Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRhuwT6D45y9aXWF-hSWda1gAmQ.roa
File:                     GRhuwT6D45y9aXWF-hSWda1gAmQ.roa (raw, json)
Hash identifier:          GzgX/WrILfLO3zl5meb96EuRj0uYdQIL9FVMtxje5wA=
Subject key identifier:   19:18:6E:C1:3E:83:E3:9C:BD:69:75:85:FA:14:96:75:AD:60:02:64
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       010B
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRhuwT6D45y9aXWF-hSWda1gAmQ.roa
Signing time:             Thu 24 Jul 2025 02:13:00 +0000
ROA not before:           Thu 24 Jul 2025 02:13:00 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.235.30.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:13:00 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=19186EC13E83E39CBD697585FA149675AD600264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:f1:b0:98:a3:e7:36:3a:83:cf:fe:d7:3e:
                    49:7e:da:70:62:9c:9d:3f:47:31:45:18:5e:93:d2:
                    2c:1e:7e:1c:5e:fd:db:fd:b6:fc:b1:42:cd:ac:cc:
                    20:40:ea:25:14:73:1a:82:ca:0d:87:0d:a4:21:d8:
                    78:fd:7d:78:da:ac:98:3c:15:94:72:71:e6:a9:a8:
                    02:c5:01:93:83:a1:89:0e:3a:d4:24:e4:fe:ce:95:
                    bb:81:93:fd:82:3c:ba:3f:fe:3e:db:0b:67:00:24:
                    11:34:31:71:40:69:08:ce:42:1f:b0:e2:d1:8e:ad:
                    77:74:07:f1:21:d4:e6:2c:c6:e2:8b:1b:59:f8:e9:
                    1c:2b:a1:45:84:89:2c:c3:eb:79:b8:10:82:ad:a3:
                    01:cc:05:a2:01:5d:0d:f2:ea:ed:f3:f9:fd:d8:7a:
                    26:3f:99:39:56:5d:fd:e4:00:ee:55:6c:54:b2:48:
                    fe:e1:b0:68:dc:7a:c5:1d:a7:af:4d:49:48:b4:93:
                    e1:44:75:2f:46:16:79:6d:e5:65:8b:ef:d1:bf:90:
                    bc:b5:5d:45:d1:aa:ec:7e:1b:01:05:9e:0a:b2:b8:
                    7a:34:f3:de:fc:b3:5f:1d:a6:21:c8:55:fb:3d:0b:
                    18:25:ce:14:34:8e:f9:f4:5c:17:56:40:c6:f2:37:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:6E:C1:3E:83:E3:9C:BD:69:75:85:FA:14:96:75:AD:60:02:64
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRhuwT6D45y9aXWF-hSWda1gAmQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:56:bd:42:98:b4:c5:39:97:ec:14:db:ef:35:23:74:b4:
         84:79:d3:32:da:86:4c:46:6f:19:ac:c7:40:f0:dc:ed:3c:54:
         3d:db:d6:a7:3b:17:e4:12:d7:98:99:a3:1d:84:43:0f:1e:da:
         9c:33:bf:78:72:e7:d2:40:25:a1:ec:3f:0f:6d:eb:b9:78:78:
         62:ff:e8:e9:7e:bb:1f:d8:8c:c1:bd:88:6c:6a:df:b2:82:6e:
         73:f2:6c:d7:51:f2:9b:db:01:6e:16:39:07:27:b4:b9:16:66:
         51:4b:26:d7:95:07:7c:ec:df:55:37:29:36:e6:c8:fc:85:a2:
         52:00:5b:76:4c:ce:52:17:d3:89:a4:8c:53:ce:18:48:04:93:
         d0:9d:fa:d9:eb:2a:28:8d:24:65:c6:26:2d:9b:5a:6a:1b:0e:
         84:5a:a1:d3:c9:14:c2:c7:a4:32:e0:2d:7d:58:1e:04:b9:30:
         20:04:1d:97:b0:3d:e4:55:59:53:9e:b5:b1:a3:34:c3:51:ed:
         98:bf:b6:b6:a1:91:55:bc:5f:76:62:2f:33:2f:48:f5:94:b0:
         e3:e4:5d:12:97:35:e8:a9:de:2e:94:86:bc:56:8b:f3:42:23:
         70:c3:e4:16:a5:95:10:86:97:e8:52:d7:5c:75:60:6b:e5:d2:
         7c:c6:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:04:43 2025 by rpki-client