Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/e9_Sm_OzIctVl8nTYx4ZkBAXLuY.roa
File:                     e9_Sm_OzIctVl8nTYx4ZkBAXLuY.roa (raw, json)
Hash identifier:          wcnCeayOnE6/0GJ8irSt33lG+9uEfwbToa4LvFq4fOU=
Subject key identifier:   7B:DF:D2:9B:F3:B3:21:CB:55:97:C9:D3:63:1E:19:90:10:17:2E:E6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0120
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/e9_Sm_OzIctVl8nTYx4ZkBAXLuY.roa
Signing time:             Thu 24 Jul 2025 02:22:08 +0000
ROA not before:           Thu 24 Jul 2025 02:22:08 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.10.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:08 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7BDFD29BF3B321CB5597C9D3631E199010172EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:f7:14:e8:b5:59:5b:ae:86:38:92:9b:81:
                    ed:1e:fd:e0:d9:0c:2a:b0:14:53:34:58:a0:bf:9f:
                    36:2b:53:2f:85:33:37:b6:bd:e2:ca:f8:05:2c:dd:
                    94:2b:7d:44:8c:06:72:68:fb:70:cf:8f:cc:25:e9:
                    5a:04:6f:a2:42:2c:ab:ee:59:46:88:7e:3d:14:a9:
                    a0:b3:29:91:f3:3d:f4:9d:5a:77:48:96:c3:32:f1:
                    cb:20:00:e1:5a:0e:1a:9f:12:84:46:d9:38:f0:ea:
                    4a:83:e4:89:c8:0c:d9:35:3d:24:d1:0a:39:2b:82:
                    aa:f8:e2:c9:c1:3f:8b:41:05:f3:54:4d:af:e8:15:
                    5b:1a:e4:bc:19:9e:b0:0a:98:fa:81:f5:c2:25:35:
                    e2:2b:eb:a2:be:96:fc:91:bf:e7:f1:74:c1:8b:9f:
                    58:2f:4b:14:61:fd:90:f5:67:a2:f5:2a:34:74:7e:
                    de:3b:7d:e8:e3:95:53:03:27:c1:28:7e:87:3a:e1:
                    aa:59:bf:51:4c:77:65:4b:af:17:a6:59:b6:aa:bd:
                    b1:fb:e9:5f:95:09:c9:09:2f:cb:16:e2:78:cc:bf:
                    13:f0:3a:f7:35:96:26:81:1a:3c:26:fe:fd:2c:ca:
                    47:8a:29:dc:0e:1d:d5:d9:1d:00:65:d0:0b:03:d1:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DF:D2:9B:F3:B3:21:CB:55:97:C9:D3:63:1E:19:90:10:17:2E:E6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/e9_Sm_OzIctVl8nTYx4ZkBAXLuY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:c3:d6:3c:ab:b9:5c:ef:32:d5:dc:83:b7:d4:d4:49:15:8f:
         d4:bf:a3:6e:02:d8:d7:33:be:cf:21:da:ed:7d:ea:cd:4f:c7:
         81:12:7b:76:dc:27:c0:05:24:d9:bf:80:95:e6:a3:4f:8f:77:
         f8:4d:a7:c8:19:fc:79:95:8e:f4:00:e4:0c:4b:61:52:ba:ef:
         7a:ba:30:a4:ef:b8:b6:4e:26:08:e3:21:93:44:92:9f:5a:4b:
         aa:31:51:2f:ba:a3:36:8b:dc:66:85:15:38:2d:a2:ad:09:9b:
         7f:ed:16:48:ac:dc:1e:5a:df:6a:ba:10:2b:7c:59:91:f2:86:
         f3:4f:0f:8f:02:b6:2b:f7:19:0a:3d:aa:e6:1e:cf:84:a8:65:
         06:5e:41:f1:9c:70:02:86:b0:86:1c:7c:e8:bd:31:d2:d0:fc:
         46:d4:74:ef:f1:0f:0e:ac:84:e1:98:ad:7d:5e:73:bd:de:ab:
         a6:0a:21:28:ad:ca:c8:1b:14:25:47:21:c7:e0:0a:cd:12:6d:
         6a:8b:74:32:dd:2a:ad:39:94:ae:f2:22:fb:04:56:99:1e:d7:
         66:4f:be:d2:48:53:42:4d:cf:d8:93:3c:93:43:6f:dc:c2:de:
         8f:39:ce:c3:43:b6:72:4d:8e:d2:1c:6e:9d:8a:a9:12:90:c3:
         4c:62:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:21:28 2025 by rpki-client