Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8pYOB2asQM56_W-avj42gt7cSx8.roa
File:                     8pYOB2asQM56_W-avj42gt7cSx8.roa (raw, json)
Hash identifier:          DQlc5iT28WZx6vL9+6YzJVowpb4k31WstNRI+ucjBuE=
Subject key identifier:   F2:96:0E:07:66:AC:40:CE:7A:FD:6F:9A:BE:3E:36:82:DE:DC:4B:1F
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       D3
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8pYOB2asQM56_W-avj42gt7cSx8.roa
Signing time:             Thu 24 Jul 2025 01:44:30 +0000
ROA not before:           Thu 24 Jul 2025 01:44:30 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.171.120.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:44:30 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=F2960E0766AC40CE7AFD6F9ABE3E3682DEDC4B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:ba:02:4f:88:b6:7b:f5:3f:0a:75:93:19:
                    7f:31:f9:ec:07:5b:44:fd:d0:18:9f:61:27:38:a8:
                    c7:ff:c0:c1:7a:de:05:95:28:f8:f0:d3:32:34:a3:
                    e3:e6:0b:15:a6:b2:4f:c5:e1:e1:e0:e6:de:63:f7:
                    a7:37:9b:32:c4:8f:c4:43:a8:79:ec:d7:0a:86:3c:
                    59:58:80:67:cb:33:c7:b9:bf:dc:d9:da:80:7f:3a:
                    00:65:59:2b:67:27:9a:25:d6:df:81:51:35:f3:15:
                    b4:d4:83:e6:10:dc:49:e7:05:31:84:4f:3e:af:fa:
                    02:af:49:da:e8:b0:f0:74:7a:92:5a:fa:50:d0:b0:
                    53:1b:e8:28:73:ba:3f:2b:90:24:2d:0e:30:bf:66:
                    85:4b:6b:94:46:2e:54:47:a2:a8:44:ca:17:ba:7b:
                    bb:42:a0:14:8d:fc:dc:d2:09:80:70:f2:fd:63:05:
                    21:f7:c0:3a:0b:5c:a8:7b:88:fb:6e:f1:e4:1d:6f:
                    5d:7c:d8:cd:1c:ed:e8:15:01:d9:6b:ee:d5:bc:89:
                    ec:27:06:db:7d:c1:b5:0a:26:94:aa:ad:fa:26:a2:
                    00:9a:58:a6:b3:a2:df:ce:a1:7d:64:4a:90:e5:e2:
                    59:bb:1a:3b:83:b4:ed:48:06:46:cf:36:4e:04:55:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:0E:07:66:AC:40:CE:7A:FD:6F:9A:BE:3E:36:82:DE:DC:4B:1F
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/8pYOB2asQM56_W-avj42gt7cSx8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:b9:9a:f6:ae:f9:59:1e:ce:80:05:10:d9:dc:bc:02:b0:62:
         7b:9f:86:6b:f8:e9:7d:59:61:fd:36:0d:7d:7a:41:be:75:78:
         c8:3a:c7:b6:2d:fb:9b:f9:07:7a:27:28:21:65:90:7f:08:8b:
         5c:b4:b2:5f:99:62:fa:8f:71:cc:10:c7:91:2d:d6:35:b5:02:
         90:98:c2:2b:27:c7:e0:63:92:e9:4a:11:2a:24:76:e2:db:e3:
         12:99:34:4e:08:b0:13:e6:46:65:dd:40:b7:c4:6e:de:b5:74:
         b4:68:f1:df:c4:9a:cd:c0:61:29:ec:12:3a:30:96:85:2f:24:
         12:d1:c0:a4:c4:2c:0b:54:26:3a:3a:83:a4:97:7e:1f:1a:06:
         08:59:0e:1e:8d:8a:c5:84:b6:eb:22:70:4f:3a:42:05:8c:ca:
         21:81:c8:88:d6:b1:76:0d:46:85:db:8e:af:64:68:ba:a0:67:
         e3:f8:9d:4b:5a:28:db:8c:42:70:e8:02:df:05:6b:4b:be:33:
         04:e9:e0:b1:f8:3a:23:c2:74:aa:3b:59:50:65:5d:4e:19:92:
         70:7d:56:65:bd:f2:ef:15:03:3d:a5:5f:ce:cd:c4:26:dc:40:
         65:80:5e:45:17:a9:8c:de:2c:bb:9c:9f:79:4c:14:56:aa:30:
         02:04:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:04:44 2025 by rpki-client