Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tZnodSk4pRgenYH5VltHeHYjLFQ.roa
File:                     tZnodSk4pRgenYH5VltHeHYjLFQ.roa (raw, json)
Hash identifier:          oZ02NNH1ipl/i3LrgFexQKa/WC2NgHzWRFKMIQXHlro=
Subject key identifier:   B5:99:E8:75:29:38:A5:18:1E:9D:81:F9:56:5B:47:78:76:23:2C:54
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       F3
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tZnodSk4pRgenYH5VltHeHYjLFQ.roa
Signing time:             Thu 24 Jul 2025 01:58:24 +0000
ROA not before:           Thu 24 Jul 2025 01:58:24 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.2.206.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:58:24 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=B599E8752938A5181E9D81F9565B477876232C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:14:18:a9:86:91:9c:52:90:5d:9d:bf:fb:
                    62:fe:5d:f4:ac:36:51:8b:91:0e:c9:e3:dd:b1:4c:
                    dd:c8:13:51:c6:f8:98:60:86:32:47:af:b4:98:30:
                    03:eb:b0:58:a1:2f:3d:b9:38:15:ee:b7:2f:39:2f:
                    33:90:4d:a8:1c:88:f0:eb:78:f8:7a:83:6d:a5:4b:
                    87:d9:14:fc:26:ee:47:38:72:74:a5:f4:15:a8:ba:
                    d8:19:16:6b:f1:9c:1c:db:26:8c:47:07:95:dc:7b:
                    26:b5:61:c0:41:f9:01:60:aa:a6:2a:17:5d:e3:07:
                    b6:2d:48:60:94:5c:14:57:cb:2c:31:79:7c:5c:f9:
                    8d:a5:4b:88:06:9f:1a:4c:c9:d6:bf:48:92:5f:8e:
                    d3:2a:fe:d6:ac:e6:90:04:ce:a4:1b:4d:f8:47:f3:
                    02:e5:8f:23:64:c5:2f:76:a9:4d:66:3a:8b:67:40:
                    7f:24:8d:2e:5c:37:96:89:e6:61:fa:4f:d3:4f:67:
                    4c:71:36:ec:51:ff:68:9d:1a:d8:c3:75:3b:bd:a6:
                    0f:ca:1e:2f:9d:24:56:eb:ae:5e:aa:d5:e7:82:47:
                    dc:fe:ed:1d:81:a0:f5:0a:b6:16:0e:18:52:4f:9f:
                    61:5a:bd:66:4b:3a:f6:b7:ce:2c:22:6f:8b:f8:1b:
                    cb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:99:E8:75:29:38:A5:18:1E:9D:81:F9:56:5B:47:78:76:23:2C:54
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/tZnodSk4pRgenYH5VltHeHYjLFQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.2.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:21:2c:25:33:4a:83:0d:b0:50:0a:df:c7:0f:b5:18:65:94:
         91:d3:92:1e:7a:9a:13:66:69:55:e3:03:a2:a8:35:ef:b6:6a:
         0f:28:50:b2:a0:84:cd:32:06:e2:19:68:9b:23:45:de:96:74:
         be:7d:2a:c2:cf:b6:ca:d0:23:12:47:c6:e7:3d:63:25:3f:46:
         2d:29:25:cd:58:96:2f:07:02:a7:59:cf:2d:20:c1:65:62:11:
         6b:1c:ab:08:0f:58:3e:68:9a:79:e5:16:92:ab:c8:71:64:ac:
         a3:9f:8a:d7:9d:f2:41:ed:e7:79:b7:d4:08:3f:a6:26:a4:54:
         01:60:d0:24:c1:b9:0d:a2:10:26:0f:fe:59:8e:61:77:b4:16:
         84:b8:02:a2:40:fd:bd:d3:03:89:b7:25:9f:79:b6:05:31:c5:
         04:9e:a8:f2:1d:77:3e:3b:a9:7f:e5:85:73:a0:91:d5:ac:2e:
         af:42:f3:21:b5:9d:f3:49:ef:0c:01:f4:a2:b8:51:51:f7:05:
         49:29:4a:9a:54:62:b1:79:4e:fd:0f:fe:cb:dd:b9:c4:06:6a:
         0d:12:03:e2:07:26:85:c0:cc:49:a7:b0:ed:d9:b1:e3:40:99:
         04:41:24:48:8c:a4:f2:67:08:01:c2:ba:bc:da:55:c7:e9:c7:
         08:0b:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:20 2025 by rpki-client