Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tO5ZGYutNr6mQBNua74X90HYAe8.roa
File:                     tO5ZGYutNr6mQBNua74X90HYAe8.roa (raw, json)
Hash identifier:          QYoAZdk1NWU4+I8rugZJOmvVPAF3+m1862UOuZHK7XA=
Subject key identifier:   B4:EE:59:19:8B:AD:36:BE:A6:40:13:6E:6B:BE:17:F7:41:D8:01:EF
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0115
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tO5ZGYutNr6mQBNua74X90HYAe8.roa
Signing time:             Thu 24 Jul 2025 02:22:00 +0000
ROA not before:           Thu 24 Jul 2025 02:22:00 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.239.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:22:00 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=B4EE59198BAD36BEA640136E6BBE17F741D801EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:a3:13:c7:02:f2:f8:69:c7:9c:77:bb:28:
                    ea:89:48:b6:86:34:db:78:10:f0:23:c1:1d:4e:bc:
                    b6:03:91:86:cc:d9:97:41:6f:24:61:db:2b:dc:75:
                    60:1b:31:4b:71:b5:77:ef:bc:77:55:d5:c0:42:7d:
                    a7:e4:1d:f7:5d:cc:84:db:73:39:8a:76:34:df:c9:
                    2f:40:d3:47:57:57:9d:03:01:71:3c:77:57:6f:d5:
                    2f:58:7c:23:ec:55:97:1a:59:11:0d:19:4b:97:df:
                    d3:3a:f9:60:c7:94:70:49:fd:40:7d:45:a5:30:a4:
                    ff:6e:89:f5:5d:f9:15:af:12:61:d1:c7:1a:fb:3c:
                    5f:47:26:90:f4:a6:a3:85:55:f7:b3:54:32:c0:90:
                    4b:49:ee:33:b9:b8:a9:50:ad:95:90:28:ea:17:3b:
                    38:8b:af:1c:8d:e6:ed:fd:6c:e8:98:68:32:7d:de:
                    8a:18:5a:02:23:54:6e:f6:d0:4f:af:dc:c2:70:57:
                    69:68:63:99:1d:9c:b1:88:07:da:0e:a3:d1:77:da:
                    c8:d8:1b:f0:aa:4b:ac:80:9e:7e:11:2d:d5:4f:54:
                    4e:d8:e6:e0:14:45:fb:be:65:af:0c:be:b4:63:5e:
                    24:8c:92:bc:a1:45:9d:83:3d:eb:b9:e5:77:e1:89:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EE:59:19:8B:AD:36:BE:A6:40:13:6E:6B:BE:17:F7:41:D8:01:EF
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tO5ZGYutNr6mQBNua74X90HYAe8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:02:b6:8e:01:5b:0f:1a:8a:50:3e:1b:6a:f5:11:58:97:47:
         06:d6:e6:7f:16:a4:39:25:37:2c:20:e5:89:51:55:22:0f:b4:
         ee:b8:f1:0e:1f:f6:82:cf:8a:5c:da:4b:15:e4:54:65:30:73:
         dc:33:ae:9c:0b:98:63:12:d1:e6:63:42:72:58:17:c2:f8:29:
         70:e1:1d:37:34:bb:92:85:72:b3:13:17:88:ee:ea:9f:05:39:
         0b:89:0f:05:c5:bf:16:9e:98:fb:be:2c:4b:25:e6:04:d4:85:
         5b:04:5a:51:f7:3f:e0:a0:63:ed:06:8e:6f:0e:a1:3d:ba:d0:
         f2:70:6d:95:2b:bf:10:7f:2f:37:57:4c:32:74:7f:18:e4:a4:
         35:ff:bf:2e:25:2e:77:c6:96:81:a2:03:9c:14:ef:6e:c6:ac:
         6a:73:86:2b:e9:60:87:ed:7b:b9:ed:b0:f8:ec:a6:c2:1a:29:
         ab:3f:44:8a:10:6a:9f:ac:a0:7f:75:2f:0a:d7:40:28:f2:61:
         61:70:38:f0:5e:e4:18:3f:e8:7f:83:c8:cf:db:89:7f:fd:78:
         8c:ba:a5:99:a1:07:84:19:8a:89:b7:0b:e7:ed:01:aa:e9:a2:
         bd:29:e0:73:9c:bd:1a:ed:f3:45:b5:78:78:f8:86:ca:e4:71:
         7e:ee:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:22:07 2025 by rpki-client