Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/RZrP9EYg1pY8X8xklMlJGPb5fnE.roa
File:                     RZrP9EYg1pY8X8xklMlJGPb5fnE.roa (raw, json)
Hash identifier:          wCvsFvDfaYeStABCzvZxMonmyrHv51tpp7BWj0tUz+c=
Subject key identifier:   45:9A:CF:F4:46:20:D6:96:3C:5F:CC:64:94:C9:49:18:F6:F9:7E:71
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       B5
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/RZrP9EYg1pY8X8xklMlJGPb5fnE.roa
Signing time:             Thu 24 Jul 2025 01:04:28 +0000
ROA not before:           Thu 24 Jul 2025 01:04:28 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:04:28 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=459ACFF44620D6963C5FCC6494C94918F6F97E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:2f:d2:ff:92:69:58:65:38:5b:26:ee:ab:
                    9d:9e:9d:11:10:4a:5f:ed:e6:50:04:44:b5:d5:82:
                    81:3c:86:4a:c1:5c:b5:d4:4a:4e:e8:7c:25:fe:5a:
                    7f:ea:9f:dd:6a:25:e2:c5:ee:49:46:a6:e3:63:0b:
                    70:68:9b:c7:4c:89:bd:9a:74:aa:47:a1:9d:a2:26:
                    0c:69:55:2a:c4:b8:3c:a3:c0:6f:2d:9f:6f:10:6e:
                    b0:a4:9b:fe:18:ac:71:3c:04:58:59:2b:e9:e3:37:
                    fc:a7:b7:fb:a8:0d:70:3e:4d:7c:c5:04:24:96:5d:
                    68:52:36:bd:60:c1:c9:58:59:59:53:f7:77:96:c0:
                    40:e7:c3:a5:56:d2:65:8b:d7:4e:eb:f5:52:9a:0e:
                    14:2a:ad:88:8b:86:e0:79:d7:2b:89:0e:b6:6f:56:
                    c4:8e:db:83:f7:9f:7f:4a:d5:b5:45:e2:ba:20:51:
                    46:af:3f:d9:88:dc:f0:96:01:af:f1:55:ea:e9:10:
                    91:d5:9c:b0:46:f4:a8:9e:d0:5d:af:2a:c7:4c:01:
                    bc:d0:02:d3:52:9a:a0:70:7e:49:b2:46:6d:58:79:
                    99:4d:91:42:f7:aa:0a:06:80:01:1b:fb:2d:39:02:
                    14:e9:7b:34:13:2e:4c:f0:23:32:e9:d1:7a:dc:de:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:CF:F4:46:20:D6:96:3C:5F:CC:64:94:C9:49:18:F6:F9:7E:71
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/RZrP9EYg1pY8X8xklMlJGPb5fnE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:1f:67:4b:c2:d8:28:89:73:b5:87:91:e7:db:f0:ad:1e:c9:
         b1:9b:14:6b:e4:69:a5:fe:35:5f:9b:70:3c:2b:33:ad:40:b3:
         7e:37:cc:b1:e6:c4:db:48:17:4a:9b:ad:f6:a5:10:be:cb:54:
         82:53:d0:fb:7e:ae:1f:29:1f:b6:32:5c:c7:cc:2c:2c:2a:f7:
         0a:f6:2d:1c:02:11:66:b5:da:7c:60:23:fc:55:ac:b0:a5:e9:
         d3:67:d2:cf:11:8d:57:b7:38:52:21:1c:a1:8c:5b:6c:24:29:
         24:24:c1:9e:62:16:e2:b2:d0:f2:79:2b:1e:95:eb:75:11:6f:
         84:ea:43:a4:d0:be:f3:ea:8a:c3:b8:cf:fe:a4:7c:ff:e7:f0:
         45:ed:e3:57:21:8c:a8:3a:3e:f7:40:68:99:35:fc:5d:42:d6:
         f7:4a:14:6b:9b:7b:a3:b1:55:5b:ad:f8:ff:4a:e6:63:ef:aa:
         4b:b7:f1:2c:47:1e:8e:8e:2d:65:88:03:ae:66:9e:3f:35:78:
         4f:31:3a:65:2a:cf:02:10:cf:cf:5c:6e:77:13:d3:6f:28:6b:
         10:20:63:39:87:8e:16:81:0b:4b:5a:00:15:ff:e8:80:97:5c:
         42:cd:c4:f0:cd:25:6b:a9:29:8f:a2:9b:4f:ff:50:fd:47:07:
         79:11:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:19:52 2025 by rpki-client