Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/W3LqS2VK5OZvYRVz4Lg76CamIx4.roa
File:                     W3LqS2VK5OZvYRVz4Lg76CamIx4.roa (raw, json)
Hash identifier:          iTUYQolDPIVtDysR1/nFEhMc31K0pjirtDIUvb3v4SY=
Subject key identifier:   5B:72:EA:4B:65:4A:E4:E6:6F:61:15:73:E0:B8:3B:E8:26:A6:23:1E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       F7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/W3LqS2VK5OZvYRVz4Lg76CamIx4.roa
Signing time:             Thu 24 Jul 2025 02:05:27 +0000
ROA not before:           Thu 24 Jul 2025 02:05:27 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.14.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:05:27 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=5B72EA4B654AE4E66F611573E0B83BE826A6231E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:75:6f:4c:c5:fd:fb:db:af:29:af:e6:59:
                    7b:a7:6d:80:88:46:3c:6f:b9:fb:f6:cd:0a:d7:22:
                    c5:35:cc:37:4f:42:b5:44:4b:5a:2f:59:ed:56:9c:
                    9d:84:82:74:87:51:fd:dc:a3:10:59:e4:6e:57:00:
                    6c:af:6f:76:f6:4d:ce:10:8e:06:c4:56:3e:cd:05:
                    70:c4:2e:02:e2:1a:84:88:f9:1f:d7:d8:88:f1:7d:
                    51:74:17:10:c1:ce:0e:7d:8a:fb:81:f6:74:d5:08:
                    2b:2a:85:45:80:76:e8:ea:33:9c:c2:3b:fb:6e:f5:
                    e0:a5:eb:86:26:dc:97:79:a9:c0:2e:48:11:0b:cc:
                    af:02:df:8c:84:05:2b:39:b2:f4:66:15:c0:89:4d:
                    16:48:a6:28:9d:6c:35:dd:71:d5:b4:ae:46:27:5d:
                    94:4b:33:94:2b:50:ec:0a:47:d6:78:bd:22:56:ec:
                    ee:5d:be:77:f8:28:49:90:21:cf:f8:11:f5:4c:5f:
                    3c:14:76:bb:4c:bc:33:db:ba:37:1a:0b:79:2c:10:
                    2f:dc:9b:8b:4f:c3:e7:a8:b5:bf:9e:75:ee:e6:9e:
                    5e:e5:48:ff:83:f4:38:80:4d:c0:00:44:50:4f:1b:
                    cc:fe:6a:df:1b:f7:83:ea:41:07:72:e9:77:62:7e:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:72:EA:4B:65:4A:E4:E6:6F:61:15:73:E0:B8:3B:E8:26:A6:23:1E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/W3LqS2VK5OZvYRVz4Lg76CamIx4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:a9:e2:1c:a2:7e:d7:ef:d3:dd:9d:a7:90:a8:cf:e5:f7:
         cd:b0:48:ed:19:57:f3:ba:e2:ab:4a:ef:77:4b:04:2f:54:2b:
         2c:dd:0f:44:fe:30:b2:4c:d7:0a:62:62:3a:41:78:97:99:92:
         49:09:e1:cb:41:ed:3e:ad:f6:ac:fa:c8:a1:6a:db:ae:0b:e1:
         c5:47:a9:2f:90:68:d0:b9:ff:83:36:67:7f:4c:b2:02:4b:1c:
         02:e2:93:ca:14:42:ff:73:f3:cd:5a:2f:13:f4:e0:b6:1e:ec:
         ad:8d:c9:56:53:d8:6e:7c:65:77:6c:55:de:5b:fc:03:dd:a7:
         6d:95:52:06:d8:0e:03:3e:d8:aa:37:32:19:93:bd:74:f5:95:
         dc:d4:83:2c:41:50:f8:95:1c:9f:7c:ab:ad:91:e9:45:37:26:
         ad:50:69:ab:7d:d1:77:d1:b8:e1:a8:88:2a:47:85:70:fa:43:
         7a:d8:65:33:6c:95:98:5d:8a:4c:6e:55:f5:76:23:5d:64:6a:
         f7:b8:9d:82:e7:6f:d4:2d:d7:06:27:01:db:3f:30:66:ca:45:
         a8:98:bf:92:c8:03:1c:b9:57:f4:e6:0b:ad:20:27:d4:1e:9d:
         dc:b0:b8:15:c4:21:2d:4d:ee:39:63:33:42:c9:24:be:b3:55:
         a1:45:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:06 2025 by rpki-client