Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa
File:                     J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa (raw, json)
Hash identifier:          yD0bFxvBZCOMnYmktS4kirmNgksCdqzsx6TzNkuTlM8=
Subject key identifier:   27:FB:FC:97:84:61:FF:26:A9:ED:87:0F:FA:04:45:E1:69:61:BC:78
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       DD
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa
Signing time:             Thu 24 Jul 2025 01:50:59 +0000
ROA not before:           Thu 24 Jul 2025 01:50:59 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.235.8.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:50:59 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=27FBFC978461FF26A9ED870FFA0445E16961BC78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:db:6f:ce:a0:c1:7c:78:e2:80:02:f1:29:9e:
                    f2:06:45:f8:8e:c9:16:13:a1:3c:f8:b6:9f:b9:17:
                    65:c6:da:ec:d7:8e:fc:40:e6:5b:1d:63:cc:18:a8:
                    3b:7e:3e:a3:fb:f1:c9:dc:da:8e:71:36:1c:9e:a0:
                    a7:43:da:6c:0c:c2:f5:72:f1:9b:8d:62:71:58:a1:
                    da:67:76:2a:f5:8f:7d:29:be:0f:8a:54:9d:22:4b:
                    60:1a:f6:17:d4:6b:83:63:93:ce:fb:2e:ff:c0:17:
                    a4:81:79:a5:bf:79:89:ff:23:40:4a:d8:d2:58:83:
                    80:57:0a:8e:b9:1b:69:93:0b:22:2e:c9:7d:20:14:
                    e1:6c:42:1b:fa:e4:af:db:a6:8c:ad:6a:0e:31:84:
                    b7:b8:1c:09:4d:da:ab:3c:e1:77:75:c5:a2:f8:5f:
                    79:88:c6:ef:21:e8:71:6a:c6:2d:45:aa:5e:12:83:
                    2a:d8:20:6f:5d:55:91:6b:0e:e7:bf:6e:03:b9:7b:
                    c5:5a:66:1f:3c:a1:53:14:09:bc:e6:d4:e0:05:5f:
                    43:05:06:5f:9e:4d:4d:c5:41:56:ff:2e:8e:70:0f:
                    18:c2:f9:e0:da:26:c5:54:b5:d1:7a:ea:de:13:85:
                    b2:b1:f0:5b:4a:2b:da:e7:61:80:47:2b:0b:6b:8a:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:FC:97:84:61:FF:26:A9:ED:87:0F:FA:04:45:E1:69:61:BC:78
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/J_v8l4Rh_yap7YcP-gRF4WlhvHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:a8:31:da:e6:21:07:65:f9:54:63:a5:69:ce:1e:3f:39:bb:
         ec:3d:0e:a7:97:03:3e:9b:03:fa:90:54:22:cc:3a:54:3f:9c:
         89:92:df:a3:12:2d:2c:0d:ff:ef:bf:f0:cd:51:36:94:11:3f:
         e4:21:af:95:b9:a0:53:11:9f:38:67:32:7b:21:04:77:72:73:
         ab:1d:f0:89:cf:ba:4e:79:7a:ef:7c:53:cc:ef:ef:75:1a:74:
         16:72:79:f0:5d:ae:13:1d:9c:bc:ac:b6:2d:98:84:95:5d:99:
         cd:eb:62:95:16:cc:ac:ee:09:56:20:a4:39:a9:03:3a:23:11:
         da:f1:72:2d:76:a3:28:b7:89:8b:96:0a:86:cb:dc:76:bf:67:
         df:d8:26:0b:4d:54:de:db:82:68:06:22:ea:02:07:68:0a:d7:
         17:70:9c:4d:d8:09:ae:d9:cb:f5:ee:4d:bd:3b:ae:4d:01:5d:
         5b:b1:af:11:25:6f:bb:b6:76:9e:1a:30:db:e8:7e:58:56:42:
         5d:f7:2b:d1:d3:d7:5d:11:c5:cb:50:37:73:96:be:e1:ea:5d:
         21:62:4d:a2:c0:91:78:74:4c:5e:de:25:7f:89:71:8c:15:68:
         3d:5d:37:77:f8:af:64:57:d0:70:8e:d2:f6:7a:53:ab:b7:4b:
         9d:65:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:04:45 2025 by rpki-client