Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/InYljODCOFDGb7vo1ndJhQuLGrQ.roa
File:                     InYljODCOFDGb7vo1ndJhQuLGrQ.roa (raw, json)
Hash identifier:          RLSSwK3wkDtxGLYmbitqmqHSTP1I8Ng0Mvv3MUT9XMQ=
Subject key identifier:   22:76:25:8C:E0:C2:38:50:C6:6F:BB:E8:D6:77:49:85:0B:8B:1A:B4
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       FD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/InYljODCOFDGb7vo1ndJhQuLGrQ.roa
Signing time:             Thu 24 Jul 2025 02:05:29 +0000
ROA not before:           Thu 24 Jul 2025 02:05:29 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.120.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:05:29 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2276258CE0C23850C66FBBE8D67749850B8B1AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:4c:da:e3:96:85:79:ed:c9:28:81:11:71:
                    27:79:79:fe:e1:82:25:4d:12:92:49:f6:06:68:d5:
                    2e:bf:7f:59:25:12:dd:8f:96:03:7b:be:7a:31:4d:
                    9c:fb:70:f4:f0:fa:a7:fa:7f:ff:72:54:a5:9c:aa:
                    46:a6:be:9a:15:1e:1d:01:23:1c:72:c2:87:d8:3b:
                    00:5f:b5:76:53:6e:4f:35:49:af:1c:73:53:cb:63:
                    2b:fb:c9:75:ee:64:11:1d:f0:d7:8a:9e:bc:cf:a0:
                    b3:48:b5:47:4c:7d:f7:06:ff:c4:ba:c0:bd:4d:61:
                    db:15:8e:7e:12:15:a9:f7:c2:2c:41:4a:3f:53:7f:
                    98:df:67:48:9b:11:fe:1d:f5:b7:06:f8:34:f3:65:
                    4d:a9:c0:7e:b3:3e:73:92:83:a7:09:e2:53:77:5b:
                    69:eb:31:ba:b2:9e:f7:0c:05:de:27:b4:ee:4d:31:
                    57:f5:7a:f7:04:19:ff:b7:aa:8c:f2:a5:86:0c:a8:
                    b5:62:fd:a2:34:78:38:6e:3f:ec:f0:8f:bd:cd:d5:
                    99:30:90:6e:9d:b3:00:96:57:95:03:93:14:87:ee:
                    08:c7:e8:49:ac:3d:8b:22:d6:8d:9b:8b:c7:60:cd:
                    5b:8a:4f:72:f3:56:df:96:89:9b:bc:b5:9f:d8:d6:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:25:8C:E0:C2:38:50:C6:6F:BB:E8:D6:77:49:85:0B:8B:1A:B4
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/InYljODCOFDGb7vo1ndJhQuLGrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:ca:7b:9f:80:79:1f:e3:7b:a5:54:c2:64:2d:40:6b:1a:
         ce:c5:d5:97:2a:b7:9e:e4:20:a1:0a:2d:ac:e2:aa:fa:2f:95:
         95:87:e3:c9:82:c8:cb:5a:b5:54:3c:3e:6a:4b:d8:6e:b9:ff:
         05:8e:4e:cd:8d:c8:e3:33:aa:30:7a:b6:23:64:30:3f:52:18:
         11:5f:73:32:c3:1c:b0:04:40:40:7f:bd:b1:a1:a2:5c:3b:51:
         8e:0d:17:c8:e5:17:b9:23:8a:29:9f:15:dc:ba:e5:f6:ff:e6:
         20:ed:2a:34:47:80:ef:a9:a6:54:69:83:08:80:93:26:36:24:
         dd:14:1c:e9:03:c7:af:b5:fb:8c:e7:ca:76:27:1e:05:8b:28:
         7c:67:33:25:e1:f4:6f:5b:33:f7:7f:f1:4a:21:16:e0:60:1b:
         28:96:c0:12:c6:fd:99:4f:be:85:4d:6a:db:54:dd:82:81:e6:
         08:b0:0d:7e:6d:f9:05:dc:7e:25:63:86:19:59:62:d1:d1:37:
         9d:19:34:3c:09:f3:8e:86:61:53:b8:d3:08:0d:5c:a9:bd:30:
         d8:19:17:d8:b4:32:35:e4:36:2d:2f:36:73:41:1d:7d:e1:ce:
         01:6f:d5:ec:08:ee:31:c4:de:dd:69:63:f8:9b:02:09:a4:30:
         4c:f4:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:06 2025 by rpki-client