Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9WcDkXe_6M2D4XnpoV038hTamYs.roa
File:                     9WcDkXe_6M2D4XnpoV038hTamYs.roa (raw, json)
Hash identifier:          vCHBxqmNqeBgqD23pZx5jsDRexs9WcOl7rgUnJKh+OA=
Subject key identifier:   F5:67:03:91:77:BF:E8:CD:83:E1:79:E9:A1:5D:37:F2:14:DA:99:8B
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0106
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9WcDkXe_6M2D4XnpoV038hTamYs.roa
Signing time:             Thu 24 Jul 2025 02:05:33 +0000
ROA not before:           Thu 24 Jul 2025 02:05:33 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.133.254.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:05:33 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=F567039177BFE8CD83E179E9A15D37F214DA998B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:b0:11:8b:f4:f0:cf:c6:d5:2a:c2:c5:b3:
                    04:51:dd:ae:6a:e1:42:7f:7d:00:2b:67:ee:ef:42:
                    fb:5c:83:46:30:b6:4e:b8:6c:c6:68:f4:bf:b9:7b:
                    65:8d:70:0f:ea:d3:8e:a7:3f:81:48:79:49:65:ec:
                    1d:e1:e4:64:a5:f7:14:2c:89:24:28:f0:d8:a0:4b:
                    f2:9e:5f:9b:f1:2d:39:b9:c7:0d:7d:e2:3e:cd:7b:
                    20:da:3c:23:6b:c0:84:93:95:1c:c3:1c:f7:6b:81:
                    de:c3:d6:e4:60:7e:3e:46:67:79:cb:36:e9:4d:36:
                    a0:a3:83:ad:ea:c6:d3:65:a0:8c:7a:68:15:14:e5:
                    ec:19:44:63:dd:ac:ec:ad:0b:1b:80:5b:86:84:a0:
                    0a:27:c4:c0:65:82:a8:01:74:b0:6a:5b:40:cc:67:
                    11:f2:57:4b:fe:39:8f:5b:60:62:e2:2d:b8:03:6c:
                    fe:eb:16:ea:38:30:a0:3e:e3:3e:bf:09:8c:6c:28:
                    b3:05:b0:3a:c0:8e:45:92:53:7c:29:ee:38:a2:99:
                    1c:26:88:d2:c5:3d:d5:27:71:44:35:8a:29:3c:a8:
                    6b:33:ac:4d:78:52:9e:8c:db:00:a3:e4:cb:4b:33:
                    ba:cf:08:54:35:fd:2d:f5:ce:d7:57:2d:03:4e:a5:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:67:03:91:77:BF:E8:CD:83:E1:79:E9:A1:5D:37:F2:14:DA:99:8B
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/9WcDkXe_6M2D4XnpoV038hTamYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:34:3d:46:7b:ee:50:04:26:a4:3a:56:01:f6:00:74:06:f6:
         ad:53:50:b0:06:3d:2d:25:4c:08:8c:d7:5d:ad:2c:fd:92:30:
         2f:b6:d4:7c:32:6d:c3:cc:0a:b3:e2:87:73:36:a9:31:5c:83:
         38:50:02:5b:99:b4:2b:00:1c:61:71:2f:ba:51:09:e2:31:65:
         81:2b:2c:62:ee:f8:f9:5f:81:a1:c8:1b:30:04:4d:23:b2:c1:
         87:eb:2f:c4:3d:19:14:ed:91:83:5d:88:af:42:09:ad:34:2f:
         c5:0d:02:34:97:ca:28:26:e2:6b:00:ec:1a:95:83:f5:d4:5b:
         7c:a1:80:4a:a6:56:4a:fe:d1:d9:54:01:96:9d:6d:f3:4f:d4:
         d3:e5:e5:f0:cf:d0:14:7f:bd:22:2e:00:d3:73:8e:a8:e4:af:
         f2:d6:52:06:58:5f:d4:1f:b9:e0:49:ba:3b:08:50:3e:7b:fb:
         b3:44:0c:d4:27:45:5d:a9:f6:cd:f2:ca:1c:9c:b0:ac:eb:f1:
         f8:08:d7:ce:ad:1b:f1:81:d9:a5:37:6a:ed:25:25:46:4e:99:
         09:97:39:6d:22:6c:a0:2c:d5:cd:40:53:2a:fe:51:97:9a:fd:
         3e:e9:4a:57:bd:1c:1a:6c:81:97:40:eb:5d:3f:90:71:cf:45:
         d5:bf:a4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:07:31 2025 by rpki-client