Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/g9ZG-nZ2XkmzRmeuNxy2ifoFdJ0.roa
File:                     g9ZG-nZ2XkmzRmeuNxy2ifoFdJ0.roa (raw, json)
Hash identifier:          QsH/OFMv90iwIiLxIIx8kqarYaVw72M2Hq5csUH4qAo=
Subject key identifier:   83:D6:46:FA:76:76:5E:49:B3:46:67:AE:37:1C:B6:89:FA:05:74:9D
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0103
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/g9ZG-nZ2XkmzRmeuNxy2ifoFdJ0.roa
Signing time:             Thu 24 Jul 2025 02:05:32 +0000
ROA not before:           Thu 24 Jul 2025 02:05:32 +0000
ROA not after:            Wed 15 Jul 2026 01:30:01 +0000
asID:                     4694
IP address blocks:        211.133.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jul 24 02:05:32 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=83D646FA76765E49B34667AE371CB689FA05749D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:71:3d:23:38:a2:eb:84:27:83:ae:6a:ef:
                    94:40:09:60:8b:df:68:29:7e:4b:62:a1:e1:27:b4:
                    d5:7c:88:8d:9f:8a:5f:c1:42:d7:12:a3:30:db:5a:
                    73:13:e4:99:7a:ed:34:73:ab:40:66:a0:e6:7a:db:
                    3f:03:35:18:52:86:28:ae:d6:23:c9:1b:7f:3e:b0:
                    fc:84:4b:3d:d4:c4:a1:5f:78:cc:09:1d:21:13:29:
                    cc:e5:d5:f0:c3:f4:08:77:fd:4d:79:ef:e7:a8:98:
                    70:bf:cc:30:b1:ae:85:a2:ea:f4:b3:e6:04:27:06:
                    9f:29:26:a5:1c:ab:fc:40:c4:f1:92:25:fd:87:dd:
                    6d:0a:04:bb:b0:9a:c8:f9:a7:9b:fc:75:de:f6:b6:
                    a1:cf:24:d7:d2:58:51:1e:b0:7c:24:f6:72:19:cc:
                    cb:a5:5a:82:88:8e:39:8b:82:02:47:0e:67:bc:df:
                    0e:d9:7e:75:21:0f:0a:3e:13:33:49:e3:71:a8:36:
                    13:fa:31:33:bd:1e:88:4b:17:ac:ee:b6:4f:8a:fc:
                    bc:89:47:35:76:04:f2:b6:ef:b1:93:26:d3:f3:0b:
                    5d:17:15:e9:5a:4f:0c:d9:a6:4a:9d:37:55:81:ad:
                    89:d9:cd:cb:7e:0f:3a:11:5d:0b:eb:4d:a6:fe:4d:
                    62:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D6:46:FA:76:76:5E:49:B3:46:67:AE:37:1C:B6:89:FA:05:74:9D
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/g9ZG-nZ2XkmzRmeuNxy2ifoFdJ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:81:d1:3d:bc:11:18:62:90:46:e8:c2:a9:1d:01:fa:e5:55:
         d1:a6:34:2c:9e:c9:48:ae:70:22:de:be:e8:a4:0f:f4:8d:c7:
         d7:7f:e3:73:bf:84:5e:01:1e:c7:4d:d7:a2:6d:21:22:d9:39:
         b8:e1:70:af:df:b9:f5:d1:47:2e:c7:fa:c5:73:0f:e2:de:67:
         d3:8b:15:5a:58:c4:b2:fc:f1:06:7a:d6:cc:20:35:21:66:b0:
         3f:f6:91:79:bb:52:3b:14:dc:ad:be:fa:16:45:ca:7c:87:0b:
         4f:2d:d7:c5:86:34:7e:2c:7c:1a:4e:dd:2f:f1:71:89:4e:03:
         3e:af:13:4f:7d:f7:ee:b1:dc:e5:84:61:0b:3b:9e:bd:ca:5e:
         9f:ce:ee:39:4f:02:53:c5:96:56:31:59:7c:8f:71:fa:de:9b:
         de:a7:6e:3e:3b:b3:88:59:35:3a:64:88:07:3c:d4:51:2f:72:
         34:19:eb:2a:38:41:21:49:41:97:fa:29:09:76:03:87:c4:5f:
         21:41:c7:21:e3:41:ed:01:11:86:8d:fb:72:51:e1:7f:8c:3e:
         e7:e0:a9:bc:32:ca:4e:e8:48:22:2e:72:aa:29:6a:8a:da:18:
         61:02:ab:cb:5c:a7:94:03:d2:d8:e2:de:0a:b7:c9:e0:e3:e4:
         c9:60:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:37:51 2025 by rpki-client