b7:4d:93:67:cd:02:24:cd:ac:33:21:16:
         86:0a:dd:82:09:8e:0e:1b:1f:b3:79:cf:7a:b9:a7:61:57:1e:
         f0:be:f7:a5:e1:4b:dd:69:7a:85:7f:6b:1d:43:7d:41:fd:e0:
         ab:2a:f7:8e:5c:16:e6:a2:51:d8:76:e9:88:63:ed:7d:2f:01:
         ce:b5:e8:e4:e6:97:a4:ab:78:82:f4:1a:21:71:d7:5c:98:cb:
         0d:cc:76:dd:90:c7:59:00:46:d1:19:71:85:8a:13:32:c1:50:
         75:90:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:10:26 2025 by rpki-client