Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/LZxIBAcz-uozvKVzGnOrmnWe45M.roa
File:                     LZxIBAcz-uozvKVzGnOrmnWe45M.roa (raw, json)
Hash identifier:          bdrVusIzh74i7GSXQEGna3b1nGnuBvPubFJG8x+OMVA=
Subject key identifier:   2D:9C:48:04:07:33:FA:EA:33:BC:A5:73:1A:73:AB:9A:75:9E:E3:93
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       BC
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/LZxIBAcz-uozvKVzGnOrmnWe45M.roa
Signing time:             Thu 24 Jul 2025 01:09:51 +0000
ROA not before:           Thu 24 Jul 2025 01:09:51 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.246.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:51 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2D9C48040733FAEA33BCA5731A73AB9A759EE393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:40:a5:e1:81:2a:31:e2:3a:c8:54:a2:3e:
                    35:d4:86:1b:6f:40:10:6a:fd:82:5f:f0:cb:14:26:
                    28:44:1e:cb:45:81:89:b9:ea:a6:4f:5d:fa:5a:e8:
                    22:b4:af:e4:1d:10:63:7d:12:f5:1f:9f:fc:70:5c:
                    35:58:db:23:26:74:3d:04:24:8d:5e:1c:a0:22:12:
                    fe:ee:f3:f0:f8:e6:60:2c:0f:d2:c2:eb:7b:7a:6d:
                    89:ba:7b:b3:ed:01:9a:16:1d:ba:af:6e:d3:9c:f0:
                    28:26:9d:85:1a:c6:99:41:d5:a0:b4:af:b2:14:bc:
                    04:3a:57:6c:6b:23:46:28:84:44:46:6a:e7:e4:4d:
                    98:a3:6b:12:78:b0:62:30:95:cc:d1:24:f0:8c:85:
                    5b:47:0d:c9:da:52:61:c2:ef:6a:16:b4:76:1a:a4:
                    23:ec:f7:8d:a2:7a:11:2c:bc:10:e7:c4:31:9a:d0:
                    f3:1a:63:58:61:26:ee:57:52:01:f8:c9:b8:16:14:
                    8f:4b:f4:7b:38:c4:05:43:9f:34:f0:29:25:26:ad:
                    25:bf:c1:60:80:cd:4d:7d:df:e4:30:ca:be:ee:de:
                    ca:ce:0b:65:66:25:63:25:f4:9f:54:60:9d:de:a8:
                    e5:4e:15:07:e6:a8:14:4c:74:b2:b6:40:67:26:b0:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9C:48:04:07:33:FA:EA:33:BC:A5:73:1A:73:AB:9A:75:9E:E3:93
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/LZxIBAcz-uozvKVzGnOrmnWe45M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:96:e2:d8:02:ed:60:f0:ff:09:2f:cc:6f:1a:cc:94:c2:0b:
         cd:68:80:fb:c6:3a:d3:b5:7a:d3:56:29:1a:94:f8:51:b2:35:
         01:37:6c:4c:7a:33:79:8c:53:aa:f6:0f:95:73:9e:c1:e0:9a:
         12:14:c5:4e:51:20:91:52:a7:24:d2:a8:0d:2e:f8:23:51:3d:
         85:c6:a6:cc:ea:6a:d8:14:ae:b4:68:13:73:74:2c:4a:a6:72:
         e4:61:28:f4:70:08:8c:9e:de:ab:03:66:fc:0b:36:57:95:99:
         b4:27:97:8e:0e:4a:f8:47:05:d4:4f:4b:2b:26:fd:25:cb:e3:
         84:51:15:b3:f8:54:c4:4f:97:5c:e7:ee:5e:81:5c:c8:5d:c8:
         15:94:5f:08:19:33:70:73:05:f5:6e:07:b6:90:69:7d:f4:f4:
         b7:41:a4:8e:c6:44:ac:49:e2:36:33:5e:33:0a:9f:d0:04:d5:
         39:e9:36:18:aa:f1:f8:2a:e5:3f:14:57:49:92:5a:79:18:f0:
         10:83:8d:3b:e4:5f:45:dd:c2:b4:5c:56:0a:44:4a:9c:a1:5f:
         1f:6b:a8:9a:aa:7a:d9:ee:2a:f4:4c:3c:20:c7:0a:f6:fd:10:
         99:f6:6c:50:1e:af:b5:3d:34:35:25:da:cf:20:91:23:04:58:
         a2:7a:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:06 2025 by rpki-client