Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jnE1eyuYnroqD1rw9FdYabk0NLE.roa
File:                     jnE1eyuYnroqD1rw9FdYabk0NLE.roa (raw, json)
Hash identifier:          kryswI4lubKHWppY8YtAilA+a2EdoaSTBgLg1QQcL2o=
Subject key identifier:   8E:71:35:7B:2B:98:9E:BA:2A:0F:5A:F0:F4:57:58:69:B9:34:34:B1
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       89
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jnE1eyuYnroqD1rw9FdYabk0NLE.roa
Signing time:             Thu 17 Jul 2025 01:31:24 +0000
ROA not before:           Thu 17 Jul 2025 01:31:24 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:31:24 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=8E71357B2B989EBA2A0F5AF0F4575869B93434B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:7f:80:11:dc:d0:99:eb:7d:f1:f6:99:f5:
                    46:54:6b:67:ce:fc:b4:5b:43:78:49:0d:43:42:61:
                    65:5f:29:45:d3:e5:c4:78:10:41:28:14:f0:d1:1c:
                    0a:98:2b:27:df:a7:e2:86:0b:3c:34:cf:25:a2:52:
                    e3:47:89:82:6c:67:dc:f6:9e:80:37:c2:8e:cb:b3:
                    d7:aa:a5:23:39:11:37:d9:15:cf:dd:f5:48:f2:8f:
                    25:fd:12:62:aa:a3:37:75:42:ec:44:c6:65:94:22:
                    7d:52:94:8a:be:9e:22:18:6e:61:c7:ba:2a:1b:4c:
                    94:4d:46:17:8b:41:52:f0:11:1e:80:11:99:ce:b4:
                    88:b0:16:f3:cb:c4:26:45:60:61:75:cb:a1:c6:4c:
                    1b:9a:eb:a9:55:85:af:19:1b:96:83:7e:77:f1:98:
                    3f:6b:78:7a:47:55:4a:42:8e:be:d7:80:ee:2e:a8:
                    3b:92:cd:e7:50:96:91:f1:0d:ac:60:6b:df:88:e6:
                    bb:26:12:be:6f:23:db:08:b4:dc:4c:4f:19:77:44:
                    35:e7:0d:9a:38:94:69:94:3b:fd:93:ed:a4:65:72:
                    13:57:5f:c0:fa:fe:a3:3d:92:06:1a:1d:3f:49:48:
                    8f:6d:36:73:c4:03:8e:4c:86:d1:ae:88:b6:50:fe:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:35:7B:2B:98:9E:BA:2A:0F:5A:F0:F4:57:58:69:B9:34:34:B1
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/jnE1eyuYnroqD1rw9FdYabk0NLE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:ad:bf:2f:ee:bc:ca:df:6f:f8:f4:f8:63:7f:27:e4:f5:c1:
         0e:6d:a6:54:8c:8c:99:a9:12:8d:4f:94:1a:38:78:50:09:5e:
         eb:43:06:c2:c4:c7:9a:ae:6e:26:9a:bf:c3:3c:75:f5:bd:5e:
         5d:8c:f9:7c:5d:7b:74:55:08:84:e4:80:23:44:8e:84:42:16:
         27:62:cf:6c:78:f8:a9:c8:ba:8a:d9:92:fd:ed:9a:75:12:43:
         fc:1c:be:87:91:b5:70:a3:90:fc:b1:1a:b4:f6:a8:83:cf:1f:
         87:8c:3f:0b:03:f2:2c:b8:fc:03:71:6c:42:22:9e:3f:92:ad:
         2c:5e:c5:d9:df:ec:6d:86:5d:d5:a2:0a:33:f4:90:e0:d3:63:
         7f:4d:c8:b5:91:c0:53:a5:58:78:97:9e:94:8e:7c:04:1e:aa:
         b1:6a:7c:1a:9b:65:ba:b3:ad:5e:60:f9:a9:36:0b:80:9b:c2:
         61:cb:64:97:78:e3:1e:b8:20:87:d5:98:07:2c:c7:76:ca:1d:
         b3:1e:58:5b:d2:58:bf:7c:64:b1:15:3a:1c:fc:f4:c8:55:48:
         bc:e8:60:46:d9:7f:ab:9b:7d:2a:91:3f:20:de:f1:18:5c:17:
         5a:80:82:f1:56:7c:ea:b8:70:45:be:2a:7d:58:a6:8b:f7:32:
         a9:f2:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:01:59 2025 by rpki-client