Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/uiTGkFBNAyqVE0mce9QsgeneMw0.roa
File:                     uiTGkFBNAyqVE0mce9QsgeneMw0.roa (raw, json)
Hash identifier:          kAbv60ksTd+iGuZwohD5enX/+5xxR4eEBDMx9GCB13I=
Subject key identifier:   BA:24:C6:90:50:4D:03:2A:95:13:49:9C:7B:D4:2C:81:E9:DE:33:0D
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       06
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/uiTGkFBNAyqVE0mce9QsgeneMw0.roa
Signing time:             Fri 05 Jul 2024 01:40:14 +0000
ROA not before:           Fri 05 Jul 2024 01:40:14 +0000
ROA not after:            Thu 03 Jul 2025 05:04:45 +0000
asID:                     18282
IP address blocks:        202.163.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jul  5 01:40:14 2024 GMT
            Not After : Jul  3 05:04:45 2025 GMT
        Subject: CN=BA24C690504D032A9513499C7BD42C81E9DE330D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:99:66:27:04:be:ab:ec:da:59:61:67:e2:
                    99:ed:65:21:de:bc:ba:ff:16:8b:26:88:73:7f:a2:
                    86:d9:a3:a4:de:5e:53:a0:d2:48:59:03:8f:a6:45:
                    85:4c:78:49:41:77:5d:aa:a3:62:09:ff:b3:82:a7:
                    23:d9:bf:4b:01:98:ad:0a:6b:d0:a7:d5:47:e1:5e:
                    64:b2:d2:7d:a4:8e:3c:37:87:80:89:1a:6e:0b:77:
                    08:00:34:0d:41:cb:bd:73:53:bd:9f:73:bb:72:66:
                    00:ac:fe:59:b2:14:8d:77:bc:97:90:46:59:82:2f:
                    4f:5e:dd:23:82:cc:ba:65:17:5b:1b:7c:3a:63:76:
                    8a:27:d9:21:47:91:64:67:c6:e9:d4:c2:08:05:8a:
                    3c:10:bf:2f:0f:81:3c:9d:59:7b:2d:45:81:4a:57:
                    47:b6:99:f0:54:b0:02:dc:e6:46:c1:32:a1:45:b8:
                    fa:7d:e4:7e:6c:70:2c:e1:6a:ce:4d:0a:bc:e9:74:
                    ae:a5:a3:4b:5d:47:36:ad:af:88:fd:1d:d1:3e:9a:
                    5c:ba:53:5d:2e:d3:dc:ef:8e:ae:6e:a8:84:62:0e:
                    fd:3a:a0:7f:0c:bd:71:0f:ed:0b:1f:e5:4f:72:68:
                    20:3a:79:c4:b0:cf:cc:43:14:50:28:d6:f8:da:93:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:C6:90:50:4D:03:2A:95:13:49:9C:7B:D4:2C:81:E9:DE:33:0D
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/uiTGkFBNAyqVE0mce9QsgeneMw0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.163.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:85:0e:ca:18:f8:5d:e5:4e:70:5c:24:2b:a7:cf:60:5c:
         b7:91:d0:35:26:c4:2d:22:39:6c:38:0f:ff:38:1e:f2:d1:da:
         c2:a9:01:02:d2:09:ea:45:87:1b:07:14:35:47:56:bd:31:3d:
         cd:68:12:e0:6a:0b:c0:7f:75:fc:f4:ca:f0:8f:09:e2:18:95:
         ea:68:9c:0a:48:55:37:02:b8:95:64:dd:8a:0e:3e:b5:c2:fb:
         0e:42:c0:39:8f:06:89:94:db:b2:50:f0:f1:0d:ee:1b:d9:ce:
         54:1d:37:72:17:e7:fc:13:d0:48:52:66:95:cc:f7:83:1b:6f:
         ce:8a:4d:ca:bc:e3:6a:ba:a8:65:09:31:26:18:88:b3:6f:42:
         08:ca:af:19:6c:54:a9:28:15:66:3b:b5:b7:b0:06:a7:7e:43:
         ff:6a:4b:60:1d:71:e0:2a:96:cf:cf:24:fa:77:df:a8:ea:ba:
         db:eb:c5:a7:fa:af:f8:89:7a:c1:d1:48:b7:b6:01:0b:d8:43:
         2b:7c:bd:3c:2a:2a:46:a1:bf:c5:39:fb:2d:6a:fc:c0:5e:49:
         0f:6a:f0:6d:5f:bc:4e:cd:1f:ce:f3:ba:42:eb:90:71:9c:37:
         2b:b3:82:49:14:c2:ef:a7:e5:94:65:8e:aa:f9:e0:6c:5f:92:
         f9:e8:37:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:39 2025 by rpki-client