Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KuPiH5r_K-CznPeDmANWQ16IkRo.roa
File:                     KuPiH5r_K-CznPeDmANWQ16IkRo.roa (raw, json)
Hash identifier:          RfDOSYnMlqzduebdWPufZWJytUyGBJhDcA+Q8YHQj2A=
Subject key identifier:   2A:E3:E2:1F:9A:FF:2B:E0:B3:9C:F7:83:98:03:56:43:5E:88:91:1A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       D9
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KuPiH5r_K-CznPeDmANWQ16IkRo.roa
Signing time:             Thu 24 Jul 2025 01:50:57 +0000
ROA not before:           Thu 24 Jul 2025 01:50:57 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.189.250.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:50:57 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2AE3E21F9AFF2BE0B39CF783980356435E88911A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:f6:53:5c:0a:eb:88:b2:5a:c1:61:86:3b:
                    d7:ac:46:78:1f:36:47:76:ca:5c:16:b0:f5:68:6a:
                    43:b7:8d:a7:a9:7c:02:86:b5:d6:fe:07:76:1d:6b:
                    57:af:19:a3:6a:b6:88:09:00:e5:ce:43:7b:ed:aa:
                    ce:72:2b:25:76:eb:7c:20:5e:22:21:bd:e4:3e:be:
                    7e:d6:a3:bf:01:be:f0:68:56:f6:3a:54:40:cf:83:
                    b2:42:2c:23:2b:8e:c5:90:39:e0:41:4d:1b:0c:90:
                    9a:1d:97:8c:48:28:04:52:37:23:67:a5:e7:a7:57:
                    b2:21:fa:5f:55:ed:4f:46:54:79:56:c7:13:93:20:
                    f5:a3:0e:1a:13:62:35:fc:72:60:e6:bd:28:0d:f3:
                    ed:d2:ce:2b:02:eb:0e:9e:18:75:9b:62:f8:de:a2:
                    a4:48:29:dc:8e:12:88:84:aa:80:55:4a:31:c7:40:
                    ba:e7:dc:40:29:4e:d0:b7:4c:c1:b6:4f:ad:91:e8:
                    57:8e:84:b1:8f:ad:b9:b4:a6:13:53:0e:6d:6b:8f:
                    ea:1a:5c:e6:d7:72:7b:ae:85:cd:1b:df:1e:9d:73:
                    4e:74:c1:53:a4:31:8f:66:54:f3:8a:c8:a3:59:e3:
                    70:37:58:0c:dc:79:25:cd:4c:e1:0b:bc:f2:58:51:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E3:E2:1F:9A:FF:2B:E0:B3:9C:F7:83:98:03:56:43:5E:88:91:1A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/KuPiH5r_K-CznPeDmANWQ16IkRo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:d2:76:54:a6:2c:9b:d4:92:00:64:51:ae:c9:9d:06:6e:
         5b:ca:c5:b7:cd:c9:62:dc:17:cc:47:51:0e:63:5c:d0:c4:f3:
         a5:7c:30:90:ca:08:d1:f3:8d:58:54:24:a9:75:95:51:f9:bd:
         b9:29:7a:97:30:0c:0c:09:4e:64:e5:9d:0e:3e:3a:88:9d:45:
         18:9c:4c:46:97:e9:83:17:0f:07:2d:45:9f:6c:ec:65:e0:f7:
         08:7c:a5:a3:5c:26:08:bb:79:0a:a0:be:5b:63:59:b5:c6:ce:
         0c:c4:f8:77:ba:2d:c3:27:eb:58:39:f0:9e:9b:2e:cd:a5:59:
         ac:a6:0f:26:07:22:1b:4b:af:00:17:cc:14:09:3d:ee:cf:cf:
         1b:75:dd:1d:26:31:f8:93:c5:f5:3b:4c:5a:b8:63:91:b9:7c:
         49:48:1f:fe:82:28:d5:38:f4:13:ae:ad:b1:38:49:33:52:ab:
         36:e8:10:00:22:87:d0:10:9e:37:b8:6c:33:53:c0:a0:d9:ff:
         85:a8:20:8d:39:07:e2:32:da:fa:a3:2a:e3:1c:1a:8d:f5:ec:
         98:d5:cc:99:95:15:3b:67:ac:2d:ed:3c:18:3f:c0:2d:a6:cc:
         c0:df:d6:d2:6e:6a:89:28:f8:bc:93:f3:61:6d:cf:f1:ef:ab:
         a2:0b:76:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:53 2025 by rpki-client