Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/u_X2TzkLse6JB87yKnIk_fNw8vI.roa
File:                     u_X2TzkLse6JB87yKnIk_fNw8vI.roa (raw, json)
Hash identifier:          DrC/jEkAk1IU43bs7ICuCkIKl8T/O8WXoj06HDVR8DM=
Subject key identifier:   BB:F5:F6:4F:39:0B:B1:EE:89:07:CE:F2:2A:72:24:FD:F3:70:F2:F2
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       010E
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/u_X2TzkLse6JB87yKnIk_fNw8vI.roa
Signing time:             Thu 24 Jul 2025 02:13:03 +0000
ROA not before:           Thu 24 Jul 2025 02:13:03 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        203.137.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:13:03 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=BBF5F64F390BB1EE8907CEF22A7224FDF370F2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:3a:f6:aa:00:e6:ce:51:f2:39:d6:db:1d:
                    c2:f3:32:9a:2f:8f:51:69:94:b9:79:6c:c5:92:2a:
                    33:06:53:1d:53:78:72:a0:9a:44:cc:69:c8:3c:24:
                    0a:95:74:a3:ea:f5:39:80:27:44:ab:d1:ab:ec:b5:
                    3b:ce:49:d4:7f:27:ea:65:df:f2:e3:60:0e:86:7d:
                    61:83:cc:57:91:a0:d9:5c:5a:dc:96:50:1f:7c:93:
                    ec:18:3c:23:1d:df:d3:61:37:0c:c4:00:53:2e:39:
                    f1:fb:c5:80:65:6c:5e:2b:e0:14:d5:52:19:19:29:
                    50:57:7e:07:3c:d3:a6:3f:11:a4:00:9e:dd:48:76:
                    5a:2d:7c:74:5a:26:f6:7f:bb:ed:02:ad:eb:5c:2f:
                    66:03:7e:9f:4b:31:71:6e:ae:9d:4b:77:ad:f5:d8:
                    13:e7:97:3f:ba:37:1a:df:34:a8:e0:b9:bb:f0:5b:
                    d5:cf:fb:9e:0c:84:db:4f:b3:15:78:17:a6:e2:d4:
                    d9:f0:8f:34:f5:82:46:76:63:fa:fe:5b:e6:02:80:
                    74:7d:9a:cb:d4:76:82:ce:2c:af:f9:2b:54:c4:d0:
                    42:7c:9e:d7:eb:a4:0a:68:14:ab:d3:67:0a:02:c8:
                    ea:7d:07:3a:89:cd:79:b8:ac:86:bc:14:a4:ea:20:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F5:F6:4F:39:0B:B1:EE:89:07:CE:F2:2A:72:24:FD:F3:70:F2:F2
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/u_X2TzkLse6JB87yKnIk_fNw8vI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:ee:38:a9:26:34:9a:4b:bb:b9:df:c6:d0:d5:d8:0a:db:58:
         2d:ea:3f:3d:c0:84:78:e3:f8:7a:81:c4:96:77:87:25:b3:fd:
         1e:48:51:b6:5e:62:0c:4e:ed:5e:f4:3a:e3:a5:6c:a2:8a:cf:
         99:a4:4e:af:2b:a6:4d:c7:cb:a6:28:b8:24:da:05:9e:93:ee:
         ae:be:89:59:15:cc:33:59:0e:10:87:c3:7d:0a:f3:72:e6:d8:
         75:50:10:c5:b6:93:c6:b0:33:1f:71:b4:7b:1d:f6:7c:dd:f2:
         33:ac:33:cb:d9:f2:5c:53:66:95:ff:45:40:4a:39:5c:26:37:
         05:fb:d0:3a:65:8c:f4:66:92:16:75:a0:46:c1:06:ee:f3:e9:
         6b:4a:5f:55:19:58:87:95:2c:92:29:48:41:74:5a:4a:78:a0:
         f8:4e:2f:da:15:14:2e:50:26:4b:a4:92:54:51:8a:68:8b:74:
         15:46:cb:68:4e:79:f2:91:5a:f5:7e:af:d3:3c:ea:32:17:62:
         29:ba:e7:9b:0e:99:e5:f2:99:f5:bf:6c:4d:57:25:fb:ee:4c:
         62:d6:42:f0:cb:e6:e6:b8:a6:9a:27:cf:6f:ff:29:b5:17:04:
         98:a2:c6:a7:39:ef:2a:c5:f8:6e:40:d1:56:88:4b:4b:04:a5:
         3f:51:bc:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:55 2025 by rpki-client