Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J98e3a6gGrlHJPLsl71plhxInkw.roa
File:                     J98e3a6gGrlHJPLsl71plhxInkw.roa (raw, json)
Hash identifier:          lKx4kRdlu1kzqiIC5D21M30Z/OVU/SDFb8xTLC6ubF8=
Subject key identifier:   27:DF:1E:DD:AE:A0:1A:B9:47:24:F2:EC:97:BD:69:96:1C:48:9E:4C
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       011F
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J98e3a6gGrlHJPLsl71plhxInkw.roa
Signing time:             Thu 24 Jul 2025 02:22:07 +0000
ROA not before:           Thu 24 Jul 2025 02:22:07 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.239.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:07 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=27DF1EDDAEA01AB94724F2EC97BD69961C489E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:8a:07:ec:e9:39:0a:bc:e4:4e:5e:48:84:
                    a0:11:83:3b:d4:94:29:a4:7e:2d:a0:e4:c7:f5:b1:
                    bf:4d:cf:7d:90:f0:60:11:18:d9:e5:f5:3c:85:e1:
                    c6:f8:6e:6c:20:b5:e3:f4:14:86:da:77:a5:b1:17:
                    31:c0:66:b7:9d:eb:54:43:0b:db:43:6b:16:8c:c2:
                    35:5e:bc:f9:94:4e:a7:16:12:60:c7:c4:c0:e7:86:
                    26:22:83:ac:2f:ba:86:7d:60:c2:50:60:db:f3:40:
                    a8:ed:83:d9:c5:b5:c6:57:63:9d:97:0b:a6:0f:1f:
                    0d:6f:f2:aa:6b:8b:7b:97:af:37:32:e1:94:06:22:
                    5e:e8:8f:8a:6c:4f:35:a9:32:da:fa:78:2a:05:d1:
                    4f:dd:24:e7:f9:26:72:03:9c:6e:b1:04:81:06:b3:
                    12:b7:da:98:a1:0e:a2:90:5c:7b:f1:12:03:a4:26:
                    f2:3f:86:45:e8:2f:c5:64:4b:d8:63:7d:d8:16:6b:
                    b0:b8:a6:d7:e3:8f:29:92:b3:97:a6:43:72:60:f6:
                    c3:84:aa:59:5f:61:eb:6f:57:b2:69:9f:f8:9b:17:
                    43:27:57:39:6f:7a:a8:89:da:67:36:b8:b8:6c:93:
                    9b:b7:41:ed:1e:5d:92:27:10:53:00:d3:ac:72:7e:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DF:1E:DD:AE:A0:1A:B9:47:24:F2:EC:97:BD:69:96:1C:48:9E:4C
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J98e3a6gGrlHJPLsl71plhxInkw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:a1:6e:79:bd:3c:b8:b4:01:4d:57:ee:10:3a:57:42:34:92:
         65:93:65:10:68:8e:ea:db:5d:fa:f3:17:7c:30:a2:8d:40:bc:
         02:0c:47:0d:6d:df:6a:b0:67:cb:81:81:23:fe:8a:90:c9:22:
         c0:83:ab:24:c6:a9:db:19:e9:3c:c2:58:cd:f6:2c:4d:e8:c1:
         b3:80:8a:4f:74:43:ed:5a:cd:8c:35:2a:f7:b2:b0:97:d8:98:
         d3:09:ea:09:4f:07:c8:fe:78:69:e5:4b:8c:20:aa:c6:a0:8e:
         77:96:df:d7:4e:2d:c1:81:9e:75:d0:ae:36:d3:a9:42:e5:7b:
         4c:f3:00:d8:69:3d:f8:88:e8:38:6f:0f:af:3e:a0:c3:ab:2b:
         41:87:b5:1a:ce:7b:ed:d5:6e:48:5c:5b:e6:2f:90:19:90:c8:
         a7:c5:41:ce:8a:03:f0:33:bb:eb:21:94:c6:65:7b:94:b5:db:
         83:e1:af:13:ee:19:ea:0b:1b:45:1f:98:11:83:8d:03:f2:93:
         f7:bf:55:e7:c1:bc:25:6b:af:28:4a:74:94:91:a4:0a:eb:ec:
         ee:9e:d1:be:d8:36:7d:2a:48:0a:a3:05:66:23:3d:f3:ae:66:
         13:73:94:a0:db:39:8f:0c:d5:9e:be:95:7f:a1:d1:33:f9:81:
         32:fb:36:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:05:29 2025 by rpki-client