Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/POGPvHrwYAHj_hJaQmW8VZB_Rlk.roa
File:                     POGPvHrwYAHj_hJaQmW8VZB_Rlk.roa (raw, json)
Hash identifier:          dl6NqLJ/Z9dkROyN3OS1Mfl2feCgd9Tt2IYfMs1wWWU=
Subject key identifier:   3C:E1:8F:BC:7A:F0:60:01:E3:FE:12:5A:42:65:BC:55:90:7F:46:59
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       80
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/POGPvHrwYAHj_hJaQmW8VZB_Rlk.roa
Signing time:             Thu 17 Jul 2025 01:19:15 +0000
ROA not before:           Thu 17 Jul 2025 01:19:15 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:19:15 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=3CE18FBC7AF06001E3FE125A4265BC55907F4659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:85:33:ca:fa:db:d0:92:2f:a4:2e:65:cc:
                    c0:ce:ba:7f:b5:77:e7:4d:d5:f2:68:76:bb:b9:ca:
                    d5:c9:09:78:94:44:9f:6c:03:44:98:3c:dd:0f:55:
                    72:3d:e1:9f:0f:94:13:c0:6d:fd:10:84:5f:32:de:
                    73:9d:75:87:ed:44:38:4b:6f:bb:39:25:64:c6:26:
                    88:f8:aa:ff:0d:c0:0a:58:07:d3:d8:be:70:0d:69:
                    49:12:eb:c8:46:cb:26:25:07:8e:9b:77:92:ed:9e:
                    43:a5:56:fa:73:92:3f:5b:8a:15:1e:5d:3c:72:58:
                    ac:32:48:8a:54:36:53:4d:79:4e:04:6a:19:1b:c2:
                    12:7b:7a:ad:c2:dc:31:63:22:f3:e5:d0:d7:e2:d3:
                    0d:3b:60:04:e2:c1:dc:57:08:63:bd:64:a4:49:36:
                    2c:38:65:30:d7:5d:af:9c:e3:a0:9a:e7:dc:99:56:
                    fb:e5:3f:7c:4b:e9:cc:4b:1b:51:37:28:08:51:f1:
                    9c:b7:73:75:94:e0:d1:fb:74:44:69:bb:d3:7c:c5:
                    65:41:46:80:4a:76:1e:db:00:41:48:f7:87:74:e2:
                    86:8e:17:eb:99:ae:ff:1d:4c:13:8f:32:61:f6:1e:
                    57:b7:0d:ad:5d:29:a9:49:41:ea:c0:24:cc:53:ca:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:8F:BC:7A:F0:60:01:E3:FE:12:5A:42:65:BC:55:90:7F:46:59
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/POGPvHrwYAHj_hJaQmW8VZB_Rlk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:ed:54:ee:a0:3d:27:ec:21:e2:8e:96:40:41:94:8b:55:69:
         65:88:f6:23:2b:4c:19:e5:15:06:33:cd:2f:22:95:d2:f0:04:
         90:64:a6:b9:1f:6d:2e:9c:e4:92:c5:e9:6d:4a:49:a9:cc:c2:
         a1:05:0b:a6:cb:97:ff:93:1c:11:69:f3:99:6a:59:2a:9e:70:
         90:48:f7:45:7d:a8:61:65:82:2b:51:18:37:99:07:65:d3:d0:
         ae:19:31:2b:90:a1:a6:ae:ae:ae:1c:79:3f:d9:33:47:c2:64:
         50:76:0a:a7:52:f5:a8:6a:3d:40:b3:e0:94:7c:5c:c7:c8:63:
         ab:cf:a5:db:fc:ee:93:f5:90:0e:fc:99:35:69:5c:00:bc:cf:
         08:42:52:41:72:5b:f1:f7:91:d0:13:8b:7a:64:5f:ee:03:53:
         05:bc:f6:eb:18:16:1a:34:38:04:b7:29:7c:cd:63:f1:36:0b:
         a7:c5:65:42:5b:4d:15:a0:fc:0c:13:ad:44:e7:50:d6:6e:55:
         f4:55:b6:9e:f3:48:d8:20:61:e8:25:7a:8c:af:7b:b6:bd:2e:
         23:d2:de:bd:e3:c6:1c:50:07:f6:89:1b:5f:6d:99:d6:47:c8:
         f5:e7:13:4c:af:36:25:56:2a:87:9b:10:fb:53:43:15:1e:bc:
         ec:f5:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:38 2025 by rpki-client