Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/neGalUUUjyfBKR0q-px4osTND3o.roa
File:                     neGalUUUjyfBKR0q-px4osTND3o.roa (raw, json)
Hash identifier:          g3jUQD+mUx38cz0/XWcxgz5/VQILVaEM29pGLEMnubE=
Subject key identifier:   9D:E1:9A:95:45:14:8F:27:C1:29:1D:2A:FA:9C:78:A2:C4:CD:0F:7A
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0112
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/neGalUUUjyfBKR0q-px4osTND3o.roa
Signing time:             Thu 24 Jul 2025 02:13:06 +0000
ROA not before:           Thu 24 Jul 2025 02:13:06 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.133.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:13:06 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=9DE19A9545148F27C1291D2AFA9C78A2C4CD0F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:00:40:f2:06:81:f2:cf:e2:0d:91:04:77:78:
                    13:ae:82:61:29:41:1d:be:9b:08:09:c0:bb:17:cd:
                    ee:03:e9:67:16:61:3a:53:05:f0:f0:46:0c:0b:2a:
                    fa:f3:31:0d:77:d9:c1:92:f6:90:6e:cc:c2:82:ed:
                    26:62:6a:24:13:1b:72:a6:cb:62:63:cc:81:02:9c:
                    a9:2a:60:70:65:db:f6:2a:2a:1b:5b:40:c8:87:b1:
                    6d:dc:f2:ba:2e:95:eb:39:34:c8:a9:b6:00:4a:d5:
                    20:6c:77:b0:95:cf:2a:9c:77:16:3e:46:ea:76:91:
                    3e:e1:96:c2:50:5b:40:b0:1f:13:df:9d:d4:61:ab:
                    19:04:96:e7:ca:c8:d5:a8:1f:7d:40:24:37:2b:03:
                    ce:8b:85:b8:3d:f6:8a:04:a3:0d:ac:d2:9f:78:28:
                    5c:00:88:8e:bf:43:64:be:c7:1b:25:6f:cc:86:46:
                    cd:fc:a1:de:49:de:84:64:44:1f:cd:ba:e3:bd:4b:
                    48:bd:09:3c:9e:c3:5b:55:b0:75:d9:9c:09:60:ff:
                    92:e0:f9:f3:74:e7:ce:39:78:83:94:c2:76:af:b5:
                    88:41:a5:a5:b7:15:72:10:96:76:40:ec:5b:7c:2d:
                    89:bc:a1:62:9d:6e:05:c1:2a:68:5f:76:72:4a:da:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E1:9A:95:45:14:8F:27:C1:29:1D:2A:FA:9C:78:A2:C4:CD:0F:7A
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/neGalUUUjyfBKR0q-px4osTND3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:79:bf:19:c7:2e:c5:16:f1:92:77:e5:f4:85:0e:03:f7:12:
         e4:02:ab:c2:72:be:bc:47:3b:50:c1:2d:96:2a:f1:bf:b2:c5:
         20:4b:82:0e:23:b4:12:10:1c:49:f4:1c:6f:a8:ae:3d:9e:a5:
         39:58:61:6c:30:d9:a3:d4:f6:bb:cb:3a:9a:d3:f6:26:5d:7a:
         43:8c:2d:3b:d2:b2:4f:41:71:2e:2d:29:70:08:7c:e5:17:ab:
         f6:39:71:c3:95:39:8c:26:32:84:15:36:5c:b2:6a:c0:2c:98:
         56:c0:d4:ee:c6:16:08:d9:47:1d:b9:d4:07:9e:d3:ba:e1:e2:
         43:a7:8d:80:61:59:f8:b3:6e:d1:87:a0:2b:0b:c3:21:c4:a3:
         68:41:01:47:dd:77:73:b2:4a:ca:fb:93:98:ef:28:4f:b8:99:
         74:15:57:b8:bd:05:71:41:66:b9:57:ac:8b:35:7f:75:9d:f2:
         06:e9:79:7e:10:0b:d2:fa:1d:82:ef:0f:55:5b:88:08:66:39:
         9f:47:4a:d1:62:03:66:69:fc:4f:26:f7:ee:59:cd:72:6e:e3:
         db:c5:40:5e:5d:70:5e:f0:64:5e:fa:e2:7f:2e:05:5e:29:34:
         4c:58:e8:2d:e9:18:bf:81:91:e1:1e:3a:a8:2a:dc:9b:64:7a:
         6c:33:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:10:26 2025 by rpki-client