Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa
File:                     L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa (raw, json)
Hash identifier:          1xJie0tZ/UAF3KewLYXaaEgX4nDWAZiDGHloQP8BWXw=
Subject key identifier:   2F:F0:61:D9:63:A1:F3:CB:8A:83:28:B0:17:50:CB:1B:76:E0:B7:40
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       E3
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa
Signing time:             Thu 24 Jul 2025 01:51:04 +0000
ROA not before:           Thu 24 Jul 2025 01:51:04 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.236.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:51:04 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2FF061D963A1F3CB8A8328B01750CB1B76E0B740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:d9:a7:b6:cc:4e:90:19:3b:81:18:26:b7:
                    8e:c8:9c:0b:c6:ec:93:6e:d7:f3:44:56:6b:df:05:
                    47:ea:92:37:db:fc:3f:88:4a:12:1c:e2:c8:28:59:
                    6b:45:8f:34:f3:0a:ab:18:6a:97:2f:31:08:1b:1c:
                    30:97:9e:81:be:86:c6:e0:d8:c6:6a:69:9a:85:3b:
                    33:3d:60:fe:d0:0d:7f:7f:ff:6a:af:a3:d1:94:b5:
                    c7:a1:e0:51:63:c6:53:db:71:47:d7:91:5a:e3:0f:
                    3c:51:49:62:0d:87:46:02:5e:e4:16:3a:23:74:df:
                    25:5b:64:e7:41:72:97:6b:aa:3f:26:51:b2:b0:70:
                    91:ed:3b:7e:b4:c9:c7:4e:c8:ae:f4:a6:1d:9f:a0:
                    5a:da:2a:30:53:97:90:17:40:7c:8e:26:51:de:dd:
                    c6:b7:e3:d1:e8:cf:0c:a8:03:fc:72:86:1b:47:bf:
                    5d:4a:c0:38:90:0b:58:d6:5c:b3:92:16:c2:36:6e:
                    7c:b2:37:25:70:79:5d:78:48:b6:05:2c:ec:c0:33:
                    0d:d0:b4:a7:f7:00:db:55:cf:dc:3a:51:39:c0:40:
                    ab:17:d7:e9:9c:54:19:fe:d9:65:82:e3:fb:48:69:
                    d4:a3:77:74:39:99:0b:55:23:7d:ef:6e:b3:60:38:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F0:61:D9:63:A1:F3:CB:8A:83:28:B0:17:50:CB:1B:76:E0:B7:40
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/L_Bh2WOh88uKgyiwF1DLG3bgt0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:8c:35:d5:a9:17:50:62:74:d8:0a:05:15:65:71:87:6e:ba:
         8a:55:77:5a:53:a1:6d:dd:b6:33:db:e6:87:86:70:e9:fb:16:
         94:35:44:51:ea:82:2d:0f:8d:4a:86:02:d0:cf:40:df:d6:f5:
         ff:df:8a:6c:6b:b7:f2:15:a1:fc:71:6e:e1:f1:f0:c4:8a:4f:
         ba:78:3f:59:4e:10:85:32:e4:58:d6:79:cc:5f:4e:a7:fb:ca:
         67:86:d6:9f:ae:97:a8:c0:b8:31:00:c4:98:d5:f0:84:f8:8a:
         e2:ac:f8:70:2f:48:c8:8f:1b:13:a7:f2:36:2d:01:ce:58:67:
         d7:d0:c1:ca:f6:48:7c:46:2a:d7:5c:97:c4:ce:00:70:6d:1e:
         45:63:29:ee:9b:2e:82:5f:0c:88:8b:06:c8:cd:30:09:7a:6b:
         ee:a9:59:73:4c:1c:e0:dd:25:03:0f:b8:bc:2c:dc:83:90:a7:
         55:e3:49:33:31:29:df:95:a0:05:84:f7:24:7b:23:4f:20:9f:
         d3:b5:4d:11:79:c8:d2:39:5e:da:5f:67:e0:39:33:88:f1:aa:
         70:ac:dc:7c:43:bb:ef:88:2c:c5:1a:ec:69:0e:26:77:b7:0c:
         18:28:e2:ac:19:1e:99:4f:99:14:da:19:0c:aa:09:ac:0f:c9:
         ef:3d:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:20:13 2025 by rpki-client