Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eAXAgvk5BSa-HmWkH9vDiDB0jHo.roa
File:                     eAXAgvk5BSa-HmWkH9vDiDB0jHo.roa (raw, json)
Hash identifier:          GjP2R/JqoNmfahky6UAmNbGoFSBWxYP2IPMuhF9qKh8=
Subject key identifier:   78:05:C0:82:F9:39:05:26:BE:1E:65:A4:1F:DB:C3:88:30:74:8C:7A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       BB
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eAXAgvk5BSa-HmWkH9vDiDB0jHo.roa
Signing time:             Thu 24 Jul 2025 01:09:51 +0000
ROA not before:           Thu 24 Jul 2025 01:09:51 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.244.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:09:51 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7805C082F9390526BE1E65A41FDBC38830748C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:3f:e1:65:c1:d1:20:c8:8b:83:76:14:c9:
                    b1:19:7c:12:9d:23:aa:d8:bc:9c:a7:35:c9:e0:f5:
                    0a:bc:6c:d7:4f:30:4d:c4:7f:f5:a0:56:74:59:75:
                    36:93:31:8b:71:e2:ca:96:c2:23:24:cf:b9:f3:0d:
                    2f:f6:f1:88:04:0e:50:e3:74:ce:31:33:55:09:c9:
                    a0:8e:23:b5:1d:27:74:ad:15:fd:dd:ba:a8:16:7b:
                    58:fe:ab:a9:83:8f:65:48:08:61:73:23:dd:6d:e0:
                    cc:e6:3a:83:58:aa:1c:a4:d6:30:91:8f:36:91:4f:
                    9f:54:c5:6b:2f:ab:aa:87:71:f0:cc:d1:ae:d1:43:
                    1d:3e:21:aa:e8:64:95:38:9e:0d:eb:01:0a:c1:8c:
                    f0:54:f7:3f:fe:15:f6:d8:b5:4d:c9:53:9a:78:ce:
                    ac:14:58:fd:67:96:d7:cc:93:3e:bd:d3:95:31:a9:
                    7c:5d:23:0a:4e:77:6b:48:69:ff:dd:d4:2e:31:f1:
                    9b:21:e9:1d:b4:26:f9:b1:0f:32:19:4c:56:a8:1b:
                    a2:d7:8b:b9:e8:46:ab:11:2a:1d:d7:0e:75:69:98:
                    f9:fc:13:85:7f:db:5f:b5:cf:b8:4c:30:40:a6:e0:
                    e0:27:99:fe:e8:52:91:5d:14:7d:8b:47:ec:59:79:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:C0:82:F9:39:05:26:BE:1E:65:A4:1F:DB:C3:88:30:74:8C:7A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eAXAgvk5BSa-HmWkH9vDiDB0jHo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:74:07:c2:ba:06:c0:36:59:4e:e4:0b:be:6b:68:6f:83:
         41:5b:51:0d:6b:79:e8:53:48:db:db:1c:5d:ed:fa:08:47:0f:
         7a:76:bd:50:84:f6:4f:f0:a7:4f:aa:92:19:55:2b:1f:d6:8e:
         7a:25:35:f4:d6:b2:6b:36:21:c1:6e:22:90:72:21:37:a6:e5:
         93:4e:b2:e1:7f:0c:64:42:cd:3a:ca:0a:49:ad:9c:ee:d6:be:
         bb:a1:61:67:78:ec:4f:cf:3e:22:dc:bf:6f:6d:99:5d:f4:5d:
         99:09:26:e6:0d:18:a7:a3:b6:46:50:6a:39:81:d1:16:0c:8d:
         e9:ef:ef:5e:33:e5:90:dc:f1:95:48:36:d1:21:8d:8c:e4:0f:
         93:ba:e5:27:dc:9d:01:eb:16:aa:4d:30:cd:b1:e3:a1:bb:58:
         70:ec:a3:64:18:2a:1d:88:0b:0d:ec:32:c4:06:d5:a1:5f:06:
         3c:8f:7d:10:ce:8a:1f:c2:fb:24:10:9f:d0:99:a4:8f:f9:2f:
         a0:0f:79:89:ce:ff:02:c9:8b:52:28:13:93:30:8a:7a:68:08:
         f8:36:60:c1:4b:9b:40:cf:f3:6c:f6:60:ef:2e:bf:3c:5c:36:
         84:2b:6d:46:0a:c5:bc:83:b8:99:b9:bb:2d:e1:67:3c:d5:37:
         59:92:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:38 2025 by rpki-client