Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/j-OYDtX-fQcUy7yRe8Sfh9jwZAc.roa
File:                     j-OYDtX-fQcUy7yRe8Sfh9jwZAc.roa (raw, json)
Hash identifier:          SxO4Smc+yMSK4sxfxKCDpw+KUY/OAoEH5mx/fk44sjc=
Subject key identifier:   8F:E3:98:0E:D5:FE:7D:07:14:CB:BC:91:7B:C4:9F:87:D8:F0:64:07
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0116
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/j-OYDtX-fQcUy7yRe8Sfh9jwZAc.roa
Signing time:             Thu 24 Jul 2025 02:22:02 +0000
ROA not before:           Thu 24 Jul 2025 02:22:02 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        61.206.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:02 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=8FE3980ED5FE7D0714CBBC917BC49F87D8F06407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:22:c4:bf:b1:be:ef:7e:5c:fd:2d:72:00:
                    c8:67:51:43:3b:37:cd:6e:6c:cb:de:98:32:48:30:
                    bf:76:98:fd:39:68:2a:af:d3:c7:b0:18:8b:6e:e1:
                    18:8c:63:6b:79:54:82:30:2f:b5:f2:69:7e:a1:ff:
                    66:1d:07:f2:17:bd:bd:c0:cf:7f:24:ab:9f:71:70:
                    d0:da:3a:37:00:94:b1:bd:3e:8e:19:ca:f5:82:15:
                    a6:f0:27:3b:fe:8c:61:44:14:b4:31:39:26:1c:70:
                    94:e7:23:0d:cb:e4:97:c3:dd:76:23:84:41:78:8c:
                    20:ff:9c:70:db:4e:33:ec:68:44:f5:3f:21:e8:7c:
                    9b:d2:dc:0a:eb:2b:c5:9f:31:f7:1c:37:3e:eb:f8:
                    1e:d8:54:f2:0e:f0:e3:fe:20:2a:2e:6f:a4:ee:13:
                    64:8a:50:e7:7d:b3:fa:83:62:e7:ad:64:78:2f:fc:
                    62:e4:4a:ba:f9:21:23:a3:16:9c:f3:38:c9:47:5c:
                    3c:1f:23:48:94:13:06:de:58:a8:76:27:ea:bb:ce:
                    8e:46:0f:6d:e8:e2:70:11:e2:6a:97:5a:4f:79:b2:
                    0a:24:5b:d4:26:e5:50:d7:b3:ec:b2:25:22:00:89:
                    a6:b2:e0:f0:35:42:a1:1f:01:a5:a6:f4:8c:c2:66:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:98:0E:D5:FE:7D:07:14:CB:BC:91:7B:C4:9F:87:D8:F0:64:07
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/j-OYDtX-fQcUy7yRe8Sfh9jwZAc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:db:88:79:2c:30:30:67:56:bc:01:3b:9d:78:cc:cb:65:fd:
         d5:3c:dc:fe:5e:ac:cb:b5:d5:6a:bd:58:54:ae:af:04:77:74:
         dd:4d:a4:97:98:6b:bf:98:d1:d7:79:e6:3e:5f:a0:f3:ec:76:
         46:56:18:bd:c2:ea:43:f9:0b:ac:18:4d:1a:e4:d6:9f:4e:ef:
         f9:c0:e8:43:85:27:a1:08:55:a7:19:5f:38:1e:e3:59:3d:22:
         c5:b3:e1:7e:0b:8e:2b:3d:9e:7a:32:eb:b7:7d:3d:4f:84:35:
         c6:41:38:40:a7:8b:0c:2c:7e:c7:f4:50:5f:43:6a:15:d0:3f:
         02:17:cf:8d:a5:22:2f:79:40:3a:c5:71:c5:0c:5d:1e:0a:11:
         39:0f:5d:a7:db:87:19:72:18:0d:be:19:25:c3:14:61:6c:bd:
         8c:41:d6:fa:12:48:0d:0c:20:08:ff:84:d1:2a:0d:d2:4f:86:
         8a:c3:94:d4:7b:44:5c:34:1d:d3:8e:b2:7c:16:c2:ed:2d:de:
         0f:01:74:3b:0a:ef:0b:8a:0e:21:f8:5b:30:13:4d:2a:6d:74:
         3a:8e:95:67:94:bb:97:7e:6c:87:ac:2f:31:ff:10:69:df:77:
         be:3a:16:f6:e2:8b:e0:34:d7:f7:ca:2f:0d:bf:ee:c9:5e:c5:
         93:45:f7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:07:30 2025 by rpki-client