Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DXzuRZFkanjceQo8FbKwv6viV90.roa
File:                     DXzuRZFkanjceQo8FbKwv6viV90.roa (raw, json)
Hash identifier:          4EhqVUflwIaluLkfrNCNLEGBND11s+5ER3+QvaAjcDE=
Subject key identifier:   0D:7C:EE:45:91:64:6A:78:DC:79:0A:3C:15:B2:B0:BF:AB:E2:57:DD
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0118
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DXzuRZFkanjceQo8FbKwv6viV90.roa
Signing time:             Thu 24 Jul 2025 02:22:03 +0000
ROA not before:           Thu 24 Jul 2025 02:22:03 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.189.64.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:03 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=0D7CEE4591646A78DC790A3C15B2B0BFABE257DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:d6:4e:50:fc:f8:c4:57:96:70:5d:62:ae:
                    90:d2:9f:e4:04:0f:e4:b5:58:ff:d4:ae:34:2f:21:
                    ec:d5:0d:2e:f9:37:e7:db:43:67:94:2b:6d:15:a3:
                    f9:2f:9a:82:d9:cc:16:fc:c7:48:cd:31:c0:bf:4a:
                    54:35:be:f0:16:3c:ac:34:e8:4a:2a:9e:4d:6c:5f:
                    f7:47:29:e7:2b:94:6b:7f:3b:46:b5:f5:d1:99:80:
                    7f:6e:9d:0d:e2:2e:4d:af:d5:f5:4a:85:da:4c:89:
                    e6:ce:af:6b:b3:96:85:16:93:e6:cb:35:a8:55:81:
                    13:1c:9b:b6:62:ba:08:df:d2:45:be:bb:2b:7b:2b:
                    79:67:a9:fb:56:b4:ce:78:90:00:74:d6:3a:00:b1:
                    91:c7:2b:4f:eb:29:c9:41:9d:b6:bf:41:1e:4e:c4:
                    c8:0a:64:cf:41:5a:4a:63:17:ba:e7:82:06:df:90:
                    b1:99:4f:ed:67:3f:ae:4e:10:1e:79:cd:a1:52:d9:
                    41:5e:a1:8f:95:0c:12:d6:38:f3:d9:3d:f0:7f:9d:
                    fe:d7:29:e4:ed:62:97:cb:2e:a2:dc:44:2a:54:fd:
                    9e:d6:86:62:b7:d4:b6:fb:77:ca:a2:ee:e1:d3:79:
                    c8:14:65:bd:4c:fc:84:f6:0e:1c:1c:c3:44:13:5a:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7C:EE:45:91:64:6A:78:DC:79:0A:3C:15:B2:B0:BF:AB:E2:57:DD
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/DXzuRZFkanjceQo8FbKwv6viV90.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:50:09:46:0e:cf:7f:14:b7:0b:9a:a1:2d:c4:d4:c4:4b:f6:
         28:35:05:ca:8b:b5:e4:ff:5e:ac:32:7d:66:a3:3f:50:59:fa:
         3c:f6:5b:44:58:42:ee:37:2c:a8:15:09:ba:8b:dd:45:ed:66:
         9a:0d:38:3f:e5:49:bf:56:e9:a1:b6:61:b0:3c:1e:f3:db:76:
         ca:22:fd:67:21:15:99:fe:02:a8:17:29:df:a3:48:67:0d:ea:
         60:a9:79:5e:43:77:5f:08:1f:92:43:d6:5c:2c:93:3a:99:7a:
         76:f1:a7:2f:7a:c1:8e:2c:19:42:cf:0e:ae:fa:1e:0c:63:02:
         32:e7:2b:5d:d0:c6:c6:ae:13:11:16:ad:32:8c:ad:ea:d5:4a:
         69:12:48:90:85:af:7b:be:27:23:9b:f9:de:68:c7:02:1f:97:
         af:c4:26:62:27:4a:2e:3c:1b:e1:09:39:f4:b2:52:6f:da:15:
         b8:5f:c4:e2:fd:07:23:c5:67:bf:7d:6e:4c:dc:a4:2f:b0:6c:
         d8:d4:1b:ce:ad:32:ee:67:b2:9b:85:0c:db:bb:1c:01:99:19:
         79:d1:c7:b7:83:4e:29:60:04:e3:31:b7:82:d5:79:c1:d1:5b:
         4b:8c:60:2e:80:0f:bb:74:01:db:3c:c0:76:03:95:5e:8d:dd:
         07:79:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:09:46 2025 by rpki-client