Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/v-GcVTiBeYJ5ytnvn0zyTs0M7Tw.roa
File:                     v-GcVTiBeYJ5ytnvn0zyTs0M7Tw.roa (raw, json)
Hash identifier:          Aa1Z/nSfVlWlFIgsmzOzmfG1iwaNoeuX2mNmqZSg2pQ=
Subject key identifier:   BF:E1:9C:55:38:81:79:82:79:CA:D9:EF:9F:4C:F2:4E:CD:0C:ED:3C
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       AE
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/v-GcVTiBeYJ5ytnvn0zyTs0M7Tw.roa
Signing time:             Thu 24 Jul 2025 01:04:24 +0000
ROA not before:           Thu 24 Jul 2025 01:04:24 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.129.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:04:24 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=BFE19C553881798279CAD9EF9F4CF24ECD0CED3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:92:64:4c:95:b1:5e:99:e0:ce:45:6f:51:
                    ef:2a:ee:db:28:6a:d8:a8:82:17:07:c0:d8:41:a3:
                    8d:23:87:e3:03:1e:f3:23:b1:f7:71:67:f8:ff:27:
                    77:b5:b9:8f:52:ab:f9:35:3d:72:0a:41:92:95:eb:
                    73:a7:ce:ee:30:0f:ec:8a:ab:a1:73:6d:b1:04:44:
                    b0:e3:c2:b2:e5:4e:d2:af:ad:2b:88:f2:53:d5:0f:
                    27:b9:50:f7:1a:5c:ea:a4:84:4b:7d:65:e6:ce:d9:
                    2a:e3:b5:54:e9:1f:52:cf:83:03:25:e1:d8:57:54:
                    f5:17:f0:f7:3b:a0:ec:ff:4e:cb:b2:72:1f:7c:22:
                    86:92:70:b1:8d:d4:b8:b5:76:af:13:7e:37:b8:30:
                    39:78:fe:83:08:b0:4c:56:d5:58:5d:34:21:33:4e:
                    0a:08:8f:70:b3:e4:03:8e:bd:cc:3b:6b:9b:58:a0:
                    ab:8d:b5:2d:65:87:5d:33:72:54:5e:19:23:87:fd:
                    d3:c8:d7:7b:d9:b6:78:82:9f:3d:22:34:8b:ef:9e:
                    b9:52:4a:43:68:d3:36:6a:92:ce:9c:7e:78:2b:b1:
                    a5:8f:e1:6e:97:a9:17:12:13:62:3d:49:3b:05:c1:
                    42:c5:e0:21:96:51:f3:0a:72:30:8a:75:84:7c:05:
                    dc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E1:9C:55:38:81:79:82:79:CA:D9:EF:9F:4C:F2:4E:CD:0C:ED:3C
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/v-GcVTiBeYJ5ytnvn0zyTs0M7Tw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:23:1f:a3:7d:73:9f:bd:2c:b7:89:5e:a3:b3:f8:d3:b5:
         38:b5:ce:24:c2:dd:70:da:46:dd:0a:83:ac:e7:59:e8:f5:f3:
         05:38:50:31:22:19:9f:6b:bf:a0:4b:da:d8:fb:1d:eb:b9:27:
         dd:73:2b:56:2b:14:e4:ae:63:c8:6c:3d:f0:e1:88:70:7c:85:
         43:97:5b:6f:8b:ba:8e:7f:c8:d7:f7:e5:a4:e7:4b:d0:ed:2b:
         5c:91:94:5d:77:84:a3:2b:30:4b:34:65:90:d4:88:26:ba:b7:
         31:8f:36:43:03:5d:ab:a3:ec:f3:fa:a4:04:a0:38:84:92:cf:
         d8:13:f7:8a:d1:37:3e:2b:d9:03:cb:49:d7:1a:c5:ea:98:ca:
         8d:bc:2e:2f:7d:6d:5d:fe:b8:4a:bb:a5:40:d9:e8:80:99:72:
         74:09:27:12:e1:b0:90:88:91:c6:40:55:f7:bd:62:f6:63:31:
         32:5c:47:de:b0:ad:4d:e5:6f:a9:4a:1b:4c:ce:0f:3e:d0:fc:
         1e:78:77:82:56:e6:a0:b8:43:08:17:cb:6b:99:b3:ce:36:d5:
         7c:ce:f3:69:a6:1b:4c:d8:38:23:12:94:6a:73:4c:23:5a:52:
         03:cd:78:c0:1e:82:e2:8b:0f:48:1f:1e:f8:a0:f1:0c:d7:9b:
         cf:bc:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:08:54 2025 by rpki-client