Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/m0OZ0cIT628OZ1rF9YpoIp218qM.roa
File:                     m0OZ0cIT628OZ1rF9YpoIp218qM.roa (raw, json)
Hash identifier:          qKuGdrryROp1FAdxCWNO84VY5iH8RqFbtDqsYXIYDio=
Subject key identifier:   9B:43:99:D1:C2:13:EB:6F:0E:67:5A:C5:F5:8A:68:22:9D:B5:F2:A3
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       AF
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/m0OZ0cIT628OZ1rF9YpoIp218qM.roa
Signing time:             Thu 24 Jul 2025 01:04:25 +0000
ROA not before:           Thu 24 Jul 2025 01:04:25 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.129.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:04:25 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=9B4399D1C213EB6F0E675AC5F58A68229DB5F2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:c5:d3:4e:83:53:d3:cb:66:e5:19:53:e5:
                    7f:13:01:ba:c2:9a:dd:d6:52:1e:5b:06:e8:27:53:
                    01:15:7a:d1:bf:88:91:77:64:26:81:ac:f4:01:ad:
                    f3:64:a8:d5:41:f4:1c:6c:37:2f:c0:21:0b:c0:a3:
                    e5:62:fb:89:47:0d:f7:b4:b2:bd:88:94:4e:9e:25:
                    71:7c:c1:55:e4:fa:6d:f6:37:b1:cc:b2:79:00:0a:
                    2e:63:83:83:7e:7d:79:99:ac:44:1f:56:10:ac:d0:
                    1a:50:e6:66:fb:95:94:3d:1c:6f:b5:6e:91:4d:c5:
                    a6:87:49:04:19:2d:8a:04:5f:ac:80:69:9d:77:14:
                    be:cf:e7:47:5f:6e:51:a4:64:3f:32:e8:67:32:ac:
                    b5:df:5d:da:7a:71:d8:70:80:df:f9:f9:a0:62:a2:
                    e0:a8:d1:6f:01:df:89:5f:be:74:9e:8c:d3:c3:14:
                    f0:e7:2a:ce:26:24:33:61:0c:3a:65:6c:83:8a:bd:
                    4a:0f:3b:d3:14:3e:db:49:c4:57:29:2a:c2:7c:7e:
                    8e:98:68:f4:f5:f9:af:0a:68:1c:b8:a1:ad:96:a0:
                    be:c5:33:6e:da:ae:f5:84:eb:d8:8c:82:00:40:e4:
                    52:a9:7c:42:82:8d:38:4b:7d:8b:70:0c:a5:74:67:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:99:D1:C2:13:EB:6F:0E:67:5A:C5:F5:8A:68:22:9D:B5:F2:A3
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/m0OZ0cIT628OZ1rF9YpoIp218qM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:85:50:e8:d8:5e:e9:44:53:66:36:77:2c:aa:7b:ca:67:7f:
         44:7b:f2:80:ef:90:8e:63:9d:c8:4c:6e:be:76:8c:66:cb:19:
         62:1c:47:13:50:c7:e0:35:3f:61:fd:34:6a:77:39:1a:dc:2d:
         74:3a:6a:f1:91:1a:ef:d3:30:0d:e0:a4:7b:4b:ec:44:77:35:
         be:4a:d1:c8:75:4b:6e:09:cf:76:4d:85:66:16:28:6b:b0:f5:
         54:60:e3:a6:8e:0e:7b:8b:a7:42:ae:34:f7:91:14:27:1a:c3:
         34:0d:63:5c:c8:ac:82:36:f2:2b:8d:0d:78:2b:81:17:33:38:
         1c:93:d9:3c:50:8a:89:0d:4d:7b:74:55:5f:16:15:dd:48:08:
         d0:db:5e:94:4f:fe:2d:2f:09:80:ac:99:ed:6f:72:0f:2d:28:
         d1:c6:7e:aa:92:d3:e1:7d:b6:ee:c8:47:b2:6b:ce:ba:07:9b:
         07:18:28:c3:bf:6a:86:a2:f5:0b:f2:10:95:9f:cc:1d:a8:34:
         98:7b:70:c1:2c:51:a8:ab:ed:c1:8c:2a:b1:0a:ea:0d:7f:7f:
         df:72:5e:e4:3f:7e:f3:3b:36:ad:20:8b:04:f3:26:32:10:c2:
         ac:48:db:02:c6:e2:7d:c4:a8:41:be:a8:b6:6d:99:7c:5e:6c:
         de:d1:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:11:05 2025 by rpki-client