Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/UvAHBhFnfN0RLlKJxKwY7465uKg.roa
File:                     UvAHBhFnfN0RLlKJxKwY7465uKg.roa (raw, json)
Hash identifier:          x7SzRUwhVKWA8lT5leEXkw0PraWNy7enIUfVaM8WY7M=
Subject key identifier:   52:F0:07:06:11:67:7C:DD:11:2E:52:89:C4:AC:18:EF:8E:B9:B8:A8
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0223
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UvAHBhFnfN0RLlKJxKwY7465uKg.roa
Signing time:             Thu 01 May 2025 01:31:37 +0000
ROA not before:           Thu 01 May 2025 01:31:37 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        210.154.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:37 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=52F0070611677CDD112E5289C4AC18EF8EB9B8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:4c:61:51:74:98:31:43:66:e6:e3:5d:ea:
                    ea:04:f4:c2:c2:70:2f:98:b6:21:eb:72:43:72:bb:
                    67:6d:d2:41:6c:b1:93:47:43:df:ec:c9:b7:b8:a9:
                    5c:3f:d9:2b:25:a1:8e:6e:15:c3:39:44:fa:aa:3d:
                    94:1b:f7:5d:01:d4:95:38:83:8d:26:4e:f5:be:09:
                    b8:d6:e4:c3:95:15:58:98:e6:6a:2e:e3:38:4d:b9:
                    8e:47:c3:58:77:5a:b0:47:82:00:44:67:0d:1c:54:
                    ca:03:a7:bd:ed:03:f2:e8:b1:c3:42:f4:47:6e:12:
                    9e:66:72:23:91:5a:5b:25:f7:59:c6:9b:2b:8b:e6:
                    e4:1b:fe:44:57:ed:48:08:3f:6f:d8:e2:f7:d5:4e:
                    2d:ed:21:de:67:59:05:34:35:f3:1f:24:5e:9f:93:
                    c4:62:db:12:a7:22:6e:b4:ad:0b:25:0e:48:72:48:
                    f1:e5:64:bf:34:8b:87:a9:2c:b9:98:a5:38:d1:0a:
                    3e:73:4b:f8:7c:57:ad:1f:89:03:c5:77:94:9f:6d:
                    31:cc:2e:9b:78:a0:fc:f8:f8:c5:41:44:5a:26:f2:
                    28:a1:1c:94:8c:ae:20:04:4e:1f:6c:0b:ba:92:b6:
                    35:a5:5f:df:d8:32:2c:5b:a2:f4:c4:a0:52:3d:11:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F0:07:06:11:67:7C:DD:11:2E:52:89:C4:AC:18:EF:8E:B9:B8:A8
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UvAHBhFnfN0RLlKJxKwY7465uKg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:2e:69:90:1c:20:40:f5:c0:dc:7f:f5:e3:de:f1:94:1a:c3:
         65:65:3e:b2:61:df:4d:5d:23:8b:55:f8:e2:0c:82:92:e3:a5:
         44:a5:1c:20:5d:09:e0:f6:7d:2b:c6:26:57:c1:6f:3e:94:2b:
         f7:d8:86:51:51:4b:26:91:23:d9:1e:95:4a:11:68:8a:a1:be:
         89:bf:34:f7:bc:c1:b9:db:be:0e:c7:e5:a4:71:54:70:5d:4c:
         51:64:2d:ac:61:f5:6f:79:cf:89:52:59:6c:3b:6b:a9:22:7e:
         ac:ba:d1:e9:4f:72:60:e3:d4:24:0e:cd:23:7c:f2:80:d0:7f:
         65:2e:da:ab:8e:cf:cd:96:0b:21:e4:43:7c:b5:05:aa:4c:f6:
         4d:aa:7d:16:60:2c:26:b4:40:bc:a3:82:fa:5f:80:35:f9:43:
         5e:73:2f:05:1d:66:23:d7:73:93:91:81:df:7f:09:31:c1:53:
         d0:93:90:58:da:63:d5:5a:00:c9:d1:6d:2a:7f:a8:97:3e:84:
         d9:f0:80:76:60:b0:4c:fe:cc:e0:85:59:87:c7:09:58:26:0e:
         8c:1e:d7:8f:4f:c9:81:4e:b7:33:41:58:9e:55:39:03:85:77:
         fa:76:24:a9:06:db:b6:70:ce:8d:79:3a:df:42:c3:0f:b2:74:
         32:70:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:57:28 2025 by rpki-client