Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/UVRR-D63HywqQDB5GGdjnKoP0CM.roa
File:                     UVRR-D63HywqQDB5GGdjnKoP0CM.roa (raw, json)
Hash identifier:          ph82dWPgXhgqjSI8P80Xyl/pHTyXeLdcJCuwerZ6lDA=
Subject key identifier:   51:54:51:F8:3E:B7:1F:2C:2A:40:30:79:18:67:63:9C:AA:0F:D0:23
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       83
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/UVRR-D63HywqQDB5GGdjnKoP0CM.roa
Signing time:             Thu 01 May 2025 01:32:31 +0000
ROA not before:           Thu 01 May 2025 01:32:31 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     17675
IP address blocks:        219.96.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May  1 01:32:31 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=515451F83EB71F2C2A4030791867639CAA0FD023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:e7:78:29:4c:40:70:13:0d:3c:f2:3e:9c:
                    c0:1f:2d:1c:83:68:5f:76:83:ea:e8:d7:98:0d:ba:
                    f1:83:09:cc:71:ba:a0:96:9f:0b:f7:ae:a3:6f:3d:
                    3b:3d:58:6b:aa:06:8f:f5:02:b9:28:ba:2e:c1:bf:
                    f1:ae:35:d4:d6:dd:77:6e:95:1e:0a:e4:11:56:03:
                    ea:4f:8e:6c:ad:1d:78:12:64:17:24:61:8c:12:cf:
                    19:a8:be:e0:dd:e5:a3:a2:4f:11:6a:89:40:1c:d5:
                    5a:9e:ac:42:55:af:22:f2:ff:af:c2:c2:9c:5d:75:
                    3b:31:8d:28:b3:55:54:c4:81:22:ea:23:67:2f:5b:
                    1b:8c:37:79:59:f5:24:44:7e:dc:63:5b:60:6c:01:
                    d1:bb:8a:28:7c:52:58:d0:34:dc:e1:f5:88:8a:b4:
                    f8:93:dd:2b:0d:b4:a0:54:ca:6b:bc:d1:b7:b4:79:
                    f0:f2:4c:74:e6:37:f6:25:96:56:72:4f:42:23:58:
                    52:ae:9c:ff:0f:c5:71:12:05:a8:e8:97:d2:dc:15:
                    c7:f1:25:70:2a:bc:a4:9a:81:22:21:8e:42:01:d5:
                    3a:76:1a:db:73:d2:de:87:57:6d:80:17:fc:df:91:
                    10:98:64:a1:ef:64:16:bc:2c:45:68:f7:ae:a7:d4:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:54:51:F8:3E:B7:1F:2C:2A:40:30:79:18:67:63:9C:AA:0F:D0:23
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/UVRR-D63HywqQDB5GGdjnKoP0CM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:e5:0b:0b:a8:e4:18:d7:97:49:6b:90:6b:67:3f:1e:ed:07:
         cc:35:2b:87:2f:45:b4:c0:e7:3e:e5:80:66:a6:bc:d2:c0:8b:
         8c:a8:f6:36:f6:54:f1:bd:92:12:1d:6e:6d:33:b3:18:81:a0:
         d4:69:a9:7b:26:74:3e:a1:72:06:72:a9:a9:81:74:4e:5a:63:
         6b:93:85:fc:42:0d:09:fd:c9:b8:6b:e6:a1:7c:8e:ac:c4:c2:
         9d:c0:87:80:49:27:7f:b7:f9:ac:6e:48:f6:a9:b2:13:c6:a1:
         17:b5:79:a4:22:bb:e2:0b:99:32:e6:85:4d:3a:03:1b:92:b3:
         6f:b6:0f:04:a7:9d:6f:8d:fb:24:82:8b:f4:cd:95:48:c8:1f:
         40:77:2b:60:f3:ae:ed:17:2e:79:6a:ef:ce:1a:d8:be:9c:36:
         81:53:4e:a6:58:c6:5c:d2:40:1d:f9:45:de:de:fc:ea:d3:6d:
         f5:61:a5:a9:d3:45:64:02:23:40:01:02:4e:93:f4:45:60:05:
         f1:d0:d2:6f:bf:e8:81:f1:0f:09:37:0a:67:5c:18:42:73:19:
         57:c4:40:eb:b7:3d:de:be:fa:f5:3b:b5:1b:53:09:6a:71:29:
         c3:c6:4d:66:b6:12:2c:7b:08:8f:89:d5:b2:99:5d:e8:59:80:
         d2:d4:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:05:18 2025 by rpki-client