Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k1jJLN6mw19K3bv302vzCKLtQA4.roa
File:                     k1jJLN6mw19K3bv302vzCKLtQA4.roa (raw, json)
Hash identifier:          1Db7HIIQTMa5+g78f08EgohY/KADLWrZHvxnD5b76KY=
Subject key identifier:   93:58:C9:2C:DE:A6:C3:5F:4A:DD:BB:F7:D3:6B:F3:08:A2:ED:40:0E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       A0
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k1jJLN6mw19K3bv302vzCKLtQA4.roa
Signing time:             Thu 24 Jul 2025 00:54:30 +0000
ROA not before:           Thu 24 Jul 2025 00:54:30 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.234.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 00:54:30 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=9358C92CDEA6C35F4ADDBBF7D36BF308A2ED400E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:ad:5b:63:41:6c:00:8d:4e:2b:17:e4:49:
                    07:50:8d:89:bf:a2:cb:02:a3:06:8d:cd:98:a5:79:
                    8d:2f:e0:69:ee:72:3d:14:ca:10:58:93:2c:f8:c0:
                    1d:ab:3f:cc:d6:7d:3e:05:15:75:7b:da:ff:1c:d0:
                    a7:a2:bd:8a:10:93:b9:f6:d7:01:dd:5c:f2:e3:50:
                    64:5c:5d:50:73:d0:e6:b9:13:3e:30:00:df:67:3f:
                    43:e2:ed:f5:00:39:8c:65:17:c1:a9:9f:39:97:77:
                    14:d9:1b:ab:91:a9:f1:12:34:ef:ee:80:e7:c9:fc:
                    71:19:d5:9b:e1:4d:ec:6c:b5:7d:f2:e8:0c:13:9f:
                    b3:db:e7:44:eb:99:80:d3:b5:e3:cd:d2:26:e6:02:
                    27:df:14:1b:d0:39:97:e3:e2:5a:b1:55:0d:c8:b7:
                    f2:7b:fb:50:54:09:67:1a:23:ed:9e:ff:8f:2c:b1:
                    9d:06:cf:cd:bd:c3:cf:d3:79:9f:08:a6:4e:6d:cd:
                    a5:d7:5b:3f:4e:e7:f9:68:74:08:ea:4a:d8:cf:c1:
                    64:f6:18:f1:0c:03:14:00:f8:6c:83:3a:05:05:ee:
                    e6:ed:ac:fa:ba:9d:53:53:0c:8a:e1:cd:70:20:3c:
                    9d:9d:72:7d:e0:ff:f0:70:ab:c9:39:80:69:70:f6:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:58:C9:2C:DE:A6:C3:5F:4A:DD:BB:F7:D3:6B:F3:08:A2:ED:40:0E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/k1jJLN6mw19K3bv302vzCKLtQA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:87:e6:29:a7:e3:6b:b3:18:f7:ed:86:ab:9e:b4:17:c6:c4:
         e5:80:95:4e:81:38:63:e3:56:3f:5c:df:b4:9e:c0:43:00:32:
         84:7b:00:f6:5e:d3:cb:14:4c:db:64:80:66:8a:f4:31:14:e4:
         b8:ed:1f:93:43:8a:14:1b:9f:fd:e9:3e:d6:a8:81:e7:e3:7e:
         a7:08:6d:51:4e:13:e9:e4:3c:10:6a:3b:de:2e:b0:7b:6e:25:
         ca:dc:4a:c6:6e:3a:49:ce:35:c5:e8:83:b4:0a:1c:d0:a3:08:
         10:24:f0:52:b4:3d:9d:6e:07:94:6e:6b:ef:f3:26:fe:d6:6a:
         3b:5c:3d:84:df:f3:01:c6:43:df:9c:91:0d:2a:15:43:0b:a6:
         9d:67:9f:b9:0b:29:7c:78:20:9d:6c:14:2f:fc:e7:44:e7:c2:
         11:1d:87:02:8f:73:cb:eb:14:4e:85:4c:aa:0a:35:c6:a0:7f:
         1d:bb:78:d5:c0:14:34:8a:a2:79:1c:9d:c8:51:37:15:83:e1:
         6d:61:cc:eb:e2:60:f0:b5:47:fb:67:df:42:19:ab:e3:1e:b1:
         96:e8:81:39:80:e4:92:02:3c:35:c0:4c:e0:bc:f6:ff:49:6d:
         96:4f:0a:c1:e6:7c:d2:ec:0b:99:ba:8e:fd:06:89:bf:ed:da:
         50:20:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:05:27 2025 by rpki-client