Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eyCgjWnur1ujTnaPwK0vS_3BlNg.roa
File:                     eyCgjWnur1ujTnaPwK0vS_3BlNg.roa (raw, json)
Hash identifier:          7ZhEeykabZfCr6CZIy5Q5w6QtOT/wlQMxBpl5VnhPHk=
Subject key identifier:   7B:20:A0:8D:69:EE:AF:5B:A3:4E:76:8F:C0:AD:2F:4B:FD:C1:94:D8
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       D6
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eyCgjWnur1ujTnaPwK0vS_3BlNg.roa
Signing time:             Thu 24 Jul 2025 01:44:31 +0000
ROA not before:           Thu 24 Jul 2025 01:44:31 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.189.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:44:31 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7B20A08D69EEAF5BA34E768FC0AD2F4BFDC194D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:a5:bd:66:b2:b9:15:9b:db:04:00:e8:18:
                    52:51:d2:ce:e0:86:4d:c1:77:a3:c3:06:74:e9:7f:
                    27:1c:15:e4:12:dc:b8:ae:9e:0b:56:57:b5:34:b8:
                    4b:b0:d3:f1:f5:2b:a9:68:81:f5:9f:41:97:94:33:
                    05:8d:89:3e:eb:28:a7:c5:a9:7c:23:ce:60:ad:81:
                    a6:4e:79:84:ad:b3:b3:6f:d2:87:ef:d0:ba:44:74:
                    a5:99:df:f1:27:a6:03:94:4f:7d:3c:42:c5:b3:6b:
                    e8:0b:25:ee:8b:18:18:99:ae:38:84:7a:d2:40:cf:
                    ad:ac:c9:05:8a:bf:78:65:56:c5:39:af:03:6b:70:
                    e7:c1:90:65:32:8b:8c:6c:c1:29:36:5e:32:fb:cb:
                    66:2e:f2:8a:e7:e2:38:42:ff:29:f7:f9:80:96:a1:
                    e5:ee:14:25:6c:9d:13:c6:8f:29:b7:6f:3d:54:4d:
                    a5:34:27:85:a4:70:62:21:94:df:4a:d8:76:c4:ad:
                    74:89:b0:fe:59:63:29:3d:bf:05:30:0b:49:5f:b2:
                    f7:11:00:40:d9:ce:f4:94:81:25:ea:e3:f1:7f:e8:
                    67:d7:c4:de:06:2e:b9:9f:d9:36:43:3b:81:37:d6:
                    ef:00:42:4f:c3:e9:76:91:41:08:f6:70:0c:67:22:
                    bf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:A0:8D:69:EE:AF:5B:A3:4E:76:8F:C0:AD:2F:4B:FD:C1:94:D8
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/eyCgjWnur1ujTnaPwK0vS_3BlNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:c7:78:cd:01:7d:f8:b2:2c:2e:b2:43:9c:70:f4:dc:39:
         49:ad:2e:c1:01:73:cd:da:63:91:d5:42:fa:85:30:96:35:2b:
         dd:c5:95:32:f9:f3:3d:b4:bd:fd:8d:b0:02:22:ff:da:6b:a4:
         46:67:f1:1e:19:63:91:e1:82:90:9b:cd:74:15:e2:1a:2a:e6:
         26:7b:6d:5b:17:f0:98:99:43:52:63:4d:0c:f6:bc:4a:02:85:
         83:67:9e:3b:7e:71:d0:e7:c9:89:ec:66:86:5f:21:cf:75:f1:
         9b:6b:68:b5:64:70:61:e1:80:9a:e2:53:b5:41:bb:d1:e4:15:
         6f:75:c5:af:95:a3:7f:5c:dc:41:48:aa:8b:14:b1:2e:2c:bb:
         18:cd:13:e4:b8:8e:3f:f0:17:a0:78:1b:92:f7:b0:7b:71:36:
         fc:42:88:7c:85:19:24:20:40:ac:26:09:03:5b:8b:0c:8a:58:
         e7:4c:ba:fc:0b:8c:ad:e7:5c:95:b2:c4:70:29:b6:8f:5d:0a:
         50:f2:2f:37:f7:ad:e4:2d:61:91:92:f7:fd:d4:14:a0:81:11:
         b5:a7:77:01:99:5d:5f:d7:b5:ea:57:81:68:c9:43:87:f0:a6:
         40:aa:17:15:d0:01:b6:6c:66:4c:86:19:2c:98:20:6f:73:f6:
         38:4b:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:22:06 2025 by rpki-client