Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/W_DEHIGCeKZOikgWSapwQdnXgLk.roa
File:                     W_DEHIGCeKZOikgWSapwQdnXgLk.roa (raw, json)
Hash identifier:          WDw1g5INVZ8l72b1GS/seIgHlnxdRiX0a9Bv1HpN8UE=
Subject key identifier:   5B:F0:C4:1C:81:82:78:A6:4E:8A:48:16:49:AA:70:41:D9:D7:80:B9
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0126
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/W_DEHIGCeKZOikgWSapwQdnXgLk.roa
Signing time:             Thu 24 Jul 2025 02:29:17 +0000
ROA not before:           Thu 24 Jul 2025 02:29:17 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.129.184.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:29:17 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=5BF0C41C818278A64E8A481649AA7041D9D780B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:3f:76:4a:10:53:85:19:50:d8:44:37:c8:
                    3b:16:30:2d:11:38:a3:ea:6f:c4:8f:e0:73:49:f1:
                    52:5a:d8:47:09:40:27:11:85:61:02:24:99:53:5e:
                    a4:82:a3:e4:b3:5e:83:fd:0a:ce:56:4d:d4:bf:da:
                    7e:3b:d6:ec:2d:a3:46:9c:ae:ed:f7:62:e3:4c:b3:
                    25:bc:ac:7e:a4:3a:ae:04:29:f3:a2:75:3d:33:a2:
                    2a:c6:62:59:25:bb:aa:5c:97:42:c3:15:82:01:7f:
                    86:6b:52:47:16:8f:01:03:93:9d:13:06:89:fc:ac:
                    1b:d2:6f:c8:7c:0c:c4:df:95:32:fd:b3:0b:42:7d:
                    00:49:8e:ce:5b:5d:80:e1:9e:e9:c3:50:41:c5:02:
                    43:f0:64:b4:ad:4b:83:eb:91:66:65:36:29:3e:0c:
                    3f:f4:ea:12:77:b8:87:94:d9:d6:05:ad:8c:ff:75:
                    08:33:89:f3:47:b1:26:4e:a7:0b:39:07:26:8d:f7:
                    e2:0f:12:5b:d6:ae:8d:92:a1:57:0a:5c:ed:20:fc:
                    74:44:2d:db:37:52:16:e8:d8:3e:2b:3f:2a:fa:cf:
                    b2:1a:9d:90:f9:8f:fd:49:0f:ab:a0:70:2e:6a:40:
                    7c:99:d5:c5:61:f0:f8:2b:5b:97:b3:7d:df:01:b5:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:C4:1C:81:82:78:A6:4E:8A:48:16:49:AA:70:41:D9:D7:80:B9
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/W_DEHIGCeKZOikgWSapwQdnXgLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:85:92:a5:aa:51:b2:1f:80:c3:12:32:51:21:df:18:22:
         8a:61:ce:b7:21:b2:10:77:f2:bb:92:92:70:1f:0e:43:17:74:
         a6:3c:db:a2:21:dd:9a:ae:f1:94:71:5f:84:ba:c0:22:ca:71:
         7c:65:2b:88:b6:9f:f4:48:d6:32:c1:55:d7:a6:00:ef:6c:cf:
         88:26:3d:cb:17:34:ef:97:fd:c1:68:6f:88:0e:8e:cc:da:bb:
         a9:3e:6e:db:a9:d1:58:a5:20:fd:e1:b1:b4:98:e7:5c:31:9d:
         fd:45:2f:aa:48:05:57:f2:30:a9:c4:bf:02:ea:60:1d:22:1c:
         7b:1a:4a:56:e3:31:d7:1c:94:b4:04:ec:02:ae:44:2f:0c:2b:
         d9:71:d6:f6:38:1d:0e:ed:e5:5c:14:99:57:9b:d7:63:0b:e6:
         9e:83:dc:00:7f:bf:fb:d7:4e:c3:48:62:06:e3:cd:15:43:9a:
         c8:19:cc:d2:a4:a5:0c:af:de:28:74:71:fc:fb:0b:70:23:af:
         d2:60:f9:ea:17:74:80:a6:20:d1:9c:c1:6c:52:f5:dd:ad:2b:
         df:21:50:dd:b6:91:43:31:00:dc:75:29:15:d4:04:e0:52:86:
         7e:d3:df:25:db:d2:c9:75:d6:35:a9:54:2c:5d:3b:25:75:eb:
         fa:02:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:07:31 2025 by rpki-client