Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/fQmGSMZSZ6DG5Wql_4pATEn6348.roa
File:                     fQmGSMZSZ6DG5Wql_4pATEn6348.roa (raw, json)
Hash identifier:          MmibK7DaEVxdiq6zWMpUPPyRLm/fVdfR24Ec0Puk0UA=
Subject key identifier:   7D:09:86:48:C6:52:67:A0:C6:E5:6A:A5:FF:8A:40:4C:49:FA:DF:8F
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       E6
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/fQmGSMZSZ6DG5Wql_4pATEn6348.roa
Signing time:             Thu 24 Jul 2025 01:58:19 +0000
ROA not before:           Thu 24 Jul 2025 01:58:19 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.239.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:58:19 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7D098648C65267A0C6E56AA5FF8A404C49FADF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:e2:51:ca:3b:df:99:4d:7f:0a:f0:69:e2:
                    6f:26:a3:08:c0:9b:9b:54:38:e5:64:7d:69:c3:34:
                    6c:57:b3:78:e1:f9:0a:3b:1b:a7:42:b0:17:2a:3c:
                    63:9c:16:8e:65:8b:1b:94:28:9d:b6:97:cb:ca:72:
                    a4:78:cf:fd:2a:8b:f7:de:37:29:b0:c0:36:8d:7d:
                    94:09:0b:ab:f3:6a:1c:7e:05:f4:9a:46:35:f4:4f:
                    57:d5:96:03:be:3d:80:51:48:da:09:6a:7e:a5:41:
                    94:7d:ca:bc:0b:93:76:df:c4:1e:5d:e0:f3:f2:94:
                    c4:f1:20:ae:08:f5:49:60:0a:2d:ab:52:bd:a5:a4:
                    12:24:dc:73:b1:12:99:d2:14:9d:85:cb:bd:9a:b1:
                    61:61:6c:d3:fa:c4:64:99:d9:65:9c:38:98:ac:ed:
                    11:8b:c2:33:3f:20:fe:78:ac:13:cf:79:0d:34:68:
                    f3:d6:df:59:09:c0:2e:1d:7e:a4:4c:66:b3:d1:56:
                    44:44:f9:5f:e9:ad:95:ae:87:35:fd:7b:03:18:26:
                    e4:c2:d5:0b:62:80:86:b9:19:90:81:b8:87:7f:8e:
                    07:5f:36:e6:0a:ef:c0:d6:ac:41:0c:b7:5c:d3:cc:
                    2e:70:c9:32:e7:b2:32:05:ef:3a:23:a5:44:32:d4:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:09:86:48:C6:52:67:A0:C6:E5:6A:A5:FF:8A:40:4C:49:FA:DF:8F
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/fQmGSMZSZ6DG5Wql_4pATEn6348.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:88:02:1f:b2:f5:09:f2:77:7d:35:40:8e:6e:ac:98:de:
         86:f4:43:25:e8:ca:c6:07:1e:56:a3:9c:e2:34:11:ba:10:c4:
         17:68:eb:9f:87:15:c0:a2:dc:38:15:98:66:85:ae:76:dd:1c:
         3d:bf:21:40:0e:32:16:35:da:18:e7:33:d1:ad:9a:d5:a7:98:
         26:3f:c9:c9:4d:31:b9:ef:99:49:13:95:cd:4d:53:86:5e:44:
         17:f7:55:c4:d5:57:ba:e8:26:8f:02:10:48:7d:d4:60:b0:4d:
         c3:0e:5f:a0:92:9d:a7:39:23:10:24:16:e2:3e:b5:9f:59:b2:
         57:1f:b7:3f:2d:ef:3a:46:ad:f3:d2:77:98:12:0d:8c:e0:62:
         41:38:35:87:42:0b:5d:32:f7:a8:ea:7d:92:cb:57:ab:af:1b:
         f5:47:e1:4d:6d:f4:d7:52:30:1e:ca:48:7c:18:d7:7b:a3:cc:
         d4:dd:c7:ba:da:bf:91:f8:b6:5e:73:1e:0a:ba:65:1a:71:c3:
         e7:30:8c:21:58:b3:4b:af:b6:73:01:7f:29:bd:53:e3:7d:87:
         87:fe:b0:f5:09:39:ca:02:28:5c:51:61:a5:de:db:f4:81:bc:
         f2:18:fc:ca:2e:60:ef:e5:2b:3d:1c:32:d7:a8:c7:5c:d1:37:
         64:d0:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:05:29 2025 by rpki-client