Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3HoBkympEQbQq221ueSfMH-Owy0.roa
File:                     3HoBkympEQbQq221ueSfMH-Owy0.roa (raw, json)
Hash identifier:          Bei9O8WaR0b/GwGWaWe0eqHYxR6LLx6NmQ/a4hfrxYs=
Subject key identifier:   DC:7A:01:93:29:A9:11:06:D0:AB:6D:B5:B9:E4:9F:30:7F:8E:C3:2D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       EA
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3HoBkympEQbQq221ueSfMH-Owy0.roa
Signing time:             Thu 24 Jul 2025 01:58:20 +0000
ROA not before:           Thu 24 Jul 2025 01:58:20 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.239.94.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:58:20 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=DC7A019329A91106D0AB6DB5B9E49F307F8EC32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:7f:ed:dc:28:84:b0:a9:9d:ca:3d:50:56:
                    5d:85:a4:47:0e:cf:8b:54:fc:40:f1:8a:70:3d:71:
                    d5:27:58:41:79:90:0e:85:f1:60:19:7a:4c:20:1f:
                    4d:dd:58:e2:9d:3f:08:ca:7d:7d:43:bb:dc:24:e6:
                    d2:a7:57:6d:a5:e7:44:01:4b:fd:8c:bc:a5:d8:32:
                    11:6d:d9:69:9b:c4:79:a1:d1:57:0d:79:6c:be:c5:
                    2f:36:de:14:67:86:77:f5:77:ae:ea:9d:84:4e:52:
                    e5:32:ed:27:19:79:f5:cd:d1:e9:51:7c:bc:ad:f1:
                    28:2e:85:93:6d:ca:c1:59:fc:a5:25:89:2e:06:e7:
                    32:54:40:3d:a8:35:83:7f:b4:33:b2:f4:80:ce:7d:
                    ff:b9:c1:4a:8c:6a:0a:cf:57:6a:0b:b6:07:82:d9:
                    ab:71:a2:26:b7:7b:5d:d1:c8:d9:55:3c:9d:a8:c7:
                    cc:1d:0e:10:7b:ad:31:48:c8:d0:06:5b:16:0f:28:
                    40:3b:5f:80:25:61:1b:03:e6:b2:f0:56:5f:df:2b:
                    63:ed:38:97:b7:ba:b8:2a:4b:42:ac:2d:bc:9e:1d:
                    0a:db:eb:09:90:78:bb:9e:bb:60:6f:80:3f:b5:7e:
                    72:4a:7e:1c:76:5c:b3:59:3f:08:a2:3b:96:84:5b:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7A:01:93:29:A9:11:06:D0:AB:6D:B5:B9:E4:9F:30:7F:8E:C3:2D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/3HoBkympEQbQq221ueSfMH-Owy0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:82:99:77:c7:9e:e8:70:b8:06:09:12:ff:93:67:84:4e:48:
         ac:4f:fa:98:40:e9:d9:77:08:ae:09:22:25:6a:50:39:d0:4c:
         cd:49:9c:8d:44:84:e7:db:80:92:b9:16:d3:5f:31:14:64:a9:
         a6:48:05:b8:79:2a:1b:b3:9a:07:47:0f:76:2d:f1:20:c7:82:
         50:0e:f8:b1:a7:f4:e6:31:99:5b:bb:f2:85:a3:42:22:06:22:
         cc:d3:d2:76:7d:73:2d:02:66:65:4f:b9:c6:4f:07:18:6c:ed:
         d2:d0:45:10:79:a5:15:e1:a2:20:e4:6d:80:af:30:e5:bd:45:
         4b:68:f9:aa:be:4a:34:00:bc:12:81:28:ce:ed:b2:d8:5d:52:
         9b:b7:19:66:df:b6:a4:e4:b1:9a:b5:38:f1:7f:12:bb:16:04:
         51:79:34:2d:a9:59:c5:b7:d0:b5:c2:aa:ce:70:f9:66:b3:2e:
         64:2d:03:f9:e9:46:bf:f3:b6:82:15:63:40:80:5a:25:d1:7f:
         aa:f4:c7:4d:15:95:84:15:1a:1b:67:55:a0:2d:c6:86:e1:00:
         f4:08:ca:2c:e1:d3:a4:65:44:62:5c:c8:d9:02:4e:c8:d7:97:
         e0:fa:64:eb:d4:c6:11:36:14:97:0a:f5:fb:17:43:6e:56:4b:
         68:59:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:19:52 2025 by rpki-client