Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BvpiDhWh63WQxAOYxjlJd4MHcQs.roa
File:                     BvpiDhWh63WQxAOYxjlJd4MHcQs.roa (raw, json)
Hash identifier:          we0s55z8HUfTpOTBzaB5ISUEI0F1aYGxXdaSpN0ocE0=
Subject key identifier:   06:FA:62:0E:15:A1:EB:75:90:C4:03:98:C6:39:49:77:83:07:71:0B
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       DF
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BvpiDhWh63WQxAOYxjlJd4MHcQs.roa
Signing time:             Thu 24 Jul 2025 01:51:00 +0000
ROA not before:           Thu 24 Jul 2025 01:51:00 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.235.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:51:00 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=06FA620E15A1EB7590C40398C63949778307710B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:1d:af:18:15:e6:9e:4d:37:09:09:e6:05:
                    a2:a7:ca:3e:4d:93:f6:d9:64:c4:7a:5e:29:a2:6d:
                    c6:84:f7:9c:36:ff:d6:a7:c1:db:1d:93:88:f4:30:
                    65:ec:c1:b0:38:11:78:ca:03:3e:05:65:dd:a4:d9:
                    15:be:2a:c8:b4:52:d9:00:70:56:6f:bd:fc:93:5c:
                    7f:68:b7:51:09:ca:62:93:97:ac:69:1c:96:ae:c6:
                    9f:de:47:5c:1d:e0:83:72:70:fd:f7:83:f4:dc:60:
                    6e:7b:d6:a4:92:09:a8:fa:ae:fa:8e:4f:99:27:a4:
                    e6:0c:f5:da:4d:4c:1e:66:c2:96:1b:b8:0e:c9:eb:
                    33:85:9b:fe:55:bf:38:41:17:06:f7:ed:91:31:7c:
                    1d:c1:96:31:9e:d9:28:36:eb:b5:22:cd:21:91:7f:
                    b2:da:4d:b2:06:67:ba:2c:f9:c1:53:45:09:6a:3f:
                    a7:42:f7:9b:99:16:04:e4:fe:9d:5b:8f:fb:ac:87:
                    2a:f8:5d:4b:0e:02:09:8d:ef:2a:53:4f:12:f0:08:
                    b5:93:8d:f5:73:9b:32:ef:40:df:78:89:af:91:39:
                    1e:07:2e:90:b1:6f:93:c3:99:44:7a:bb:d8:3b:b1:
                    49:02:95:95:b4:00:7d:d7:e0:f5:e4:d9:b2:5c:e6:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FA:62:0E:15:A1:EB:75:90:C4:03:98:C6:39:49:77:83:07:71:0B
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/BvpiDhWh63WQxAOYxjlJd4MHcQs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:84:bb:7e:86:44:ea:c4:2d:83:c8:f7:1f:a3:ff:6b:e0:
         ff:2f:28:a0:3c:38:c9:24:4e:6c:89:c0:2c:69:13:07:c8:2e:
         36:ca:61:71:0c:3d:3d:05:eb:3e:15:93:a9:95:f3:f4:f5:93:
         b1:61:8c:1e:d0:64:18:f9:45:37:c9:6a:c6:36:dc:22:af:4d:
         de:ad:5f:83:d0:47:a1:fb:06:64:68:af:c5:bc:ec:2c:b0:0a:
         c4:44:b4:5c:b6:60:a4:0e:f4:b3:06:2b:26:17:10:89:f2:fc:
         00:b3:de:03:65:72:51:e2:b7:70:c2:bd:92:c0:27:d0:79:d5:
         a1:5f:aa:e4:fb:5f:8e:d6:39:2d:eb:ef:83:e7:4c:de:39:df:
         ce:cd:65:c4:3b:ed:c4:90:fb:06:88:ee:9d:f7:b0:94:e9:06:
         01:39:fa:55:41:b1:44:2b:2b:04:91:f7:6a:dd:d8:81:55:6c:
         13:5c:2e:6b:c5:00:6e:4a:f9:c1:ed:88:83:d7:fb:e2:a6:a7:
         8e:6d:09:8f:ea:49:94:ff:e6:1b:cd:17:77:06:af:59:bf:18:
         33:11:bd:c8:b2:a7:10:d5:4e:60:f9:f4:58:db:35:57:cb:af:
         32:6b:04:6a:84:32:3f:a1:87:7c:f9:c6:86:0b:fa:e2:bd:a5:
         05:4a:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:09:47 2025 by rpki-client