Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/uy91rWvo6-s4mLIiF31uat6Kk_A.roa
File:                     uy91rWvo6-s4mLIiF31uat6Kk_A.roa (raw, json)
Hash identifier:          VTjfAPiQrwnk0OCD/5eKkEjZZBwRYq9l2JONN0fsU2g=
Subject key identifier:   BB:2F:75:AD:6B:E8:EB:EB:38:98:B2:22:17:7D:6E:6A:DE:8A:93:F0
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       021F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uy91rWvo6-s4mLIiF31uat6Kk_A.roa
Signing time:             Thu 01 May 2025 01:31:36 +0000
ROA not before:           Thu 01 May 2025 01:31:36 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        203.139.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 06:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:36 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=BB2F75AD6BE8EBEB3898B222177D6E6ADE8A93F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:e9:15:18:4f:9f:b9:f9:ba:b7:dd:b4:cb:
                    9d:9a:8c:cb:e3:4d:4b:c3:8f:d4:72:43:ba:8b:40:
                    4f:8a:5c:43:ec:bb:77:15:2e:19:6e:73:1e:de:fb:
                    79:7b:be:f3:7c:77:73:52:1d:77:f6:55:ff:1c:06:
                    66:77:ec:61:a1:e1:1e:d6:2a:73:b2:18:2f:a1:12:
                    90:23:3c:25:19:b8:55:86:de:94:c5:a8:ae:23:ba:
                    33:a8:4f:e9:aa:1c:f5:ad:00:1e:d8:9b:da:3a:8a:
                    b4:76:19:74:38:52:53:88:9e:dc:c5:35:1b:c8:04:
                    5b:43:90:1d:ac:89:c8:0f:e9:fc:87:e4:79:14:89:
                    01:e3:00:be:a3:72:ef:4d:e6:84:44:fd:b4:54:aa:
                    4d:54:e8:58:36:f1:52:ed:42:fc:18:37:a5:74:cd:
                    fd:b6:bd:a9:ec:a1:7e:fb:fd:d7:d9:fc:bd:72:3f:
                    ff:45:d2:ef:a4:99:28:6f:b7:34:0f:00:76:07:02:
                    21:58:c9:ec:e4:5a:7f:4c:50:5d:54:b1:6c:ad:68:
                    46:b5:e3:94:f8:36:7f:45:62:fa:c6:f0:70:6f:9d:
                    60:60:fb:e2:e8:66:04:f7:92:40:0c:b7:91:ec:72:
                    67:2f:71:d7:5d:9d:23:13:ab:41:ba:db:b3:73:db:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2F:75:AD:6B:E8:EB:EB:38:98:B2:22:17:7D:6E:6A:DE:8A:93:F0
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uy91rWvo6-s4mLIiF31uat6Kk_A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.139.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:bf:2e:52:00:8c:9a:28:66:6c:88:f8:98:e5:1d:68:13:8e:
         4b:e7:7a:59:f2:70:05:95:dd:f3:2b:f3:d6:a7:f7:aa:72:d0:
         37:8c:af:4d:d9:24:e5:bd:e7:26:57:3a:19:13:a2:e9:cd:92:
         db:7e:56:c7:c4:2c:94:25:14:3b:c7:5b:2f:38:09:e7:f3:86:
         ab:83:96:23:6e:54:0e:06:41:30:6b:99:20:6e:eb:c4:af:79:
         4f:5c:b9:f8:19:51:d1:38:2c:cb:59:6e:46:7a:9c:67:ff:8f:
         74:c3:04:53:81:ba:45:f7:fa:31:5b:74:04:6f:68:38:3f:29:
         a2:97:f9:05:b2:96:b7:fd:c4:7b:a8:de:9b:15:3e:fc:ef:3f:
         ea:00:8b:f1:8c:f0:9f:be:94:ee:04:6b:c5:9f:f3:52:1f:bf:
         f0:6e:86:53:a6:a8:ab:36:5b:12:a1:29:10:18:c3:e1:5f:ca:
         84:96:cf:e8:e7:21:27:25:f7:9e:51:84:96:ec:3a:cd:c4:c2:
         e7:37:cc:60:b3:88:4b:7f:4a:9d:0f:e9:80:d8:f2:cd:68:a3:
         a8:b2:e1:5b:bf:e4:93:cc:83:fb:c5:98:39:42:34:6a:b1:bb:
         a6:72:93:aa:f7:c9:e4:e1:8b:dd:55:d2:79:ea:f7:1f:a8:8e:
         f2:6a:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 10:30:40 2025 by rpki-client