Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a9BbFe-hJmUsn1g-z7evGix4R1U.roa
File:                     a9BbFe-hJmUsn1g-z7evGix4R1U.roa (raw, json)
Hash identifier:          l+1McmjNncla9TVgM6XlSBDb4pliutz4YQ+Aa48utAo=
Subject key identifier:   6B:D0:5B:15:EF:A1:26:65:2C:9F:58:3E:CF:B7:AF:1A:2C:78:47:55
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       EF
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a9BbFe-hJmUsn1g-z7evGix4R1U.roa
Signing time:             Thu 24 Jul 2025 01:58:23 +0000
ROA not before:           Thu 24 Jul 2025 01:58:23 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.252.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:58:23 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=6BD05B15EFA126652C9F583ECFB7AF1A2C784755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:41:9f:47:ad:8c:b4:00:31:59:5f:40:93:
                    9a:25:2a:db:da:3a:92:5b:3d:90:ca:7e:a7:8c:4e:
                    3d:69:1b:95:91:97:f5:66:f4:c3:3e:5d:80:35:2e:
                    02:aa:f8:ca:14:47:3d:9c:cb:20:79:85:73:fd:03:
                    02:6a:5e:c9:6c:4b:c4:e1:a5:38:03:ee:11:10:49:
                    5f:c6:a0:92:6f:c7:59:00:86:c2:68:9e:91:11:3c:
                    0c:1a:0d:14:11:3f:3e:de:16:33:90:01:7a:b8:7f:
                    65:b1:be:c1:33:03:33:f5:65:d6:e9:e7:13:8f:7a:
                    c6:f4:e0:34:6a:1d:7b:0e:40:1a:9f:86:73:f3:c9:
                    71:bc:7a:0c:9d:9b:1f:da:1f:41:86:ac:75:06:05:
                    3e:a6:04:00:cc:d7:df:98:a4:66:e4:7d:fd:d8:de:
                    b5:61:a0:94:61:c2:b9:ad:8b:81:1c:50:67:a3:a9:
                    db:0e:b7:1f:f4:8c:12:6a:db:9b:d8:a3:f3:47:de:
                    c7:b2:96:a8:d7:a9:be:ed:bf:19:47:8d:e8:b0:55:
                    79:d3:13:d4:9a:f1:a4:b3:df:ce:65:63:9d:37:73:
                    86:13:f1:9a:53:c7:a3:e6:a5:b3:6a:52:3e:cd:3c:
                    fd:08:c0:41:a8:e6:a9:dc:ad:72:a4:9f:09:6f:a1:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:5B:15:EF:A1:26:65:2C:9F:58:3E:CF:B7:AF:1A:2C:78:47:55
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a9BbFe-hJmUsn1g-z7evGix4R1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:72:e8:00:a4:b0:f1:da:a1:a0:5a:2a:f3:a7:98:3d:cc:88:
         cc:6f:c1:21:12:fa:d7:b3:3e:47:c2:7e:40:41:a9:78:c7:a2:
         5f:e2:a5:ac:cb:c3:03:70:a0:63:1c:71:3f:c3:f5:19:aa:76:
         96:20:32:d9:00:fe:d0:a8:19:93:6d:bf:68:2c:08:e4:44:d0:
         53:bb:6a:ae:19:9b:bf:25:a2:67:4c:a6:be:40:5c:d4:cb:d7:
         d6:d8:51:c8:38:ad:69:7a:c9:70:b0:aa:26:78:0b:fd:82:26:
         75:4f:4b:16:d4:bf:f1:31:9b:67:a4:5c:5a:6d:5a:b7:cf:c8:
         2e:e2:2b:25:e3:d6:31:f5:8d:4a:0c:3c:22:4c:3d:8d:41:83:
         e7:c1:07:e4:1a:b3:6c:c0:93:23:3e:93:ff:36:96:5c:48:fc:
         98:12:72:3e:7e:b5:08:05:c4:cd:d8:59:8b:ac:71:b0:22:16:
         52:75:87:45:69:eb:bd:72:07:fe:49:b9:09:92:a5:8e:eb:85:
         fc:58:1c:f2:e8:33:de:15:3c:69:4d:b1:87:86:45:94:d7:35:
         b1:89:77:0a:d6:4e:5d:1a:0d:dc:fc:33:af:5e:ae:dc:03:24:
         28:26:69:7a:94:ac:f9:45:f1:92:25:f7:4f:ea:6e:78:ef:e6:
         eb:1c:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:55 2025 by rpki-client