Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/uZUKe7JndgOirFYBmzmvSVYUhR8.roa
File:                     uZUKe7JndgOirFYBmzmvSVYUhR8.roa (raw, json)
Hash identifier:          W5788pRU7pmElEv0fy3sYTtpX5xSz177aVzO+tpzpBk=
Subject key identifier:   B9:95:0A:7B:B2:67:76:03:A2:AC:56:01:9B:39:AF:49:56:14:85:1F
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0113
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/uZUKe7JndgOirFYBmzmvSVYUhR8.roa
Signing time:             Thu 01 May 2025 01:32:18 +0000
ROA not before:           Thu 01 May 2025 01:32:18 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        27.134.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:18 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B9950A7BB2677603A2AC56019B39AF495614851F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:1e:65:ca:c9:94:bd:bf:04:db:ab:e4:67:
                    74:c1:1d:0d:de:81:3f:5d:81:d2:ef:f1:6c:19:a5:
                    33:94:e1:a8:f6:a8:04:9d:ea:fc:01:45:d0:4a:5f:
                    20:39:dc:4e:79:fd:3b:bf:da:14:da:af:78:08:6f:
                    c9:4b:0b:70:9b:69:8c:b6:41:f2:46:44:7e:c8:7e:
                    0f:b1:d7:4f:19:8c:3b:54:fd:22:ae:53:53:bd:0f:
                    30:63:0b:9d:5c:01:e7:6b:c6:c7:23:1a:ba:3e:c0:
                    a3:70:55:c2:6d:91:65:af:21:b7:3b:86:d1:95:42:
                    95:3d:48:29:9f:bf:b8:ed:7b:f1:ca:04:6b:01:65:
                    92:62:f0:48:f8:1d:99:d2:ef:7b:97:ba:91:87:89:
                    64:47:7b:55:f9:a6:7b:8e:d7:75:d1:9a:31:e7:90:
                    7d:ee:04:50:ef:e2:c0:95:f1:c9:42:50:d6:9a:b0:
                    9c:bd:95:5f:ee:97:ec:52:f7:79:90:6f:28:ef:5f:
                    67:c7:7a:87:c7:1c:b5:0e:3d:44:73:f7:5a:8f:f9:
                    66:6d:9a:9f:24:31:66:97:ad:f4:ff:1d:5a:bf:c7:
                    29:3c:9e:0b:4a:02:e5:c1:84:16:66:15:10:eb:4c:
                    dd:0a:4f:5d:1e:c1:07:24:e6:9c:cc:8e:ac:0a:58:
                    4d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:95:0A:7B:B2:67:76:03:A2:AC:56:01:9B:39:AF:49:56:14:85:1F
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/uZUKe7JndgOirFYBmzmvSVYUhR8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:3f:f2:14:d2:d6:f9:71:27:4c:69:78:a1:8c:fb:4b:a1:9e:
         2f:a1:50:bf:38:c9:50:7c:ce:cf:75:2a:c7:41:36:51:43:e4:
         1b:63:c8:40:a4:67:a5:2f:e5:8d:f1:aa:e5:75:bb:6d:0b:ae:
         b4:b8:96:50:ac:1b:fa:15:45:91:0c:09:3b:9b:6a:f1:83:58:
         e2:f0:a1:aa:05:d1:54:cf:a9:ca:25:ec:5a:f1:45:59:07:03:
         29:16:5f:9d:25:5c:4e:7a:fc:b8:b6:2a:b9:00:14:97:94:8d:
         2b:93:eb:93:a1:fc:e7:42:dc:9d:9f:1f:af:0a:89:69:f5:f1:
         45:d9:46:39:f1:3b:8a:12:8e:11:59:43:ab:84:1e:2d:28:30:
         79:79:44:14:d0:fa:7f:30:b3:01:8a:45:b5:76:40:34:8a:bd:
         22:e5:ae:ed:ba:ab:96:4a:1a:bf:00:54:07:25:28:6f:d8:87:
         61:22:c5:81:63:38:54:95:b9:90:77:ce:2c:06:4f:c0:20:bb:
         d6:ae:1d:c1:36:c5:41:92:0f:89:44:99:5b:8b:6b:6d:4c:4a:
         7b:78:2d:72:d9:af:ad:60:09:a5:be:6f:de:6f:a6:37:06:c1:
         a3:51:fc:91:c2:0c:7e:3c:da:ef:3b:35:01:fd:eb:b4:5d:c5:
         03:0d:a6:10
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICARMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw
MTMyMThaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI5OTUwQTdCQjI2Nzc2
MDNBMkFDNTYwMTlCMzlBRjQ5NTYxNDg1MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjUB5lysmUvb8E26vkZ3TBHQ3egT9dgdLv8WwZpTOU4aj2qASd
6vwBRdBKXyA53E55/Tu/2hTar3gIb8lLC3CbaYy2QfJGRH7Ifg+x108ZjDtU/SKu
U1O9DzBjC51cAedrxscjGro+wKNwVcJtkWWvIbc7htGVQpU9SCmfv7jte/HKBGsB
ZZJi8Ej4HZnS73uXupGHiWRHe1X5pnuO13XRmjHnkH3uBFDv4sCV8clCUNaasJy9
lV/ul+xS93mQbyjvX2fHeofHHLUOPURz91qP+WZtmp8kMWaXrfT/HVq/xyk8ngtK
AuXBhBZmFRDrTN0KT10ewQck5pzMjqwKWE23AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUuZUKe7JndgOirFYBmzmvSVYUhR8wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L3VaVUtlN0puZGdPaXJGWUJtem12U1ZZVWhSOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQbhvAwDQYJKoZIhvcNAQELBQADggEBAE0/8hTS1vlxJ0xpeKGM+0uhni+h
UL84yVB8zs91KsdBNlFD5BtjyECkZ6Uv5Y3xquV1u20LrrS4llCsG/oVRZEMCTub
avGDWOLwoaoF0VTPqcol7FrxRVkHAykWX50lXE56/Li2KrkAFJeUjSuT65Oh/OdC
3J2fH68KiWn18UXZRjnxO4oSjhFZQ6uEHi0oMHl5RBTQ+n8wswGKRbV2QDSKvSLl
ru26q5ZKGr8AVAclKG/Yh2EixYFjOFSVuZB3ziwGT8Agu9auHcE2xUGSD4lEmVuL
a21MSnt4LXLZr61gCaW+b95vpjcGwaNR/JHCDH482u87NQH967RdxQMNphA=
-----END CERTIFICATE-----
Generated at Sun May 18 23:22:18 2025 by rpki-client