Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vNPC6aB60XN5qwmGISr9KBxVwnY.roa
File:                     vNPC6aB60XN5qwmGISr9KBxVwnY.roa (raw, json)
Hash identifier:          2xJPPYwFEIwM9k4MvrOGtlg4Xq/RRGA66YzJp2vl5Og=
Subject key identifier:   BC:D3:C2:E9:A0:7A:D1:73:79:AB:09:86:21:2A:FD:28:1C:55:C2:76
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       D7
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vNPC6aB60XN5qwmGISr9KBxVwnY.roa
Signing time:             Thu 24 Jul 2025 01:44:32 +0000
ROA not before:           Thu 24 Jul 2025 01:44:32 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        210.189.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 01:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 01:44:32 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=BCD3C2E9A07AD17379AB0986212AFD281C55C276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:23:44:4f:e6:fd:e2:2f:ea:bc:47:1f:5b:
                    55:d1:bf:23:08:5a:89:6e:02:ba:14:a3:89:ec:9d:
                    ef:e4:23:51:65:62:ab:e9:00:2c:18:59:42:14:29:
                    65:c2:44:3f:f6:d1:ab:be:67:d5:c7:f3:5a:38:83:
                    75:5b:e8:4a:a1:41:e4:28:b2:42:49:28:3d:fc:e4:
                    e5:04:b9:82:eb:b2:cd:53:6d:1a:6f:b3:02:9d:12:
                    52:55:19:e6:15:8e:2f:77:8b:64:97:10:8a:d3:69:
                    8c:02:9a:78:93:0f:79:63:37:8a:4f:d5:6d:7c:7f:
                    2e:b2:4b:62:d1:1f:69:00:c5:79:cd:0f:fe:d7:e9:
                    9e:31:da:18:ab:83:0d:c1:cb:91:fc:5d:aa:96:d3:
                    38:f7:21:82:f4:c8:83:21:2a:5f:87:70:76:5d:75:
                    6b:ca:ca:48:15:0f:85:12:aa:b6:01:d6:d0:7d:ca:
                    03:40:9d:a8:df:a2:45:be:c8:28:ae:1b:b7:70:41:
                    bc:dd:57:c7:9f:aa:c9:9e:39:62:ce:37:fe:bc:5a:
                    4a:43:00:25:0e:44:53:4c:08:ff:c7:df:64:d5:d4:
                    5a:a1:18:32:95:bd:5e:79:b7:af:80:7b:10:f1:6b:
                    5f:39:22:16:2f:67:7c:e2:19:18:4b:f9:36:66:5f:
                    40:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:C2:E9:A0:7A:D1:73:79:AB:09:86:21:2A:FD:28:1C:55:C2:76
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vNPC6aB60XN5qwmGISr9KBxVwnY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:09:68:b9:81:99:15:6f:b2:37:61:08:a4:22:9b:b5:41:fe:
         49:4c:a8:7c:f2:89:b4:ba:2e:3e:1d:97:86:62:23:b5:27:56:
         bc:29:be:d2:41:a2:f1:48:1a:f6:01:af:2c:83:4f:9a:34:17:
         49:cb:75:72:ee:c8:40:e1:14:a1:f5:3a:d9:e8:85:71:f2:8b:
         c9:51:28:6d:16:06:05:fd:59:a5:57:3a:ae:65:09:c8:2b:b6:
         4a:a2:cf:1c:0b:b2:be:bd:5e:b2:fa:d7:57:d2:ed:38:e7:5f:
         bd:84:99:bd:b3:f4:5e:07:9f:c2:1e:9e:dc:38:7d:4f:df:28:
         07:e9:5c:d0:aa:88:ca:60:26:64:70:0d:95:2b:70:c6:1a:f2:
         b5:bf:8d:3f:05:14:a8:7a:d7:fa:49:d4:45:de:78:53:ad:05:
         6a:6a:29:f9:a3:f3:8e:18:30:cb:6a:13:71:a9:d2:89:cc:bb:
         64:25:f2:9d:46:60:9f:b0:5a:a1:80:96:aa:60:74:7f:0b:52:
         11:54:b8:35:45:85:3a:26:7b:58:25:cf:1a:bb:7e:97:57:2e:
         9a:f7:cf:bc:8b:70:f5:04:c6:64:3e:75:1a:9b:ad:5a:98:4d:
         8b:46:bd:08:d9:5e:88:41:e2:43:c2:46:59:71:c9:5c:9a:52:
         3a:1e:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 03:09:47 2025 by rpki-client