Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5UpgucJQHR3fT0rC6DOAlZOjw5A.roa
File:                     5UpgucJQHR3fT0rC6DOAlZOjw5A.roa (raw, json)
Hash identifier:          xEYxsscHEVuvzQRAPzupOa345KnxwlW2trSSwQj6Tl4=
Subject key identifier:   E5:4A:60:B9:C2:50:1D:1D:DF:4F:4A:C2:E8:33:80:95:93:A3:C3:90
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       B9
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5UpgucJQHR3fT0rC6DOAlZOjw5A.roa
Signing time:             Thu 24 Jul 2025 01:09:50 +0000
ROA not before:           Thu 24 Jul 2025 01:09:50 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:50 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=E54A60B9C2501D1DDF4F4AC2E833809593A3C390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:9c:93:a6:44:da:51:6c:fb:ec:12:5b:ea:
                    d0:b9:ca:27:4d:32:bc:81:d7:86:8f:cd:1b:05:ae:
                    66:70:7e:5b:12:70:01:da:2a:4d:b0:f7:22:74:65:
                    d3:d3:3f:d8:ec:a4:3e:8e:a0:83:b5:1a:2d:f3:17:
                    79:e8:0f:8e:0c:10:98:10:e0:93:32:f6:1c:d4:05:
                    99:8e:34:fc:89:f1:55:cb:f0:4d:8b:f6:8c:ef:ff:
                    39:27:67:26:46:ac:23:f8:8e:4e:6b:f2:1d:1b:78:
                    f4:47:c0:e1:2e:14:ea:bf:93:44:b8:a6:74:8c:ce:
                    12:b5:8f:95:73:a1:93:45:2b:5f:ae:50:64:6c:ff:
                    26:6d:6e:8e:58:1e:14:f3:9d:a2:c7:30:9a:ac:b2:
                    77:5a:fd:c1:3f:7d:dc:36:26:fc:7f:88:9a:0c:53:
                    00:75:d7:67:57:9b:8b:6f:37:ed:6b:e0:52:f2:8f:
                    5a:9a:85:eb:4c:a2:45:be:e5:5d:3d:20:1c:28:b1:
                    f6:e3:40:29:1e:51:45:8a:90:e7:07:11:75:09:c2:
                    31:79:9e:ed:fa:10:6a:e9:a1:00:b3:e1:b7:e6:9a:
                    e9:08:44:b7:ea:aa:d8:84:ae:ca:13:39:5a:f8:c6:
                    44:13:26:1d:0b:bd:75:e1:44:69:29:b8:f6:5a:2d:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:60:B9:C2:50:1D:1D:DF:4F:4A:C2:E8:33:80:95:93:A3:C3:90
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5UpgucJQHR3fT0rC6DOAlZOjw5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:e2:bd:2e:ba:f6:b9:e2:62:a0:2d:26:98:fb:47:f1:a6:
         20:b5:82:b2:fc:c0:83:8a:0b:57:76:35:5c:df:48:c7:c9:43:
         b2:22:3f:3f:b4:c0:8b:28:65:2c:7e:e6:2b:5a:51:56:ee:5c:
         7e:2f:2e:bc:a3:09:d3:18:51:fd:80:86:2c:3d:d6:29:e1:b4:
         b7:98:1d:56:29:ec:0b:a4:d4:1c:c1:e7:94:92:6a:9d:de:d0:
         0c:7b:47:7f:9b:16:51:71:84:a8:25:83:ed:82:83:f5:84:d9:
         e7:c1:fa:ec:b3:8b:bd:30:df:93:cf:e7:26:c4:d2:f8:ac:5a:
         46:52:d9:20:34:bb:0a:70:e3:6b:99:3b:f9:1b:94:73:82:c6:
         d5:97:12:83:47:2d:79:88:30:be:30:d3:ee:e5:19:24:13:65:
         4e:7b:30:78:d8:c5:c3:b1:fd:b7:ae:9a:fd:61:b9:9f:93:c9:
         95:57:62:00:fe:de:91:66:6a:9c:15:5d:6d:78:6d:ea:11:fb:
         cd:ea:68:d9:02:ec:1b:79:9e:a1:fc:3e:f9:46:f0:9f:c3:ec:
         f5:42:ef:86:31:1e:cb:fb:46:63:28:2f:ad:d2:b3:a3:58:4b:
         d5:b0:5b:69:f6:7d:25:2c:09:f3:33:99:ef:bc:26:5d:57:00:
         90:5f:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:07 2025 by rpki-client