Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/OO6i4tTU7X9eLmr-7-Ln5XkhouA.roa
File:                     OO6i4tTU7X9eLmr-7-Ln5XkhouA.roa (raw, json)
Hash identifier:          eDwP/gU+H0TXNJ9GnSeN4Ipjo80hgyolm/U01Fsz0Ts=
Subject key identifier:   38:EE:A2:E2:D4:D4:ED:7F:5E:2E:6A:FE:EF:E2:E7:E5:79:21:A2:E0
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       E1
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/OO6i4tTU7X9eLmr-7-Ln5XkhouA.roa
Signing time:             Thu 24 Jul 2025 01:51:02 +0000
ROA not before:           Thu 24 Jul 2025 01:51:02 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.236.224.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:51:02 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=38EEA2E2D4D4ED7F5E2E6AFEEFE2E7E57921A2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:fd:c1:15:e6:b1:dd:6b:5f:db:ef:d8:e4:
                    b2:f1:e7:0a:22:b9:d9:4c:74:e5:4b:fc:d1:7a:01:
                    96:45:a0:af:8f:02:e6:cd:7a:2d:c0:94:bf:89:3e:
                    2b:ad:a4:7b:3c:3f:8b:94:37:70:44:5c:e8:0f:79:
                    ad:c0:9b:af:cc:6e:cf:dc:d7:89:de:33:4a:03:92:
                    d8:52:8d:96:9e:0b:9a:e6:4a:54:94:4f:bf:f7:4d:
                    cd:19:62:c2:e7:ce:63:e9:2e:66:20:71:61:5c:cf:
                    14:1d:f3:1e:e4:ce:f7:16:04:42:77:48:37:bc:f3:
                    2e:9e:6d:a0:c0:92:29:ca:f3:45:19:91:5c:7b:3c:
                    de:e5:ac:da:24:df:7c:3e:b8:13:54:5d:84:ad:8b:
                    db:ca:5e:e6:86:c9:60:af:b8:2f:af:b6:75:89:3d:
                    9a:58:bf:72:c9:ea:f4:be:d7:36:9a:1c:28:b0:20:
                    11:6d:2a:42:6e:bb:da:3b:a3:73:45:65:93:6a:84:
                    32:96:af:83:8d:2a:ae:07:a3:6f:ec:be:fa:21:1a:
                    59:3b:d4:b3:6f:4d:bb:af:31:8d:48:c9:e4:11:f2:
                    1c:5e:31:d3:97:aa:1e:b2:01:aa:b0:b4:01:2f:e2:
                    d9:e8:13:fd:90:51:c0:29:0c:35:64:4b:fd:c8:8e:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EE:A2:E2:D4:D4:ED:7F:5E:2E:6A:FE:EF:E2:E7:E5:79:21:A2:E0
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/OO6i4tTU7X9eLmr-7-Ln5XkhouA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:94:75:7b:91:5f:9c:b8:31:48:69:ab:c1:58:f2:56:c7:b1:
         27:d6:3b:50:b6:82:84:d5:db:17:2a:a8:ef:93:93:c6:55:7e:
         a4:43:3d:0f:97:b8:93:f4:6f:fc:6d:af:c3:ba:0e:fb:c1:b0:
         49:6a:c9:a6:f7:e8:d5:28:22:f8:9b:7e:34:31:36:c6:55:13:
         fc:d2:89:c4:81:23:14:72:5f:a5:55:93:1f:ca:fe:e8:19:24:
         dc:df:14:23:ea:ae:ea:ea:10:0b:e7:7c:7c:30:47:8a:50:62:
         ab:ba:18:c8:6d:56:fe:c3:50:97:73:c0:ba:1b:89:da:3d:84:
         69:73:d9:3c:a1:f7:00:ed:b8:1f:51:96:14:50:5f:7a:3e:c1:
         16:ab:6c:af:db:70:fc:ab:cb:a1:fb:d0:d3:c8:ec:59:45:f4:
         7b:ab:f3:44:83:97:0f:c2:71:91:9d:15:5f:a9:6f:72:7e:9e:
         14:76:81:1a:05:af:0a:0d:eb:4a:34:34:9a:93:38:1c:85:81:
         fd:f7:38:e1:62:86:79:6a:ec:b5:08:e7:4b:99:11:b5:56:b4:
         52:34:70:42:42:c4:14:94:f2:38:bb:51:35:fc:d0:5a:67:f5:
         ad:d6:0b:d3:8b:66:70:d0:11:c3:bf:fa:e0:9f:24:a8:11:bd:
         09:83:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:55 2025 by rpki-client