Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fky7cNvzgyNnwcaXFykjVdD_4wM.roa
File:                     Fky7cNvzgyNnwcaXFykjVdD_4wM.roa (raw, json)
Hash identifier:          IDg/CigaB9cp951xwqAFtuP5RJPXpdBU3ez7V4idaDU=
Subject key identifier:   16:4C:BB:70:DB:F3:83:23:67:C1:C6:97:17:29:23:55:D0:FF:E3:03
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       D2
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fky7cNvzgyNnwcaXFykjVdD_4wM.roa
Signing time:             Thu 24 Jul 2025 01:44:30 +0000
ROA not before:           Thu 24 Jul 2025 01:44:30 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.171.112.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:44:30 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=164CBB70DBF3832367C1C69717292355D0FFE303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:b2:5b:3a:af:d9:89:40:83:ca:ef:1e:cf:
                    c0:a3:36:67:8e:65:c4:f9:56:6c:6d:84:1f:c8:99:
                    6c:e7:f8:92:ca:fc:30:2c:db:9e:ed:da:c5:17:54:
                    85:03:a4:1a:b9:b7:aa:d2:0d:91:44:3c:a5:a8:05:
                    69:7d:3f:21:64:66:77:08:97:d7:1c:de:6b:09:3c:
                    f4:7b:3c:a3:1b:02:53:11:53:13:42:98:4c:39:08:
                    ab:01:73:de:fb:c6:c9:d2:22:77:2b:4c:b6:15:13:
                    db:ee:a3:0e:be:8f:37:2f:56:cf:76:6e:e3:04:73:
                    f4:0f:14:3d:80:29:4f:fe:69:31:5f:b1:39:21:89:
                    9d:a1:c1:9a:0d:37:37:5e:e5:24:fc:10:a0:31:87:
                    c4:38:c3:f2:46:9f:2d:ec:a2:96:5f:0b:49:2c:1a:
                    47:52:c1:92:8e:61:a0:1f:1a:27:64:82:63:1a:8e:
                    4e:8d:3f:2a:94:e1:58:4e:ff:50:a0:a7:11:76:d1:
                    1d:98:01:5d:93:7f:d3:29:5d:84:29:3c:cd:a2:d4:
                    94:42:f0:46:d5:55:76:d5:9e:e9:48:f6:32:8d:77:
                    f4:83:e9:9f:9e:73:a8:62:48:2e:35:a1:37:92:45:
                    bb:ee:4f:55:e5:2e:8f:5a:b6:9a:f5:54:e0:81:86:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:BB:70:DB:F3:83:23:67:C1:C6:97:17:29:23:55:D0:FF:E3:03
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Fky7cNvzgyNnwcaXFykjVdD_4wM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:ef:65:3e:9a:7d:14:4e:6f:c8:ea:5c:42:8f:12:d6:89:f0:
         e9:f9:fd:6b:50:ae:42:63:d4:8a:c2:70:11:60:82:57:70:ca:
         38:9c:de:e5:cc:fb:fe:52:bb:2b:87:cb:fa:76:38:a4:a3:de:
         ca:6a:e7:94:3f:06:42:5c:bc:d7:a6:d3:f4:f7:83:2d:8d:71:
         dc:a1:54:43:93:f3:19:18:eb:33:01:90:7d:b7:5c:6b:6a:3d:
         e8:fb:47:98:c2:27:f4:11:e1:5b:9d:e4:b9:8f:b1:b2:a1:98:
         8f:3c:5a:fb:cf:59:51:eb:84:b0:5d:85:d1:70:dd:dd:da:2b:
         8d:dd:44:1d:ac:cc:f7:39:92:c2:cd:dc:f7:41:5d:d6:79:ab:
         70:e8:1d:f9:21:e2:a1:44:fa:46:ec:30:80:33:87:07:7d:06:
         59:ab:3a:04:e2:3f:b6:f6:04:68:c4:e1:d9:c0:a1:a3:36:10:
         71:b8:aa:7a:cd:9b:36:1a:30:8a:3b:be:d1:ef:d1:b3:dc:92:
         be:35:1d:35:77:f9:2c:27:7a:3e:7c:2e:cf:d3:9b:e8:04:9b:
         db:1f:45:53:cd:c8:c8:4e:ae:00:c6:ab:39:fe:1b:b9:b3:84:
         57:74:7e:da:f5:62:da:3e:5a:1a:e4:62:d8:b1:2c:37:23:97:
         93:8b:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:21:28 2025 by rpki-client