Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/UxolvWXugAYZjBzFAZvXuYK_grk.roa
File:                     UxolvWXugAYZjBzFAZvXuYK_grk.roa (raw, json)
Hash identifier:          Da9IP6u+L63bMl4IrNb8W2AWrYT1OmlGEzeJd/0q0ZY=
Subject key identifier:   53:1A:25:BD:65:EE:80:06:19:8C:1C:C5:01:9B:D7:B9:82:BF:82:B9
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       82
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/UxolvWXugAYZjBzFAZvXuYK_grk.roa
Signing time:             Tue 10 Jun 2025 10:50:45 +0000
ROA not before:           Tue 10 Jun 2025 10:50:45 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     23816
IP address blocks:        182.22.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 10 10:50:45 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=531A25BD65EE8006198C1CC5019BD7B982BF82B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:d3:4f:1b:70:40:1c:cb:e2:87:6a:ea:0e:
                    e0:6e:2e:14:8c:dc:61:13:92:93:3c:42:19:1c:c3:
                    21:03:e2:7a:b4:3f:68:52:18:cc:0c:74:72:7b:71:
                    fa:1a:9c:ce:ec:b7:91:6b:a9:24:df:14:6e:27:72:
                    c9:ea:f7:74:33:8c:b4:60:ab:95:5b:4e:98:05:0e:
                    b5:2e:60:73:13:84:a9:39:9d:2c:d5:c2:49:09:28:
                    13:6d:42:a5:47:a3:9a:0f:4a:d1:68:b1:02:04:af:
                    88:88:24:60:f2:da:50:20:d9:23:d7:a3:2e:f7:27:
                    c2:ba:33:ce:5c:f8:03:3a:ea:22:6b:18:c1:55:5f:
                    60:7f:4b:5b:91:eb:79:9e:f4:af:12:91:5d:bb:99:
                    19:82:21:12:01:55:bf:aa:bb:6b:63:cc:d2:81:52:
                    b8:e2:b7:13:cd:45:63:77:d8:64:a3:e1:d6:5d:a2:
                    b9:b5:67:59:8c:6b:9c:06:1f:7f:6d:47:b2:87:a3:
                    97:41:f6:30:89:74:3b:44:7e:22:79:54:d8:30:49:
                    fe:63:78:f3:9b:c4:01:76:ab:70:33:2f:74:85:e1:
                    2b:6d:58:54:e9:03:e1:e1:c4:07:a5:e6:9b:73:40:
                    23:10:80:a6:3e:b0:b5:0b:2d:c1:6c:c1:4d:73:5c:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1A:25:BD:65:EE:80:06:19:8C:1C:C5:01:9B:D7:B9:82:BF:82:B9
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/UxolvWXugAYZjBzFAZvXuYK_grk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.22.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:a7:71:a5:cf:94:fe:7d:9c:78:1b:0b:dd:26:ad:fa:63:a7:
         95:a5:97:aa:18:7c:38:28:0c:59:5f:95:5f:dd:1d:f4:b9:21:
         c2:a8:9e:85:d0:49:b8:3c:db:b2:48:53:ac:f0:30:d7:3b:aa:
         60:cb:46:6d:7f:31:ba:df:7c:b7:cb:6d:39:68:d4:20:f7:48:
         f0:98:21:4b:8a:74:e1:c6:2a:32:f0:7d:c3:9f:85:b8:bd:ab:
         3f:86:c6:d8:cf:47:be:40:29:83:8d:70:17:ba:f4:d9:34:f2:
         6f:ad:62:d5:31:a3:ed:b6:a5:56:df:fb:32:56:64:a2:96:51:
         ed:83:b5:3b:0c:85:fe:a9:09:1c:5b:b6:b0:c1:11:a4:2d:9b:
         ef:a4:c2:85:0b:24:07:da:d0:10:c6:be:44:a4:6d:ac:8e:4e:
         1c:f8:4f:c8:b9:16:c4:8b:cf:2e:de:58:15:1f:62:9a:d8:fa:
         04:ff:a0:18:f0:48:8e:1a:4d:6f:f4:c8:c7:8e:0a:25:fe:68:
         ff:85:9d:fe:69:03:be:f7:aa:c2:86:f2:a5:4b:be:e6:42:05:
         e2:14:5c:25:6c:78:a8:ac:ee:da:5d:0c:8e:c2:9d:d8:5d:96:
         4e:ed:d0:71:7a:5b:18:08:6b:95:c7:8b:b6:f1:08:b3:96:e9:
         45:d5:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 14:51:00 2025 by rpki-client