Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TxLVEBlkl4kBhMMeVbsmYc40xzg.roa
File:                     TxLVEBlkl4kBhMMeVbsmYc40xzg.roa (raw, json)
Hash identifier:          9qGM/CPK5BsAZuICsvVa9n9fItGkU0ZM5qBJoTR/2QY=
Subject key identifier:   4F:12:D5:10:19:64:97:89:01:84:C3:1E:55:BB:26:61:CE:34:C7:38
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       81
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TxLVEBlkl4kBhMMeVbsmYc40xzg.roa
Signing time:             Thu 17 Jul 2025 01:19:15 +0000
ROA not before:           Thu 17 Jul 2025 01:19:15 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.204.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:19:15 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=4F12D510196497890184C31E55BB2661CE34C738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:f5:5b:c1:29:88:16:37:4a:1e:d6:a0:a0:
                    a0:42:29:22:ac:a7:b9:11:51:8e:fc:4a:83:62:33:
                    41:91:48:13:5a:ea:ed:5e:5b:e7:ca:c3:59:79:79:
                    54:32:bd:c8:87:fc:31:ad:ba:02:f2:c6:28:55:a1:
                    db:df:d2:3b:e9:41:4e:19:ba:63:2b:1c:c0:2f:58:
                    4b:6e:c5:2b:93:71:10:1d:61:9b:04:67:dd:e0:f0:
                    17:38:28:a6:3b:f7:ca:54:00:14:ad:4c:5a:79:23:
                    62:00:9f:f3:4b:ed:aa:8e:af:92:0c:1f:04:51:f0:
                    17:30:3f:6d:71:e0:a8:cc:49:3a:a5:d3:2f:c8:f4:
                    21:23:6d:0b:3c:b5:f4:75:30:76:a7:ae:c1:ae:28:
                    ce:ab:f7:72:4a:b8:29:1d:ac:dc:d1:e7:a2:af:d6:
                    5e:74:80:5b:9c:51:53:3e:a4:97:4f:19:60:e6:f4:
                    c9:47:25:d6:63:50:46:74:8f:23:bd:a5:37:0c:e7:
                    e2:06:44:73:27:20:d2:4f:0b:6d:61:fa:11:b2:ce:
                    c8:26:63:e5:a8:45:f9:82:d9:7b:72:98:8a:1c:8d:
                    f1:6f:db:9a:6e:1c:7e:46:77:be:d7:f9:fc:92:b6:
                    8a:d4:ad:cc:4d:fb:2a:ef:b2:c5:cc:4f:88:4e:83:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:12:D5:10:19:64:97:89:01:84:C3:1E:55:BB:26:61:CE:34:C7:38
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/TxLVEBlkl4kBhMMeVbsmYc40xzg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f1:41:46:0b:ab:8b:9a:30:94:f6:c4:5e:7c:1b:6b:6a:26:
         e2:06:07:1a:0a:a7:09:73:55:95:bd:47:ac:30:a1:aa:64:4b:
         18:b4:96:a7:fa:43:41:a5:51:b6:e8:39:e4:f0:71:4f:eb:ac:
         33:e1:97:88:6d:14:88:8f:db:4c:fc:e8:c4:7a:74:ef:25:4a:
         1d:7c:fa:1f:1e:e4:c3:6b:1b:0e:55:1f:d1:be:31:ce:f0:d7:
         26:e6:28:53:a8:fb:6a:0a:d0:42:55:72:9c:f7:8c:09:a0:e4:
         32:97:0a:ba:cd:4a:08:38:ba:5a:42:45:96:af:62:d8:35:55:
         77:5c:0a:4c:6e:68:05:aa:0e:41:41:bc:e7:1f:bf:89:35:14:
         a4:42:92:6c:a6:2f:ca:78:c7:d9:af:76:16:c8:dd:d2:58:64:
         b2:f0:d7:a0:ba:60:82:a0:b0:02:77:ff:8f:21:3e:a2:2d:5c:
         71:2d:09:c3:52:32:a9:6b:b1:61:79:ca:90:0c:1d:52:af:b2:
         47:88:a0:bc:5e:93:4f:27:46:36:b2:5a:bd:cc:fb:19:81:44:
         c7:13:ff:ad:50:6b:36:f3:6d:4d:2b:91:16:d3:d4:aa:1d:58:
         82:da:13:31:1c:ca:98:f7:0f:70:84:39:b9:d3:dd:13:35:72:
         1c:c9:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:09:45 2025 by rpki-client