Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pvF6d7DJyaaqUmKC3_naejqN44Y.roa
File:                     pvF6d7DJyaaqUmKC3_naejqN44Y.roa (raw, json)
Hash identifier:          sO56bP2K4ynxY1EG2xI1JuCNd9JvZgbhm9Us7E75B+8=
Subject key identifier:   A6:F1:7A:77:B0:C9:C9:A6:AA:52:62:82:DF:F9:DA:7A:3A:8D:E3:86
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       C1
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pvF6d7DJyaaqUmKC3_naejqN44Y.roa
Signing time:             Thu 24 Jul 2025 01:16:49 +0000
ROA not before:           Thu 24 Jul 2025 01:16:49 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.152.30.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:16:49 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=A6F17A77B0C9C9A6AA526282DFF9DA7A3A8DE386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:94:c4:af:65:9c:04:5d:b7:d5:ec:dd:c4:
                    af:e4:40:8f:6e:2f:f2:a4:6f:04:17:d5:bc:e4:cd:
                    be:be:86:b5:df:ed:f1:6d:7e:4a:98:52:83:7e:4a:
                    cf:51:f7:84:58:90:ac:78:91:32:6e:42:0a:c3:8f:
                    b6:b1:20:b8:ca:df:03:29:b8:79:10:ee:27:dc:91:
                    d7:06:b9:3c:cc:38:da:54:23:03:55:21:b7:e5:71:
                    1c:e6:7a:4b:da:9f:40:2c:dd:0f:47:e2:81:03:11:
                    de:e4:22:25:ae:e8:3e:0f:e3:12:96:cb:1b:52:21:
                    dd:54:5f:d5:98:f7:3e:ca:41:c0:e9:25:34:22:f7:
                    08:9a:3a:8a:67:42:27:df:27:e4:0a:d1:fd:73:07:
                    f0:7d:d2:67:e5:13:06:66:31:a2:2b:b4:ac:4c:23:
                    4d:a4:56:45:2b:62:0c:fb:17:ce:44:99:dc:b7:3c:
                    69:8f:4e:1d:48:51:59:5b:98:be:41:83:59:80:40:
                    af:69:5a:43:5b:f4:ad:a8:47:6d:94:bc:24:d2:9e:
                    f7:5e:95:2b:7d:e5:8e:e7:61:77:21:8e:d1:9b:ed:
                    c4:69:98:37:37:9e:4c:8f:b6:41:76:a8:45:68:46:
                    32:15:b8:c3:53:84:86:27:ef:05:e0:96:45:76:cb:
                    37:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F1:7A:77:B0:C9:C9:A6:AA:52:62:82:DF:F9:DA:7A:3A:8D:E3:86
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pvF6d7DJyaaqUmKC3_naejqN44Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:45:e3:51:b8:88:e0:c7:dd:27:9e:e6:25:88:45:88:32:e3:
         3c:06:4d:62:59:92:68:91:b7:6a:e9:91:d0:eb:1f:23:45:a2:
         9d:fb:6d:12:10:b6:21:a7:09:85:af:82:b1:45:3e:fb:65:71:
         d4:96:7f:55:3d:96:fb:58:8a:c3:2d:9b:26:3f:a1:74:1a:8c:
         a0:d8:a8:4d:99:e9:90:ac:d9:b1:89:eb:2c:66:32:a5:00:a8:
         4d:70:44:9d:23:0c:ae:85:81:a4:7c:e8:48:55:64:ef:e8:d2:
         b7:02:44:bd:a2:a2:bf:e3:90:14:a4:b7:d7:0a:b5:29:99:ab:
         a7:2d:c0:93:74:b7:a3:61:14:2c:c9:05:cf:7e:23:09:b2:48:
         b0:4e:9f:6e:c5:a3:82:27:cc:04:be:0c:e4:f8:be:96:45:da:
         cc:36:de:13:b2:76:ca:b1:52:08:be:e7:2b:8e:88:c7:d9:b8:
         66:9e:da:f3:ff:24:9c:18:3c:08:d7:b4:e0:68:9b:c2:dd:02:
         a1:4b:3f:65:c6:eb:f0:ec:6c:51:c9:06:50:d9:2a:aa:82:45:
         30:3b:c4:33:6d:b6:c3:aa:55:f2:5f:f8:d9:0f:ed:5f:29:46:
         57:8d:c6:0f:61:9b:24:a5:f4:08:70:af:8f:0b:1d:75:41:ae:
         3e:2d:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:21:29 2025 by rpki-client