Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1joexJVlGmxACR-EJOZ1WJKtg8I.roa
File:                     1joexJVlGmxACR-EJOZ1WJKtg8I.roa (raw, json)
Hash identifier:          td7N+MCwnGEofSDTBCojlCtf80nsv96TMoK3Jb9n/+A=
Subject key identifier:   D6:3A:1E:C4:95:65:1A:6C:40:09:1F:84:24:E6:75:58:92:AD:83:C2
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0102
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1joexJVlGmxACR-EJOZ1WJKtg8I.roa
Signing time:             Thu 24 Jul 2025 02:05:31 +0000
ROA not before:           Thu 24 Jul 2025 02:05:31 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.120.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:05:31 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=D63A1EC495651A6C40091F8424E6755892AD83C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:3c:3d:4f:79:98:4d:df:6a:a2:93:8e:e1:
                    e3:ba:c4:90:6d:c7:34:e7:95:4b:4c:75:a5:62:9c:
                    e6:87:c7:e4:fe:42:77:e0:c4:08:08:c0:41:88:d6:
                    fd:1a:d1:a7:39:5b:f7:ac:ec:50:1e:68:a0:91:00:
                    ba:ab:7b:cd:3e:c3:7c:d1:ca:d7:85:99:23:7a:9b:
                    61:c5:ce:68:d3:37:7f:3a:78:ac:4d:e8:ff:65:05:
                    74:31:c7:41:d4:73:a7:ac:44:c4:44:ff:1f:09:52:
                    60:0f:37:a9:2c:02:b0:15:aa:60:d4:28:a3:0b:b3:
                    a2:d0:7c:d6:e8:02:d6:96:c3:3f:7d:02:8f:91:67:
                    a6:16:d5:ae:99:f2:d5:e6:58:2e:50:a4:4e:03:cd:
                    44:cf:fe:a3:e7:33:82:73:4f:02:51:ba:0e:24:9c:
                    0a:29:b0:22:90:38:06:51:a2:d6:68:1a:01:d3:ec:
                    2d:77:be:ea:82:dd:b2:95:6b:c1:c8:b1:92:c3:6c:
                    fc:24:06:d0:87:82:e7:35:8e:86:26:58:28:bf:ce:
                    fa:38:ec:ee:a2:36:55:7e:aa:aa:f7:2d:03:06:a0:
                    95:b6:ff:3a:a6:a0:56:2e:0d:4e:1f:b1:72:76:29:
                    bf:9a:48:ea:02:25:9c:82:a6:27:9f:c6:c1:88:8e:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:1E:C4:95:65:1A:6C:40:09:1F:84:24:E6:75:58:92:AD:83:C2
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1joexJVlGmxACR-EJOZ1WJKtg8I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:35:4f:66:cf:40:f1:36:7c:ec:28:4a:79:1d:cb:fd:b8:
         bd:79:a9:2f:fd:c8:37:b3:3d:b8:74:38:ca:69:6a:7f:48:18:
         15:5e:b4:2e:44:8a:35:58:36:86:68:76:37:f2:fb:45:c7:41:
         24:ae:33:ba:a4:32:2b:a6:9b:dd:43:99:80:c3:8f:85:85:e8:
         fd:c3:26:60:73:8b:14:10:41:34:7a:39:53:d7:e3:fa:b5:a0:
         67:c4:61:24:ec:c7:2b:a6:5d:db:e8:32:db:b4:2f:5a:27:80:
         28:a4:d3:27:5e:21:b4:21:ef:3a:05:eb:c1:1c:29:2d:e8:4b:
         50:9e:77:9d:ca:bc:b3:f0:d8:ca:5b:12:9b:7d:aa:c7:98:04:
         64:26:01:d1:5a:f2:24:fb:07:06:23:d7:c2:22:4e:64:ea:a1:
         10:93:bf:92:31:7e:e2:bf:8a:2f:09:86:dd:99:4d:59:fd:dd:
         56:20:6d:29:d0:be:7b:10:e7:2b:29:15:df:56:fb:b4:1e:1e:
         8a:63:f4:9a:80:8b:19:96:74:73:cd:66:7b:53:0a:c3:ee:40:
         de:be:38:58:bf:56:dd:d1:59:f0:45:81:2e:a7:1d:10:1a:b3:
         b5:e8:4c:b4:5d:67:20:46:f4:84:f2:56:f0:2f:b5:96:77:78:
         5b:38:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:06 2025 by rpki-client