Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UOM9TdWr4EHqlafpJh20koFqmaA.roa
File:                     UOM9TdWr4EHqlafpJh20koFqmaA.roa (raw, json)
Hash identifier:          GUIa+xnkLNKexI2xRy3Z2ySqimgOeBQ20lSivq4La74=
Subject key identifier:   50:E3:3D:4D:D5:AB:E0:41:EA:95:A7:E9:26:1D:B4:92:81:6A:99:A0
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       011D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UOM9TdWr4EHqlafpJh20koFqmaA.roa
Signing time:             Thu 24 Jul 2025 02:22:06 +0000
ROA not before:           Thu 24 Jul 2025 02:22:06 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.33.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:06 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=50E33D4DD5ABE041EA95A7E9261DB492816A99A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:a0:df:ba:5d:02:a1:13:83:20:84:3e:1e:
                    60:b8:38:da:df:43:14:f3:e3:2f:6d:6d:64:e3:e2:
                    2b:fa:f8:35:91:7b:70:17:2d:74:86:56:be:5f:2b:
                    ff:14:3e:06:b8:7b:b2:ce:a5:35:5f:b0:01:03:2d:
                    54:33:d6:ef:9a:4c:d3:43:4d:63:e9:6c:9d:f6:4f:
                    3c:c2:a2:91:a8:02:24:01:f6:a4:2f:f4:c6:fa:85:
                    35:5d:9b:fb:df:24:7b:2f:19:3b:e3:91:05:4f:1b:
                    47:8b:61:cf:86:60:04:8a:7f:40:7e:22:c5:ab:e9:
                    5c:55:2b:76:06:86:c2:1d:f5:4c:34:06:52:65:e6:
                    ae:27:8c:40:a2:7d:67:c8:37:c5:aa:a2:f2:63:19:
                    4d:d3:34:ea:d9:25:a6:1b:e7:92:f7:84:82:97:db:
                    96:24:98:b1:4e:af:ed:4f:c6:09:aa:d5:fe:38:2b:
                    6c:dc:67:35:b9:ee:bf:bf:3e:40:48:ed:cc:df:bf:
                    97:b9:b7:55:e6:78:2b:c2:1a:6a:3e:90:69:c1:f4:
                    1a:1a:78:d2:ed:89:2b:5a:0f:43:4c:3d:82:4c:0c:
                    a9:4a:0f:86:d6:35:57:b2:95:86:78:f0:ca:6e:f1:
                    5e:ce:2b:17:23:e5:35:f3:7b:85:f2:5a:b9:fb:dd:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E3:3D:4D:D5:AB:E0:41:EA:95:A7:E9:26:1D:B4:92:81:6A:99:A0
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/UOM9TdWr4EHqlafpJh20koFqmaA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:f9:4a:ca:1e:44:b3:a1:c3:9e:34:8d:25:e4:3b:6a:dd:
         8d:45:f7:65:94:7d:2f:a1:11:98:d2:0d:f8:17:d5:fd:2e:85:
         c6:4f:30:c0:e1:04:47:d2:d4:6e:38:f7:35:05:4a:0d:f9:54:
         bd:c3:1e:10:ae:2e:0e:a2:be:f8:c0:6f:d0:f6:26:3f:ff:e3:
         d5:9f:dc:35:80:b2:10:c9:4f:e2:69:32:25:b8:eb:19:bd:db:
         68:90:cd:f0:3a:11:57:ca:cc:16:85:f3:f1:13:7a:b0:f8:8c:
         26:2d:30:97:9f:b5:2b:97:ea:d4:c4:da:88:6e:d2:68:f8:92:
         e4:90:24:de:ea:a2:01:9c:6a:44:6c:52:02:bb:88:95:67:0c:
         80:10:e3:11:29:82:59:82:7f:b9:09:c2:9b:b5:a8:07:36:bb:
         f9:86:d9:a8:41:b1:a1:ce:96:25:60:2a:50:bf:46:08:fa:5c:
         7a:4e:24:8f:f4:37:7f:06:43:48:51:27:52:f4:0e:30:c8:40:
         eb:10:d8:dd:92:cb:ab:5f:ca:73:df:87:d2:38:af:2a:7f:4d:
         83:91:f0:b8:cf:d4:dc:b5:af:f4:5b:2c:63:47:06:9a:fd:5e:
         d3:69:0e:71:c5:d0:38:3d:8e:22:eb:dd:75:2f:c5:a9:02:e6:
         9e:d8:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:06:46 2025 by rpki-client