Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c0gttSrq3E4ZccS0LsoblxYZg2M.roa
File:                     c0gttSrq3E4ZccS0LsoblxYZg2M.roa (raw, json)
Hash identifier:          zp+IYWFhwbheJWuK8LjdJoDlg1duL9ChFfLtDUhCgU0=
Subject key identifier:   73:48:2D:B5:2A:EA:DC:4E:19:71:C4:B4:2E:CA:1B:97:16:19:83:63
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       D0
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c0gttSrq3E4ZccS0LsoblxYZg2M.roa
Signing time:             Thu 24 Jul 2025 01:44:29 +0000
ROA not before:           Thu 24 Jul 2025 01:44:29 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.171.102.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:44:29 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=73482DB52AEADC4E1971C4B42ECA1B9716198363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:15:16:bf:33:2f:15:91:bf:bd:1f:7f:fd:
                    5f:93:48:fb:0e:24:ff:20:90:1c:5a:a5:a0:17:cf:
                    57:3b:80:85:2c:14:47:99:f5:ec:bb:d9:86:e6:1e:
                    3e:60:e6:cc:80:d3:66:3b:fa:aa:e3:ba:21:d6:03:
                    f0:60:39:fa:36:9a:d5:c6:71:4e:99:6b:0f:db:7e:
                    75:4d:f2:46:19:5f:b1:05:a2:23:35:ef:b0:05:b3:
                    61:09:b6:b4:db:01:ac:4e:07:1c:8f:0c:7e:14:6b:
                    82:a4:3d:a8:8f:00:5d:3d:3a:70:70:32:30:09:b4:
                    72:ce:e4:88:90:6f:8c:00:62:e6:e8:e2:67:73:8c:
                    c3:d9:92:e9:21:74:73:84:da:68:98:19:42:3f:20:
                    91:16:dc:79:e7:1f:8f:e4:92:16:d2:c5:af:88:f3:
                    f1:41:32:c0:5f:ef:a0:c1:4c:af:2a:8c:c3:86:ef:
                    eb:fc:a1:68:ff:37:0d:5b:e2:67:9a:10:61:13:2d:
                    66:2f:e2:cc:24:3d:d5:50:b7:04:f2:21:61:72:2f:
                    b7:77:45:ee:5a:fb:69:ec:56:3e:07:37:43:1d:b9:
                    6b:44:0a:35:da:ea:2c:ad:da:6c:4e:c9:33:ed:96:
                    9e:8c:c3:92:58:99:10:11:f5:22:22:48:0d:b2:4f:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:2D:B5:2A:EA:DC:4E:19:71:C4:B4:2E:CA:1B:97:16:19:83:63
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/c0gttSrq3E4ZccS0LsoblxYZg2M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:87:e1:dd:d0:44:5d:a6:10:4b:4f:2e:a1:bd:33:c5:00:b0:
         45:9f:63:49:a4:90:36:64:19:f8:aa:1c:70:c1:cc:19:c6:08:
         b3:0e:7e:a4:96:b1:2c:77:0c:60:15:08:4c:53:78:af:10:8c:
         58:36:83:6e:d6:ed:60:e4:1a:13:17:6e:79:47:19:5d:aa:85:
         65:34:b3:f0:88:e5:f6:8a:5b:f8:bd:97:61:61:6f:e8:5b:4c:
         6d:bd:9f:bf:27:84:ad:ab:dc:57:56:66:82:99:ee:88:2a:64:
         2b:4c:c7:db:84:77:c2:9e:72:9e:e0:03:c8:23:0e:d7:da:f4:
         5a:f3:66:b3:d9:33:aa:9f:d8:92:21:a8:a9:29:9e:ad:e4:aa:
         6d:9a:12:89:c0:74:40:9b:a4:e6:ac:85:02:2c:b1:f6:95:78:
         3c:34:cc:71:f0:ac:1d:b7:2d:ec:fd:60:46:d3:35:fb:2c:1a:
         06:6a:ff:d2:f0:49:1d:58:c1:8e:58:b0:49:f9:0e:11:ca:5c:
         c5:bd:36:b6:cc:da:e1:8f:91:ef:17:e0:d5:15:34:12:f4:84:
         f7:20:50:51:da:22:59:e2:2b:cf:d9:bf:f0:22:03:c9:db:c6:
         a2:5b:a6:76:65:39:90:87:92:a2:6d:f2:24:8f:e7:ad:f2:56:
         77:2c:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:07:30 2025 by rpki-client