Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YRJhNOs38tjbqBal6YD9WSHU_w0.roa
File:                     YRJhNOs38tjbqBal6YD9WSHU_w0.roa (raw, json)
Hash identifier:          rVulyMQkyKpT6+XBPscub5nw7ZbwkS00R8vJ2hS/1NU=
Subject key identifier:   61:12:61:34:EB:37:F2:D8:DB:A8:16:A5:E9:80:FD:59:21:D4:FF:0D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       8F
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YRJhNOs38tjbqBal6YD9WSHU_w0.roa
Signing time:             Thu 24 Jul 2025 00:30:40 +0000
ROA not before:           Thu 24 Jul 2025 00:30:40 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.218.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:30:40 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=61126134EB37F2D8DBA816A5E980FD5921D4FF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:50:63:a4:e9:fb:9c:27:d2:d8:7a:2c:a6:
                    e9:1d:79:b6:b3:96:93:e5:40:34:82:e6:ef:70:9a:
                    09:04:ba:0a:37:60:fd:54:b3:99:c5:39:9b:1b:a4:
                    fd:31:11:28:1a:96:47:50:a0:ef:1e:d9:20:e6:a3:
                    eb:f8:9a:d3:00:6f:c1:f3:01:50:39:51:a9:78:26:
                    e0:24:e1:9c:df:72:c9:9e:7c:80:4f:24:5b:3e:cc:
                    53:07:b9:bb:46:ae:26:f7:5a:1b:a8:df:83:f0:aa:
                    11:74:b8:0a:1f:81:78:d5:92:2e:ea:90:a8:02:49:
                    86:d9:59:72:40:ce:af:8e:ec:8f:28:40:09:b1:4c:
                    b3:04:10:bd:55:1c:dc:e0:f3:f2:93:ee:16:b8:73:
                    52:d2:ba:21:57:23:38:9f:81:f0:e9:56:4d:11:00:
                    92:4b:cb:48:36:eb:3f:e3:9d:86:ed:30:43:af:49:
                    7e:b0:31:f1:06:df:40:8c:a1:ea:e5:50:5b:32:32:
                    2f:15:f3:58:80:6b:f6:1a:b9:4d:56:23:f7:1c:16:
                    a1:8a:c5:f3:d9:03:8b:54:06:e0:54:17:a1:35:4b:
                    5c:b8:be:33:7d:8c:25:5f:2e:2c:6e:93:fc:55:62:
                    85:b1:99:64:7d:24:9b:fb:a4:00:31:3c:e5:18:fb:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:12:61:34:EB:37:F2:D8:DB:A8:16:A5:E9:80:FD:59:21:D4:FF:0D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YRJhNOs38tjbqBal6YD9WSHU_w0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.218.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:47:9e:df:ec:3a:c7:2a:e0:f4:5b:6e:81:7e:0a:d4:60:30:
         f4:bc:0c:86:08:2e:5c:5c:2d:ea:d7:3b:03:69:ea:c6:1d:78:
         43:26:af:fd:d4:57:ab:b0:82:15:ff:a3:5f:42:ea:67:7d:2a:
         ff:3a:ba:a3:15:2a:1b:48:ed:fd:bf:1e:6d:2f:59:f6:57:e1:
         e8:2b:c8:9f:7c:0f:d1:e4:4c:59:a4:69:dd:58:8a:bb:e3:a0:
         5b:89:4e:50:82:33:96:83:7a:99:a3:81:e6:e1:0e:44:55:b6:
         78:15:12:6d:9d:bc:b5:19:f4:74:92:de:52:5f:19:f0:ea:25:
         06:96:54:d6:9b:41:3d:53:f0:bd:da:9e:29:a8:6e:bc:33:df:
         fd:b6:69:b9:77:1a:fb:06:6c:76:74:44:34:7e:e3:fc:43:1c:
         1c:0a:94:e8:41:2e:29:17:5a:f2:20:10:f5:99:8e:dd:8f:72:
         92:7d:ad:6c:5d:92:aa:3f:db:b9:25:5a:d3:9f:db:3b:94:3c:
         e6:85:87:72:da:d0:e2:32:15:92:e8:01:06:43:4b:17:3b:64:
         79:74:da:b2:6f:34:78:a4:c1:b3:82:2d:4c:b7:f9:9c:5c:16:
         6f:f3:b8:9e:82:53:9d:9d:8f:45:9d:36:07:08:fb:5d:d5:6b:
         a4:6f:9d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:19:51 2025 by rpki-client