Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eUFrxrdZKkh9SXGyaGwNJFKsv2s.roa
File:                     eUFrxrdZKkh9SXGyaGwNJFKsv2s.roa (raw, json)
Hash identifier:          fmtPvd73ZPUd0oK1fbUcd9MifLiIHfKnGDCnTqm2p0k=
Subject key identifier:   79:41:6B:C6:B7:59:2A:48:7D:49:71:B2:68:6C:0D:24:52:AC:BF:6B
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       96
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eUFrxrdZKkh9SXGyaGwNJFKsv2s.roa
Signing time:             Thu 24 Jul 2025 00:46:49 +0000
ROA not before:           Thu 24 Jul 2025 00:46:49 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.230.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:46:49 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=79416BC6B7592A487D4971B2686C0D2452ACBF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:81:4a:bd:8d:af:0f:d0:5f:8e:51:f6:95:4e:
                    ca:01:db:71:bb:6b:5d:c3:52:b4:37:99:19:42:8e:
                    c0:d9:e5:68:1e:9e:b7:ff:47:53:81:6e:f1:a9:23:
                    f5:1b:2d:38:62:d6:b7:ae:a9:b8:8c:1a:da:24:c1:
                    75:e4:28:e8:90:d6:cf:16:90:4e:60:39:be:1f:72:
                    a2:17:1b:38:a8:2a:f0:79:11:53:cf:c5:8a:5a:94:
                    8f:8d:a9:0d:63:fc:79:3e:d5:a8:85:f4:74:72:de:
                    c1:3c:ba:81:45:eb:77:36:a5:99:5b:ab:cc:25:3e:
                    9d:90:35:f0:4d:94:8b:01:3e:8c:3d:db:08:d9:ac:
                    63:ee:97:85:a1:40:75:fe:40:80:6d:25:df:3d:9b:
                    46:f7:12:8f:91:f8:f2:cc:07:85:91:84:c9:9b:33:
                    85:b4:b1:43:a8:f1:2d:5a:22:c1:f7:19:cb:45:90:
                    26:51:bf:3c:e7:87:f6:80:00:9e:9e:f5:da:e3:8b:
                    9f:f8:f9:71:8c:2b:4d:1d:b5:f1:9c:1e:dc:ff:43:
                    20:8d:40:15:7f:1f:dd:a1:71:bc:64:99:10:92:9b:
                    99:2f:48:e7:85:75:06:51:6a:90:83:64:db:79:01:
                    e1:20:7e:3c:7c:35:03:90:01:d8:d6:e4:96:ff:e6:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:6B:C6:B7:59:2A:48:7D:49:71:B2:68:6C:0D:24:52:AC:BF:6B
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eUFrxrdZKkh9SXGyaGwNJFKsv2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:17:9b:64:f0:d8:28:8b:7f:14:0e:87:60:76:37:7f:44:
         fb:40:4c:02:86:f7:db:f2:58:51:39:10:bd:6b:cc:b7:79:84:
         78:f1:a0:d4:2e:ca:d4:f7:17:26:05:b9:61:7c:8a:6b:29:8a:
         1c:91:87:b9:1a:c5:64:b3:6b:1a:f4:4f:0b:8b:05:86:1e:c4:
         01:d8:de:10:21:9a:b6:7e:4c:5b:d7:0d:2f:25:1d:47:f8:2e:
         ff:dd:da:68:02:36:2b:e7:0c:54:33:f8:61:b9:04:89:82:39:
         a6:c9:f3:c9:f7:5d:65:5d:75:e4:a1:83:e3:29:ce:79:02:ad:
         a7:95:77:7f:1d:12:f7:55:d4:40:a9:53:89:c9:c8:16:6e:58:
         82:da:eb:12:fa:2e:54:9f:0e:21:d8:9d:54:02:27:6b:f0:71:
         24:0e:7a:ec:54:d7:25:75:15:c8:1e:f0:50:a6:ed:03:29:2a:
         04:9c:43:ca:e9:ec:cf:cc:95:16:91:88:98:8e:b8:df:d2:38:
         e5:7d:6d:10:8e:b9:be:eb:6a:7b:07:a6:10:e5:9c:28:01:bc:
         49:35:20:e0:7f:fc:91:a1:2c:2e:90:6c:24:2d:9d:4c:21:0b:
         a9:a2:16:3d:ce:32:01:10:be:8c:69:d8:1e:d8:fe:d6:0e:26:
         ab:21:fa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:10 2025 by rpki-client