Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ruXS7OCnHrYd29vqtP473qLD2CE.roa
File:                     ruXS7OCnHrYd29vqtP473qLD2CE.roa (raw, json)
Hash identifier:          kgxEsdwNx9y4UTvzYtjnpbsbhXY6N6z/wSPf/ZrT+mE=
Subject key identifier:   AE:E5:D2:EC:E0:A7:1E:B6:1D:DB:DB:EA:B4:FE:3B:DE:A2:C3:D8:21
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0128
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ruXS7OCnHrYd29vqtP473qLD2CE.roa
Signing time:             Thu 24 Jul 2025 02:29:19 +0000
ROA not before:           Thu 24 Jul 2025 02:29:19 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.250.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:29:19 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=AEE5D2ECE0A71EB61DDBDBEAB4FE3BDEA2C3D821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:7a:a4:1b:3f:3f:63:ef:df:10:d0:6e:95:
                    a4:bd:8e:16:3e:12:5d:bc:dc:b4:75:17:6f:ab:89:
                    b9:e7:8a:ad:94:db:e1:6b:92:af:c9:48:70:78:d5:
                    4f:55:87:e3:e0:38:87:f6:d5:07:0a:6b:40:15:79:
                    d4:38:04:39:5c:7b:f8:ee:ac:d1:31:d2:3f:41:22:
                    47:77:f8:a9:57:5f:8d:13:ab:dd:9e:9d:4b:fa:69:
                    3d:7b:eb:cc:21:c6:da:f6:71:c6:79:8e:92:2e:a8:
                    4b:0d:cb:57:81:5f:91:8b:90:2d:05:f9:7f:52:d2:
                    e5:be:54:f0:2f:40:eb:22:81:06:74:71:8c:fc:b5:
                    db:3c:62:89:d1:1a:d7:6c:e3:a7:6b:a5:65:c7:89:
                    35:59:b8:0c:e2:f0:e4:7f:7b:7b:87:65:23:ab:d1:
                    f4:32:76:63:ce:5a:ed:30:8a:50:ce:04:5b:78:5d:
                    56:32:25:fb:d8:f8:89:8b:35:16:0b:67:06:68:74:
                    13:92:16:be:b7:f9:38:8c:25:bd:c7:49:1e:f2:d2:
                    cc:8c:e5:08:cc:b6:9d:9d:09:a7:95:9c:86:8d:16:
                    92:d8:57:fe:e2:be:7c:88:49:40:0a:89:ce:d5:60:
                    be:86:78:03:20:68:d7:b1:92:4b:ed:22:49:6b:14:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:D2:EC:E0:A7:1E:B6:1D:DB:DB:EA:B4:FE:3B:DE:A2:C3:D8:21
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ruXS7OCnHrYd29vqtP473qLD2CE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:0b:c4:d1:1e:3a:72:48:fb:a1:3a:c1:91:eb:d9:56:23:
         ab:2f:54:bf:ca:76:41:5c:04:c9:0d:cf:0c:f0:64:c3:46:7c:
         dc:02:7e:f7:e3:b5:77:42:b5:b2:ce:81:56:3c:dd:15:8e:2d:
         b9:79:2a:57:a2:a9:5b:7f:6b:e2:44:4f:53:40:3c:6e:36:7d:
         09:f1:64:f0:83:da:75:12:2e:8a:06:72:c2:7a:b1:cf:1b:48:
         a9:b9:29:5b:c1:7a:68:53:ed:06:8a:22:87:a5:0c:80:3d:98:
         d0:b0:53:74:2c:ba:23:17:52:0f:c5:16:98:d4:d7:ca:c8:cd:
         07:f7:44:28:6a:5a:ee:45:42:46:a0:19:de:b2:27:97:25:d9:
         fd:1f:1b:a4:07:24:1a:d7:f1:e5:d8:b1:2f:f8:b7:93:6b:ec:
         9c:f8:22:ac:f1:f1:65:93:eb:11:d8:b7:b8:d0:fd:a7:42:dc:
         20:88:75:30:45:c1:56:de:47:34:a2:23:0c:63:2a:11:71:33:
         83:13:1c:0b:3d:c7:93:44:6a:44:78:36:bf:dd:a3:c9:59:80:
         6f:0d:ed:91:3a:a6:92:30:ad:8f:3c:b5:2d:1f:2a:df:7b:5b:
         95:de:54:5c:59:08:9e:59:80:ce:48:f8:de:56:19:6b:66:61:
         22:62:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:19:52 2025 by rpki-client