Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/IwgG_4G-FoAdpyu8rvdsOv7N0Hk.roa
File:                     IwgG_4G-FoAdpyu8rvdsOv7N0Hk.roa (raw, json)
Hash identifier:          Trh2krKjfMG5Y6t2c56SWigFcAbz52mIFx2WjAHcsME=
Subject key identifier:   23:08:06:FF:81:BE:16:80:1D:A7:2B:BC:AE:F7:6C:3A:FE:CD:D0:79
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       B8
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/IwgG_4G-FoAdpyu8rvdsOv7N0Hk.roa
Signing time:             Thu 24 Jul 2025 01:09:49 +0000
ROA not before:           Thu 24 Jul 2025 01:09:49 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:49 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=230806FF81BE16801DA72BBCAEF76C3AFECDD079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:81:e9:e8:55:a6:95:66:e6:e2:21:72:55:
                    27:8c:1b:34:47:f2:75:62:11:05:5a:81:ab:1a:0b:
                    32:d4:9e:2a:27:a5:be:23:b8:51:91:0f:0a:f9:d9:
                    2f:cd:5b:1e:00:92:fc:5d:fc:98:90:a1:0a:e5:bb:
                    c9:f1:c9:c9:df:72:11:0d:a4:9c:14:de:b0:1a:cb:
                    2c:08:cc:48:0a:25:fa:a7:1b:d1:9d:25:b8:4f:16:
                    da:1b:31:68:e7:30:18:3a:be:9f:35:d4:45:dd:b8:
                    17:64:03:ac:f1:b9:91:8d:de:dc:52:65:13:9e:ab:
                    4f:71:92:47:d9:3e:bd:83:42:48:89:82:6a:f1:cc:
                    de:03:52:0f:81:16:75:3d:38:5d:48:ca:e2:ee:6a:
                    e0:31:40:3e:bd:ff:1d:4e:c6:e3:b6:9b:40:8d:21:
                    95:4f:0b:5c:55:26:53:87:a0:6f:e3:cf:d6:0b:95:
                    53:d7:dc:86:07:bf:39:ec:87:f5:60:71:25:63:b9:
                    2f:75:0b:16:7f:a8:e5:26:2b:c1:d6:ac:85:1a:d1:
                    cc:55:15:b0:12:6f:78:2b:8d:5b:43:1c:ca:2f:ed:
                    d9:30:74:8b:42:54:2a:6b:eb:47:ad:68:2f:4f:2f:
                    92:fe:37:9b:49:22:83:68:18:9e:92:08:7c:10:5a:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:08:06:FF:81:BE:16:80:1D:A7:2B:BC:AE:F7:6C:3A:FE:CD:D0:79
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/IwgG_4G-FoAdpyu8rvdsOv7N0Hk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c9:db:8c:f6:ee:5c:2f:fa:da:03:4b:ce:1f:1a:be:3f:39:fa:
         58:40:45:46:bf:3f:ee:73:d6:29:27:b8:16:41:87:33:29:18:
         ba:90:74:e4:69:6f:1a:3f:35:86:70:fb:d7:85:79:2d:dd:f4:
         ed:0b:ce:fa:3a:3d:f5:d8:22:e2:90:0e:19:db:78:f5:6c:1b:
         99:07:34:ab:63:75:0a:c1:df:c3:e4:71:b9:c1:0a:73:e8:cb:
         8b:47:a0:72:8d:ce:5c:f9:bf:83:8c:03:95:81:33:b5:8f:17:
         f6:cd:0e:ae:cc:9b:e2:b7:f5:fe:49:a8:31:55:fd:fb:3c:2f:
         56:3f:54:59:7e:4d:9a:74:a6:75:a1:a0:a9:ff:c6:6e:9f:0a:
         a7:3e:55:49:f6:80:df:67:f2:5a:ac:db:a2:2d:e6:44:2b:eb:
         d2:cb:ce:73:df:a5:6e:eb:53:2d:a8:4c:cd:29:cb:57:ea:80:
         49:03:e2:b4:ed:d4:ba:b0:14:38:d3:07:8d:08:25:d2:d0:bb:
         36:1d:2a:1e:ed:56:04:3c:be:d5:9b:8e:10:a4:bb:18:cc:b8:
         f0:00:96:c0:fb:5b:bf:df:a6:f2:e8:33:b2:39:d2:46:cb:fe:
         d0:00:69:64:60:ab:89:5b:a9:4a:12:0d:bd:02:1d:45:22:fd:
         3b:e6:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:41 2025 by rpki-client