Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Og06Lh816v140mkhgPUhXBL3GvA.roa
File:                     Og06Lh816v140mkhgPUhXBL3GvA.roa (raw, json)
Hash identifier:          OwRSxRs6VIUUdK/iWj/CvJvS3H1300dUQEFYJH4jM2g=
Subject key identifier:   3A:0D:3A:2E:1F:35:EA:FD:78:D2:69:21:80:F5:21:5C:12:F7:1A:F0
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       E7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Og06Lh816v140mkhgPUhXBL3GvA.roa
Signing time:             Thu 24 Jul 2025 01:58:19 +0000
ROA not before:           Thu 24 Jul 2025 01:58:19 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.239.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:58:19 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=3A0D3A2E1F35EAFD78D2692180F5215C12F71AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:73:e7:04:ac:d9:d7:fc:64:ae:62:b9:71:
                    e1:39:13:0e:d2:d6:4b:c4:27:62:d6:fe:61:40:0b:
                    6a:27:b6:3a:f9:8b:60:2b:84:59:37:0d:bd:5f:49:
                    5e:16:33:4d:fc:db:6b:b8:00:ab:9a:82:1b:cc:ed:
                    fb:1e:ac:13:79:77:42:7b:e6:67:f1:fb:4f:46:fa:
                    5a:02:ae:26:9b:09:7a:57:44:10:dd:83:d7:7c:46:
                    50:20:6f:e0:c8:00:2e:e1:04:64:03:10:68:cc:52:
                    35:af:2e:17:ed:2c:51:74:20:65:98:f1:89:1e:7f:
                    f6:0d:c9:f1:01:3f:09:90:14:9c:ee:f2:27:ac:00:
                    99:09:7f:9c:9d:86:5c:1d:fb:93:a5:23:12:0c:cb:
                    c2:a8:a5:72:11:9e:7a:5f:9e:f6:12:22:d8:03:97:
                    77:0a:64:a8:58:93:d5:f1:a4:44:92:62:79:63:2b:
                    f5:75:97:b3:d1:b9:80:ce:ee:47:ee:11:47:0b:fc:
                    ae:d8:42:e8:4f:44:a3:a6:20:dc:82:a1:d3:34:0d:
                    70:df:50:25:5b:1e:d1:bf:c0:9f:0d:d3:f1:8c:a0:
                    79:f0:21:b7:c3:a4:05:20:49:bb:5f:1f:9f:ef:4c:
                    48:5c:b0:96:92:d8:e0:79:e6:6b:10:d8:b9:b5:63:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0D:3A:2E:1F:35:EA:FD:78:D2:69:21:80:F5:21:5C:12:F7:1A:F0
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Og06Lh816v140mkhgPUhXBL3GvA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:26:69:51:9f:c3:6f:6b:41:90:f1:69:ac:1b:a8:85:61:8b:
         e3:d9:7e:45:ab:3c:cd:a5:f4:a8:ba:a4:d9:61:92:70:b8:60:
         d2:38:bf:38:fc:02:cf:d8:f8:44:7f:36:97:46:b9:ea:e4:00:
         8e:2c:fa:2d:b9:1e:94:63:00:34:ee:15:4d:e7:3e:f0:17:8c:
         2e:98:e2:b1:0e:d0:4a:ec:55:c3:e9:bd:a5:d9:de:73:59:a8:
         25:61:bc:67:0a:ad:8e:68:5b:c0:7b:04:7e:01:0c:56:09:f8:
         59:0c:eb:10:cc:3a:f2:bc:c9:e4:d6:76:cf:d9:87:12:d6:2c:
         d8:c6:20:f8:24:61:18:11:06:c0:ef:12:44:79:2e:9d:25:fd:
         e7:ab:77:d4:7c:cc:4f:58:29:3d:cb:13:62:5f:18:1b:55:b0:
         e0:7a:1b:bf:6c:d0:40:82:0f:49:0b:b2:2f:87:b6:81:1f:77:
         9f:bf:3c:ba:24:ed:fb:83:88:91:9e:5b:f1:2e:94:38:b1:97:
         83:49:95:fb:c9:05:cb:bf:ec:bc:07:a0:f1:bb:bd:af:26:d9:
         aa:d8:18:4d:cc:dd:bc:c7:cd:73:41:ba:02:f6:7d:65:e3:c1:
         99:0c:25:ee:23:27:5e:bf:86:21:da:6d:14:5c:e2:7c:26:d6:
         bc:82:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:20:13 2025 by rpki-client