Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/fyK60glCLD3mL1PJfGK7gOrkO7w.roa
File:                     fyK60glCLD3mL1PJfGK7gOrkO7w.roa (raw, json)
Hash identifier:          iMXgIq+IXh1bqxYIUV0jjhRYRy7KTUBpCFa+O+A5jdc=
Subject key identifier:   7F:22:BA:D2:09:42:2C:3D:E6:2F:53:C9:7C:62:BB:80:EA:E4:3B:BC
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       C4
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/fyK60glCLD3mL1PJfGK7gOrkO7w.roa
Signing time:             Thu 24 Jul 2025 01:16:50 +0000
ROA not before:           Thu 24 Jul 2025 01:16:50 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.184.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:16:50 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=7F22BAD209422C3DE62F53C97C62BB80EAE43BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:d3:fa:54:26:8d:6c:98:2d:24:a8:20:47:
                    65:31:41:71:48:3a:6d:3d:74:b8:d5:d7:bc:e1:89:
                    6e:8a:95:99:05:76:c6:25:52:93:3f:b3:8c:97:6e:
                    f2:a4:b8:54:67:86:c2:5c:fb:0c:e7:72:fd:d6:d4:
                    75:5a:fc:9b:73:ff:12:76:6b:8a:52:d2:f7:23:7b:
                    c5:0c:82:fd:5c:90:09:7f:7f:75:b3:57:f5:14:f5:
                    d8:07:6a:6c:ec:e0:b9:85:36:2d:2d:1c:42:0c:ff:
                    d4:77:c3:22:ba:1a:6d:e2:41:73:fc:d0:bb:5d:dc:
                    18:a5:8b:8b:80:71:33:98:a0:b9:d9:08:50:18:ec:
                    d5:ca:e4:1b:9f:8d:0e:3b:f4:a4:cf:42:8e:51:11:
                    82:13:1f:ec:d9:05:f1:2e:1a:fd:34:be:68:09:b6:
                    cd:6d:d5:aa:44:46:3a:0f:0a:31:64:49:89:38:b7:
                    eb:7c:33:29:05:0b:e7:da:5f:73:34:31:f4:78:cc:
                    89:c0:4f:19:28:e8:44:75:3b:88:dd:c2:97:b7:da:
                    f5:e8:90:60:61:96:f0:b9:10:30:18:5c:a4:1e:9d:
                    0f:57:cc:30:76:59:54:f2:9a:32:74:f2:a4:b8:78:
                    4d:16:d6:e4:e9:b6:5d:b3:50:5d:41:64:60:5b:f8:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:22:BA:D2:09:42:2C:3D:E6:2F:53:C9:7C:62:BB:80:EA:E4:3B:BC
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/fyK60glCLD3mL1PJfGK7gOrkO7w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e2:a2:6d:21:a0:e5:86:d6:94:4a:46:06:a7:da:ff:0f:dd:
         82:4a:63:9a:9f:2e:e0:75:44:fa:ff:eb:fd:e9:90:10:5e:3b:
         ff:bf:ab:fa:6d:60:c2:a3:b6:80:31:58:0b:c5:76:47:40:c0:
         8e:c6:4e:17:56:83:03:4c:c6:17:0e:5b:7b:52:32:47:d8:ec:
         a5:a8:da:4f:08:85:7d:7b:3e:bf:11:99:f6:83:33:0e:01:dd:
         7c:d8:0d:6e:49:ba:e6:33:ea:50:87:08:f6:c2:68:80:11:4c:
         f4:ed:72:1f:01:d3:7c:54:65:45:2f:69:b7:7b:34:cb:92:00:
         21:1a:49:fb:ae:8e:90:bd:82:21:3f:e2:8e:1d:b4:01:db:06:
         79:b2:00:1e:23:ce:e0:71:60:fe:a6:8a:13:4b:31:ec:65:f9:
         d8:e0:e4:0d:52:c3:1d:6a:4c:3e:ad:4e:5b:cb:52:45:8c:43:
         d0:fb:2e:a3:f1:19:9b:5a:b8:9d:53:ef:1a:f3:44:55:84:5b:
         b8:c8:53:86:3f:95:24:89:df:08:38:9f:3a:3a:86:bb:05:40:
         e3:75:ab:d3:ad:03:78:03:a0:6f:42:1f:aa:36:e8:92:51:25:
         83:4d:d1:f1:dc:9b:dc:64:5a:4c:44:5a:97:37:a1:ba:9d:0c:
         b2:d2:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:53 2025 by rpki-client