Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EUChj9fo2cyTznMenqQ86xHYwMQ.roa
File:                     EUChj9fo2cyTznMenqQ86xHYwMQ.roa (raw, json)
Hash identifier:          6htht7UoDr0MpO4j8oFcgMhlYiGrHSjOdGv9ELNxfT0=
Subject key identifier:   11:40:A1:8F:D7:E8:D9:CC:93:CE:73:1E:9E:A4:3C:EB:11:D8:C0:C4
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       CC
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EUChj9fo2cyTznMenqQ86xHYwMQ.roa
Signing time:             Thu 24 Jul 2025 01:30:20 +0000
ROA not before:           Thu 24 Jul 2025 01:30:20 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.158.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:30:20 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=1140A18FD7E8D9CC93CE731E9EA43CEB11D8C0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:a9:ee:ae:90:a3:59:29:67:a8:06:ff:c0:
                    0b:24:eb:81:64:8e:cd:66:b5:51:24:40:6c:42:6b:
                    b4:56:8e:aa:18:db:55:57:e6:68:69:d1:b3:77:9d:
                    a2:0b:2f:16:c2:37:4c:08:fb:b1:c4:f0:8a:8d:cf:
                    e9:2e:5f:fd:7c:64:0a:e0:7b:24:70:a7:fc:d4:56:
                    8b:15:58:e2:dc:56:34:ca:62:83:18:0d:72:f7:44:
                    db:31:9a:2a:5b:12:61:a6:76:ce:21:fc:91:29:de:
                    f8:fc:19:11:42:52:10:8d:10:f0:b2:8c:88:37:49:
                    e9:3d:c1:c6:f5:3e:15:45:88:a7:b1:5e:6d:1e:54:
                    ec:e5:41:35:43:2e:23:3e:97:fa:16:8f:5c:98:2b:
                    54:de:4b:62:db:c8:99:8c:d5:54:db:71:15:bf:d8:
                    ad:be:34:86:17:34:11:41:03:7b:0b:86:f2:a1:9c:
                    71:c8:2a:e9:71:1b:e8:ed:ee:43:97:10:45:63:16:
                    de:ff:95:16:ce:3c:e2:62:e2:2b:bf:2e:e1:0c:bf:
                    58:36:d3:36:af:23:e3:c5:b9:94:3b:f7:9c:6c:ef:
                    28:e6:a0:dd:ad:32:8f:46:a2:9f:8b:8e:dc:f4:75:
                    fd:04:9f:f7:e2:77:03:83:39:3d:d2:8e:06:8e:21:
                    55:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:A1:8F:D7:E8:D9:CC:93:CE:73:1E:9E:A4:3C:EB:11:D8:C0:C4
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/EUChj9fo2cyTznMenqQ86xHYwMQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:dc:c7:c7:84:fb:ae:1e:da:2c:66:d7:d9:fe:09:ba:7e:2f:
         71:b9:8b:88:a5:90:36:2a:86:61:9a:c6:b3:cf:1b:e0:2d:32:
         18:2e:db:12:da:ea:93:67:91:c8:0e:0f:76:ee:60:42:d2:54:
         84:91:0e:73:dc:69:48:54:10:7d:a1:9c:89:77:22:c0:41:1a:
         a9:d7:cf:d9:ba:e2:f5:b0:c6:52:72:48:d7:7c:d5:fb:cd:31:
         52:c6:9a:80:e0:e1:9a:d4:70:92:fb:03:65:33:37:1f:07:22:
         b5:4b:f9:f0:cb:bb:c8:10:b9:b8:6d:c6:49:42:33:ba:13:07:
         a3:f2:b6:19:de:19:54:2a:29:47:a6:b6:8e:f7:1e:c0:d5:25:
         d8:d6:84:f1:25:02:e0:5b:51:0b:49:15:1d:1a:6f:bf:99:74:
         51:3b:32:94:df:04:ea:62:a6:4e:e1:1b:6b:1a:35:7a:f8:bf:
         a6:49:1a:77:aa:89:8f:ba:1e:75:99:1a:0b:16:76:10:00:57:
         08:d9:42:9c:50:26:4c:8a:7a:12:fc:d5:1b:29:7d:92:65:99:
         18:64:24:2b:0f:44:53:14:98:23:f1:53:d0:73:c5:3c:05:b5:
         55:a0:f8:b9:e0:eb:9b:1d:dd:3f:08:83:33:dc:41:ff:8d:53:
         7e:f3:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:19:52 2025 by rpki-client