Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vtmezjf_b0fB1J0lve4xin5bHhA.roa
File:                     vtmezjf_b0fB1J0lve4xin5bHhA.roa (raw, json)
Hash identifier:          2ndqI3L3BdJ9eCDboTAq8y2V6pd1VWbsKZLzFLdnzLQ=
Subject key identifier:   BE:D9:9E:CE:37:FF:6F:47:C1:D4:9D:25:BD:EE:31:8A:7E:5B:1E:10
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       7D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vtmezjf_b0fB1J0lve4xin5bHhA.roa
Signing time:             Thu 17 Jul 2025 01:19:14 +0000
ROA not before:           Thu 17 Jul 2025 01:19:14 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        202.234.155.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 Aug 2025 00:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 17 01:19:14 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=BED99ECE37FF6F47C1D49D25BDEE318A7E5B1E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:12:ea:96:54:5b:9a:f1:22:cd:94:a3:4b:
                    1f:c5:32:35:4d:9a:dd:84:b7:99:91:61:5a:17:5f:
                    e8:24:57:46:2c:38:3d:da:1e:b1:59:7d:3b:5c:70:
                    5a:dd:6f:d7:f1:bf:ae:c3:15:7f:ff:0d:e3:41:c0:
                    67:f9:5a:0a:79:3f:b2:77:0c:5f:e8:5e:d6:a9:d1:
                    69:34:19:21:26:35:5c:60:8d:fa:99:b6:14:4e:7e:
                    f1:f7:6a:ad:c9:08:09:66:8a:3f:00:a6:d9:2e:77:
                    ef:97:e8:bb:15:bd:da:b7:d9:34:e0:e1:14:cd:09:
                    67:23:d8:63:09:9a:e2:54:cf:8e:b8:bd:64:13:4e:
                    3e:a4:c5:eb:f4:d1:76:86:56:31:27:24:bc:bf:f1:
                    1b:02:65:9f:f1:e0:02:2f:d5:c6:4e:51:42:fa:22:
                    8e:ad:8c:4d:79:0f:23:28:99:90:d8:cc:dd:4f:cc:
                    71:c8:74:c4:06:53:e7:61:60:c7:75:69:67:da:4d:
                    2f:b2:f2:45:35:dd:79:bd:5d:30:9a:90:9d:5f:81:
                    82:1b:fd:16:a2:8c:d8:80:f8:62:99:31:d6:5e:70:
                    3e:33:33:64:dd:32:3b:2b:21:74:77:ea:69:df:9a:
                    01:76:37:99:d4:fa:b0:31:71:e7:b1:cf:b6:bf:67:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:9E:CE:37:FF:6F:47:C1:D4:9D:25:BD:EE:31:8A:7E:5B:1E:10
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vtmezjf_b0fB1J0lve4xin5bHhA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:32:24:20:82:66:d5:cd:da:b0:9e:e7:25:2f:1a:f8:8f:
         7b:8e:a9:fc:fd:86:df:39:2d:5e:da:53:7c:53:cb:2f:06:91:
         c8:9c:d1:36:59:fa:95:9d:dc:98:22:5d:6c:a7:a5:bd:01:45:
         d8:68:59:c1:d2:b2:08:c8:90:3b:44:36:2a:97:8f:ad:e8:49:
         b8:27:9d:11:86:5a:12:6e:c1:7c:32:fc:df:84:95:bc:5e:0f:
         71:32:59:7b:d3:b0:82:69:18:a5:15:74:32:03:a4:f8:c1:1e:
         92:a4:83:db:61:24:b9:2d:cf:4a:90:ab:f3:b5:26:81:46:fc:
         60:3a:66:27:c1:65:45:2a:9f:a5:71:09:db:82:84:6c:ca:9b:
         00:06:80:4d:d9:11:7e:c7:ec:15:f0:04:69:e4:c5:e9:bc:61:
         a2:a2:34:72:2b:0e:5f:59:eb:f7:8f:93:32:72:c1:b2:7a:8b:
         03:1c:4b:40:f5:8d:87:44:a4:a0:e2:12:00:cd:3d:1a:40:6b:
         74:38:53:64:fe:ac:1c:f7:77:2a:f9:18:45:d8:a5:58:97:d0:
         bd:3d:6e:a0:2b:9d:61:af:d1:db:53:30:aa:1c:18:52:84:a0:
         eb:cf:48:0f:fe:b4:d1:9c:e0:db:e3:99:5d:52:48:70:ac:9f:
         cd:9c:94:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:06:45 2025 by rpki-client