Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5BuyRWvS6IrC5n6MxMecYzroPLk.roa
File:                     5BuyRWvS6IrC5n6MxMecYzroPLk.roa (raw, json)
Hash identifier:          425se4Y6HOC8UvuzHMHLNGhy0b8l6RQSomSlg+q9X1I=
Subject key identifier:   E4:1B:B2:45:6B:D2:E8:8A:C2:E6:7E:8C:C4:C7:9C:63:3A:E8:3C:B9
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       CB
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5BuyRWvS6IrC5n6MxMecYzroPLk.roa
Signing time:             Thu 24 Jul 2025 01:30:20 +0000
ROA not before:           Thu 24 Jul 2025 01:30:20 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.158.208.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:30:20 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=E41BB2456BD2E88AC2E67E8CC4C79C633AE83CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c8:4a:9f:0e:c5:65:2b:7a:b6:50:75:f8:39:
                    67:2e:93:c9:d2:ae:1f:ad:81:45:03:42:e9:37:c0:
                    2b:fe:d8:c3:e8:c4:1c:6e:e7:8d:3e:d7:a4:52:0b:
                    ce:73:9f:72:59:61:f9:05:fc:65:28:8e:70:72:5c:
                    28:56:f7:ee:48:80:50:43:59:da:57:b4:ec:b6:d3:
                    ce:04:6d:10:1a:2c:bc:18:81:96:8b:df:c2:4c:14:
                    1f:1d:39:7f:94:5e:d1:51:69:75:8b:ca:15:d2:d4:
                    ef:fe:b5:e9:9a:ba:62:b4:5a:2f:7e:a3:73:e5:91:
                    f6:65:2b:a2:53:a8:c1:64:21:19:a0:1b:34:f9:46:
                    12:70:c9:2d:02:5a:ad:55:50:90:7c:b7:81:78:f4:
                    14:4b:f4:75:41:6e:82:3a:00:e4:c0:25:15:3d:e3:
                    56:9c:a8:f3:46:ca:df:44:50:dd:a6:35:0d:c1:5e:
                    4e:c9:9a:db:f9:5b:0a:a9:7e:11:98:35:4f:9f:d6:
                    2d:87:7e:aa:5e:ce:98:cf:00:d3:f7:50:29:17:b1:
                    7f:e0:89:69:38:a6:54:a1:1b:1a:69:33:f8:2d:c4:
                    3c:67:89:66:e9:e3:e4:c8:74:27:ed:bb:b5:2c:29:
                    ba:5e:f4:b7:50:42:18:e2:dc:bc:d5:64:36:8c:b8:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1B:B2:45:6B:D2:E8:8A:C2:E6:7E:8C:C4:C7:9C:63:3A:E8:3C:B9
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5BuyRWvS6IrC5n6MxMecYzroPLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:15:07:c8:75:cc:77:be:12:cb:89:50:e5:2f:2d:91:9b:
         42:42:6f:ef:4f:78:6c:ad:d0:7c:c6:03:07:b4:c8:bf:25:f6:
         ad:24:fb:d8:35:03:40:49:91:00:e9:3e:13:61:87:a7:b3:09:
         ea:02:d5:16:77:5b:ad:74:85:d2:c0:cc:26:59:b4:9b:2f:54:
         6f:ab:5e:56:a2:0f:e3:2b:57:6f:a3:ef:1d:39:c4:f4:8c:9c:
         8d:2b:9e:c7:cf:3a:46:50:9f:f7:61:23:d8:6c:77:9d:ba:f9:
         73:ff:f5:2d:fe:54:59:01:c2:b5:5c:ee:29:af:a7:48:18:8f:
         93:d3:10:ff:c9:16:4b:84:7f:5f:57:47:8f:1b:c1:f8:7b:70:
         f7:83:92:6f:a6:31:51:73:fd:3f:30:76:37:3c:d4:ae:4b:ad:
         ba:0b:cf:e7:03:e9:9a:3c:b8:30:0c:69:78:48:b7:46:fd:0c:
         5a:7a:1c:c0:8c:d6:4b:e0:c6:31:c3:37:75:7c:f9:43:a9:96:
         92:a1:c5:a9:77:1b:d5:0a:84:02:d2:10:ec:ff:2b:08:cc:8a:
         6c:33:7a:0f:63:1e:64:c0:e8:af:85:4e:f5:b4:b2:13:6c:91:
         05:0c:dd:24:7e:14:59:46:2c:a0:ae:20:98:2b:80:12:b2:fa:
         34:32:3e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:07:32 2025 by rpki-client