Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JBlpn8bkGYk1O2bA17rZrMH_jZ8.roa
File:                     JBlpn8bkGYk1O2bA17rZrMH_jZ8.roa (raw, json)
Hash identifier:          it+k7RjizhVZxpu0Y57xw1AfuPMBazTnmsXqY5Wp5S8=
Subject key identifier:   24:19:69:9F:C6:E4:19:89:35:3B:66:C0:D7:BA:D9:AC:C1:FF:8D:9F
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       C6
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JBlpn8bkGYk1O2bA17rZrMH_jZ8.roa
Signing time:             Thu 24 Jul 2025 01:24:10 +0000
ROA not before:           Thu 24 Jul 2025 01:24:10 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:24:10 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2419699FC6E41989353B66C0D7BAD9ACC1FF8D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:24:e9:fd:48:01:c6:69:21:a9:61:46:39:
                    dd:56:93:a9:73:29:b0:7c:10:61:13:88:d3:e3:8d:
                    3e:c6:cd:41:ab:fe:d7:12:69:89:38:29:c0:ea:46:
                    7b:4c:11:84:7a:68:3f:e5:69:d5:28:46:1b:8e:fe:
                    4d:bb:34:1e:a9:5e:88:4f:5f:36:b5:93:2f:21:69:
                    bd:08:1f:8e:8b:f0:c8:28:81:9b:7e:74:cb:6a:f4:
                    95:fb:d7:a6:db:2d:8b:c8:32:66:41:67:07:af:d5:
                    e4:48:7d:2c:34:50:48:cb:90:4f:1c:f3:17:a1:11:
                    33:e2:b5:68:10:56:04:6b:ae:13:54:0f:db:9e:83:
                    a4:ec:60:b4:2d:4f:33:71:64:f5:e9:11:d4:f5:6a:
                    5f:6b:70:56:ab:fc:19:86:f3:fe:31:3f:8b:5a:d7:
                    b3:7e:67:b7:98:bb:13:83:c7:9c:1e:47:a2:81:3e:
                    59:6a:23:55:fa:5e:6f:24:fe:e3:b7:eb:7d:42:f8:
                    f7:ed:03:0b:27:53:6b:ee:42:65:31:ac:75:cc:1c:
                    ea:1c:73:d6:8c:9f:f0:0b:fe:32:13:e4:bb:1e:a7:
                    3a:98:9b:fc:2f:2e:b3:ca:c6:50:75:81:bd:f3:f0:
                    d6:9f:fd:ca:46:56:43:52:94:c0:6f:49:ec:37:e6:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:19:69:9F:C6:E4:19:89:35:3B:66:C0:D7:BA:D9:AC:C1:FF:8D:9F
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JBlpn8bkGYk1O2bA17rZrMH_jZ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:74:81:28:58:2f:74:ce:66:b4:da:95:89:87:36:d4:5e:
         9e:b1:86:ff:2d:55:52:25:e6:1c:28:dd:ec:3e:96:d7:a9:d0:
         6a:3a:0c:77:60:3a:2e:39:cb:f1:8e:4b:39:a6:ae:21:54:f7:
         1e:62:96:12:ed:07:d6:27:49:10:a1:26:3b:31:53:05:84:2a:
         d6:d9:a1:9d:c9:19:fb:ad:21:7b:3e:e5:76:ac:28:a1:b4:63:
         67:5a:93:56:51:18:47:4d:7b:6d:9e:8f:a0:40:a4:8f:07:c4:
         a1:58:cd:96:81:a5:bf:2e:39:df:d2:c8:a4:9d:cf:a9:0b:00:
         8c:a0:38:70:fa:3c:4b:5d:c0:8c:fc:d5:6f:11:2f:bb:27:23:
         db:79:76:1f:32:74:7b:51:c8:33:05:e3:5c:dd:00:91:cf:3f:
         3f:b7:a1:e3:f2:2d:e0:04:0d:49:49:3a:7b:e9:4e:07:5a:ef:
         41:50:3a:74:c0:14:18:28:f6:58:2d:5e:10:ca:ca:05:fb:33:
         f0:85:02:da:36:06:8a:ad:ca:3c:6f:42:c2:e5:e5:8f:ae:f2:
         9d:3d:85:67:30:a5:e5:43:2b:f4:59:2e:03:6a:37:87:17:1f:
         d3:21:2b:4b:91:cf:8d:c1:1f:92:ea:b9:35:e4:ba:87:c2:50:
         f6:ce:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:09:47 2025 by rpki-client