Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dgjF3zL6WgtfD5ysyDyWXyCNQ_E.roa
File:                     dgjF3zL6WgtfD5ysyDyWXyCNQ_E.roa (raw, json)
Hash identifier:          NZh+NcC3MIijnEzN3qxBvImDC7bf0Fn+OjiaUBJRWg4=
Subject key identifier:   76:08:C5:DF:32:FA:5A:0B:5F:0F:9C:AC:C8:3C:96:5F:20:8D:43:F1
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       E5
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dgjF3zL6WgtfD5ysyDyWXyCNQ_E.roa
Signing time:             Thu 24 Jul 2025 01:58:18 +0000
ROA not before:           Thu 24 Jul 2025 01:58:18 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.239.74.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:58:18 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7608C5DF32FA5A0B5F0F9CACC83C965F208D43F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:b6:95:d7:9a:f7:94:05:2f:36:89:2a:ec:
                    b4:fa:67:b1:70:f5:44:35:03:91:b9:ac:e5:62:ff:
                    7a:90:d2:09:b2:79:d6:2c:33:7d:69:fa:c4:32:90:
                    7e:83:00:92:ae:1d:20:3d:d3:e3:9e:1b:c4:d8:7c:
                    48:8f:7b:35:ad:57:a8:ab:92:5f:ab:27:c5:63:94:
                    43:cc:0f:ae:03:45:fc:f3:b0:f5:a7:a2:7f:d4:c7:
                    e3:2c:7e:5b:9a:da:1c:82:3a:77:1f:d3:1a:2b:08:
                    32:49:e4:db:de:b4:0e:b1:63:65:0b:b6:84:b8:a6:
                    38:e0:22:cf:63:b1:8f:4e:40:c3:3a:f0:d6:94:f9:
                    92:8b:3d:69:f1:05:56:e3:3a:bf:5f:16:33:44:be:
                    42:4c:1d:99:61:41:61:1f:47:d8:44:db:69:ac:3c:
                    ec:a5:e9:27:b1:7b:30:bf:5f:14:16:33:29:50:5b:
                    c7:58:6d:93:6c:22:f9:11:7c:8c:ef:7a:01:c8:17:
                    cb:85:6e:71:f3:96:89:91:20:c4:60:23:15:50:43:
                    05:18:10:93:bf:b3:36:bc:e9:72:ff:ab:d7:81:2b:
                    29:46:b0:f7:f6:cb:7a:32:3d:d1:a7:8b:4e:bb:2f:
                    ff:01:ed:56:71:01:89:03:a2:6a:0d:3d:10:0c:24:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:C5:DF:32:FA:5A:0B:5F:0F:9C:AC:C8:3C:96:5F:20:8D:43:F1
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/dgjF3zL6WgtfD5ysyDyWXyCNQ_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:f1:4f:ec:f6:e9:c7:0e:5d:08:bb:bb:e0:91:1e:a6:cb:
         e5:ec:5b:fa:35:84:d9:83:38:53:5d:76:15:07:b2:20:ee:5e:
         f4:16:83:bb:44:b1:59:8e:06:9d:31:ae:61:e8:ea:eb:d5:00:
         00:06:54:41:bb:e8:e8:bd:7d:7f:ba:54:8c:27:2d:d3:17:6d:
         41:cd:ca:4c:42:dd:5a:a7:94:c2:bc:7a:6d:72:bf:4d:2a:cd:
         d5:de:f5:73:24:83:84:37:51:d7:0b:6a:38:1f:6b:5c:c5:c0:
         29:fc:6a:40:09:f0:fc:69:d0:18:e1:78:4c:6a:24:d0:e1:63:
         38:3b:e9:41:43:04:c8:d6:4f:f3:cc:3a:34:e7:fb:2d:f1:f8:
         62:d9:71:57:b3:66:31:79:ae:67:b3:ee:cb:dc:6c:c6:78:87:
         02:ff:56:b0:0c:f4:6e:d0:1e:78:7b:82:30:a6:80:95:bf:db:
         ac:62:f8:0c:0d:83:e4:db:fc:e0:8e:e6:09:be:84:07:b3:9e:
         41:92:73:1f:36:00:90:86:45:22:52:3c:90:f7:a7:73:c0:ff:
         b8:15:55:57:e4:c7:2f:47:6b:09:f7:52:57:a0:c6:76:a9:4e:
         ff:7c:68:89:75:a7:44:56:f1:d9:4b:f7:45:11:94:e4:ea:4e:
         38:d0:4e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:20:14 2025 by rpki-client