Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uramSY2uf2TqdtXl33iAQ91jJM8.roa
File:                     uramSY2uf2TqdtXl33iAQ91jJM8.roa (raw, json)
Hash identifier:          YzUUhbNKWN3qOmlt8VSrC+LboDgAEBzgJ4A5HkCP8rs=
Subject key identifier:   BA:B6:A6:49:8D:AE:7F:64:EA:76:D5:E5:DF:78:80:43:DD:63:24:CF
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       010D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uramSY2uf2TqdtXl33iAQ91jJM8.roa
Signing time:             Thu 24 Jul 2025 02:13:02 +0000
ROA not before:           Thu 24 Jul 2025 02:13:02 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.140.128.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:13:02 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=BAB6A6498DAE7F64EA76D5E5DF788043DD6324CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:db:03:ef:93:40:e8:51:ec:77:69:bc:da:
                    7a:16:5d:34:e9:ae:24:9a:70:4e:86:1e:08:7d:6e:
                    4a:0f:b5:df:4a:17:34:a5:cc:0a:70:a6:bd:d2:13:
                    4b:9e:5a:c8:2d:56:62:d0:67:8d:40:1b:38:1e:e5:
                    1e:b9:ef:fd:51:59:2a:f4:ed:d3:30:d5:a7:9f:cb:
                    8f:16:9a:5d:a3:72:7a:7d:6b:65:91:b5:84:33:3e:
                    50:43:11:78:07:c5:86:b0:1e:46:e1:5d:04:eb:28:
                    d4:80:b1:bd:cd:6b:8e:53:01:ae:40:83:87:13:a4:
                    d0:1e:e3:0d:4b:21:c5:5b:0e:0e:ad:11:24:af:68:
                    be:42:8e:63:43:7a:21:26:38:1f:8a:51:4b:72:73:
                    0d:a5:42:a5:59:61:41:fa:50:b5:8c:35:79:d8:39:
                    89:7f:fa:5f:18:69:db:f6:9d:48:03:a1:80:ce:f2:
                    9b:aa:3c:ff:e1:7f:e5:6b:12:ba:c2:2a:01:44:cb:
                    43:a0:e5:1e:90:8a:a8:79:a0:d5:b9:a0:e1:14:d7:
                    54:a9:28:85:4e:3c:e6:4e:c0:56:ed:74:78:71:47:
                    ff:e9:6a:94:38:ff:84:6b:ae:58:34:2a:56:d2:91:
                    7d:c5:22:72:a3:fa:25:5b:1c:32:fa:a1:05:e6:fd:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B6:A6:49:8D:AE:7F:64:EA:76:D5:E5:DF:78:80:43:DD:63:24:CF
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uramSY2uf2TqdtXl33iAQ91jJM8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:18:34:07:f2:ba:ff:8d:01:fc:65:cc:c7:d8:01:92:58:
         2a:5f:b2:69:c3:73:26:1b:33:e2:d3:cb:fb:e1:84:bf:f6:7f:
         8e:ac:1a:0e:c7:e9:c7:3d:23:2f:ee:ac:69:4f:11:ff:ed:58:
         d5:d3:a4:59:54:c9:1e:fa:e0:79:0f:c3:78:56:12:65:b2:e8:
         9e:cc:2e:25:4c:84:c0:8e:72:09:8c:42:1e:ef:54:07:67:35:
         c0:01:ae:5e:9c:6c:bd:83:5b:b6:16:83:8b:51:e2:33:83:07:
         8b:db:d5:92:21:7f:1a:ff:ba:12:eb:6d:2b:bf:c8:12:dc:0b:
         f3:9b:75:af:70:62:57:84:b1:6c:66:a5:f6:68:03:75:88:5b:
         05:ad:d1:0f:8e:ea:65:18:18:55:3b:20:42:00:42:ff:9e:89:
         05:2b:fe:2e:83:04:7e:a3:4b:16:1e:ce:cc:89:a4:40:97:33:
         89:73:d7:96:39:49:6c:dc:54:95:b5:a0:44:59:18:9b:d3:52:
         74:6f:98:ff:88:3a:54:0a:ec:b5:b7:7d:bc:b4:45:19:5d:9c:
         69:f9:d0:c4:6a:7e:d7:da:08:5f:ba:cf:cb:19:10:d5:45:09:
         36:83:22:70:99:68:d0:42:36:17:a2:3c:ae:f3:0a:9f:19:ae:
         0c:44:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:22:05 2025 by rpki-client