Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Eodx-zThf-1ksqnYnDiXSzlRFyM.roa
File:                     Eodx-zThf-1ksqnYnDiXSzlRFyM.roa (raw, json)
Hash identifier:          TCAA4Fu/JqaXxjrIgbIO7TGyILlhTAe+UC4xkDqyFR8=
Subject key identifier:   12:87:71:FB:34:E1:7F:ED:64:B2:A9:D8:9C:38:97:4B:39:51:17:23
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       FC
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Eodx-zThf-1ksqnYnDiXSzlRFyM.roa
Signing time:             Thu 24 Jul 2025 02:05:29 +0000
ROA not before:           Thu 24 Jul 2025 02:05:29 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.14.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:05:29 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=128771FB34E17FED64B2A9D89C38974B39511723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:48:ba:fb:c9:e0:cf:91:e3:23:41:47:b4:
                    87:83:e0:6d:35:c8:a5:94:70:99:bd:ef:c9:e0:67:
                    bc:d0:b0:22:65:6c:34:63:5a:a1:00:48:13:41:e7:
                    fa:b2:e0:74:4e:ba:2b:9f:5b:dd:d2:6c:77:94:b7:
                    5e:f0:8d:ae:05:e0:df:92:f7:21:2b:b6:30:7f:2c:
                    29:90:e9:02:38:ca:b2:7f:b1:17:97:63:84:f3:34:
                    c0:95:2c:ba:ce:cd:26:7c:7d:61:f1:74:c8:62:11:
                    e7:46:d1:3b:0e:c6:ab:17:80:07:24:b8:60:b5:20:
                    b7:45:4b:74:88:2d:45:e3:4d:74:40:2c:2d:3d:d8:
                    84:f7:1d:32:5c:e3:dd:5d:cd:d0:81:1e:92:de:bd:
                    19:89:63:d5:2e:12:f8:10:54:21:c9:38:64:49:94:
                    6a:2d:1d:26:44:61:0d:16:27:01:2e:fd:c3:9a:99:
                    1f:f7:3b:ae:25:a5:47:74:03:8d:25:fe:b7:79:93:
                    9b:0a:99:05:53:d0:55:48:b7:5a:fc:f4:9e:64:27:
                    d5:2a:64:f1:ce:ca:0f:0c:9b:0f:73:e7:5c:00:6e:
                    6a:94:86:a0:7f:f6:57:0f:ff:04:65:2a:aa:6a:1e:
                    aa:d6:18:52:bb:34:c6:8d:ae:0e:77:c2:86:89:17:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:87:71:FB:34:E1:7F:ED:64:B2:A9:D8:9C:38:97:4B:39:51:17:23
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Eodx-zThf-1ksqnYnDiXSzlRFyM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:49:91:06:f5:83:00:84:43:47:9f:50:bf:55:b8:58:a9:
         ee:8a:66:71:7d:ef:6c:c8:da:92:48:89:8d:ec:e6:34:fe:e0:
         34:74:da:94:4c:c7:b8:7d:a1:29:55:67:b3:f7:90:80:c6:18:
         4e:b0:75:2b:90:fe:83:2d:c3:f6:6f:2a:f7:dc:4b:d9:72:80:
         97:fd:ab:43:bf:8c:0c:88:bb:58:5a:96:aa:69:a6:07:84:8f:
         f2:35:0e:f7:7a:7d:a3:76:84:b6:fa:96:52:94:04:37:78:98:
         f2:ca:c4:8e:52:eb:c1:32:52:be:68:7f:1e:7a:18:6b:86:b1:
         34:ae:48:67:29:b9:03:f4:d4:e5:76:6e:33:ad:3d:dd:d4:ff:
         29:3c:7c:db:c1:8f:3c:d0:67:96:19:16:c8:5e:bd:5c:8e:b0:
         57:3b:a4:1f:00:2f:27:23:7c:e8:f0:85:9d:96:56:a2:35:92:
         d9:b9:18:ef:24:7a:48:a7:73:6a:10:1e:4f:a3:cd:1d:23:26:
         4f:1e:bf:f3:a7:44:c1:20:c1:77:7b:10:4e:06:53:10:6e:cf:
         df:25:01:bd:19:7f:f6:9a:6a:03:06:b5:f7:23:23:7d:a1:7c:
         d6:40:d1:fa:fb:3f:a5:a4:e5:92:b4:e7:ab:6f:b2:f1:be:af:
         38:c7:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:06 2025 by rpki-client