Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/kAFew8FjFZmhSFFO0qx0fRa3qSA.roa
File:                     kAFew8FjFZmhSFFO0qx0fRa3qSA.roa (raw, json)
Hash identifier:          z6PnUoNbyjQncIXv+FcPImkCLrEI1xFOj4xSAkwI5y4=
Subject key identifier:   90:01:5E:C3:C1:63:15:99:A1:48:51:4E:D2:AC:74:7D:16:B7:A9:20
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       CF
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/kAFew8FjFZmhSFFO0qx0fRa3qSA.roa
Signing time:             Thu 24 Jul 2025 01:30:21 +0000
ROA not before:           Thu 24 Jul 2025 01:30:21 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.171.101.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:30:21 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=90015EC3C1631599A148514ED2AC747D16B7A920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:22:d7:85:90:b5:62:d3:9f:18:10:f1:a4:ce:
                    5e:d1:aa:8d:8b:b0:b4:fb:d1:d4:90:0e:dd:a2:bd:
                    2d:64:6f:6f:9d:49:7e:e6:42:ff:24:58:81:cf:08:
                    67:e7:5a:47:e1:20:fe:78:93:ef:61:71:7d:76:67:
                    e9:d8:85:dc:29:11:ad:f1:ab:d0:6c:13:22:cd:74:
                    de:07:29:90:18:6f:8f:59:f8:f1:5e:de:48:c4:02:
                    50:ec:bf:bd:ed:13:f8:b2:0f:1f:1a:7a:aa:26:62:
                    0a:ff:46:e8:e2:1d:aa:5a:60:48:0c:22:61:f1:0f:
                    64:9f:b5:d4:73:04:fc:92:48:15:9e:2e:31:55:e6:
                    7c:7b:df:1c:3d:d4:ca:e7:94:ef:da:b7:b3:96:57:
                    b2:34:cc:78:9e:b8:7a:11:56:b8:bf:a1:a3:be:95:
                    da:e3:06:6d:26:42:76:aa:e1:10:4b:49:e0:8c:fc:
                    17:ef:c4:0f:d1:b5:b4:98:03:71:82:e5:10:65:be:
                    d9:b8:e8:10:6f:7f:f3:09:6e:f0:48:e5:79:d3:7a:
                    b4:c4:ce:74:14:0b:d6:92:ec:ac:fd:73:48:51:73:
                    0d:30:a7:72:4b:9c:83:96:72:0b:0d:b4:fe:a1:f9:
                    33:fb:4d:cc:48:da:e0:75:b4:d1:69:2d:bd:0a:18:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:5E:C3:C1:63:15:99:A1:48:51:4E:D2:AC:74:7D:16:B7:A9:20
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/kAFew8FjFZmhSFFO0qx0fRa3qSA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:6b:57:54:75:30:ed:25:46:5b:31:f2:c0:42:76:b7:31:
         b7:97:d2:06:e1:49:92:ed:b5:24:22:b6:1e:c7:ee:08:a2:59:
         9e:6d:81:f4:be:1e:66:66:3c:dd:58:42:ab:01:4d:7c:8c:91:
         25:e5:94:7c:e4:19:b7:e6:af:7b:b3:16:4f:e1:b1:97:01:21:
         f4:4e:52:a7:a2:0c:91:5c:c2:c9:08:82:f3:bc:4f:db:81:af:
         70:b1:52:16:45:5a:92:7c:08:6a:66:fa:c6:e2:21:12:ec:98:
         2d:f2:1f:c4:d3:d7:06:12:f3:4c:70:4f:d6:d0:eb:3d:6b:35:
         3e:c4:9e:bd:e4:ea:f2:fd:6c:5c:ec:02:1b:95:c5:d7:44:68:
         af:d8:37:97:7f:9d:2b:6c:f2:38:af:7a:68:cc:92:47:3c:db:
         1b:fd:02:18:60:7d:22:79:34:2e:3f:e5:27:74:65:8e:c8:e8:
         12:18:a4:d7:f6:bf:e6:b3:52:66:0b:c6:29:9c:7a:29:1e:06:
         ed:e6:be:d0:38:a1:08:3f:9e:fa:4f:0d:35:23:b1:20:2f:20:
         d9:d1:e8:35:6d:1a:c7:04:a2:14:4c:d6:2d:7a:1d:19:9d:52:
         c3:a3:63:ac:4e:d3:7d:19:93:69:77:e5:e4:c6:f8:d1:ae:7e:
         0a:65:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:03:10 2025 by rpki-client