Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/uhUJ4UqHTuJ4n60Z1DU0IYAzQ8o.roa
File:                     uhUJ4UqHTuJ4n60Z1DU0IYAzQ8o.roa (raw, json)
Hash identifier:          RvCmIB6fGpPl/WBq+qcZrbhOH/qQtsqYbY4iFgztsYw=
Subject key identifier:   BA:15:09:E1:4A:87:4E:E2:78:9F:AD:19:D4:35:34:21:80:33:43:CA
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       58
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/uhUJ4UqHTuJ4n60Z1DU0IYAzQ8o.roa
Signing time:             Sun 30 Jun 2024 01:31:41 +0000
ROA not before:           Sun 30 Jun 2024 01:31:41 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     23816
IP address blocks:        182.22.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 30 01:31:41 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=BA1509E14A874EE2789FAD19D4353421803343CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:31:86:2d:fb:58:ec:97:a9:1a:f8:e7:ef:
                    c9:c5:f7:42:f4:4b:76:e5:f6:ce:73:e3:4e:09:71:
                    20:44:6d:0e:c1:da:13:08:a2:8e:78:d6:0b:a4:73:
                    66:23:7c:df:71:50:d0:d2:a5:76:b6:4a:f3:f9:d2:
                    7a:6a:fb:8b:4a:78:d0:25:3d:9f:3f:a1:24:68:74:
                    68:fa:66:b3:40:a4:a7:94:58:9f:1d:a7:d7:38:24:
                    30:17:da:74:af:73:17:48:2c:5a:42:fb:96:65:ab:
                    41:c9:a9:48:9e:32:75:a5:dd:67:54:ca:61:45:71:
                    2a:a1:f7:0c:22:d2:0f:c8:af:48:9c:32:32:34:af:
                    d0:33:60:42:34:de:f0:4c:85:50:5a:0d:fd:d2:28:
                    36:d0:ca:81:5a:17:a4:b5:8b:12:a9:a1:d4:12:4c:
                    d3:49:b9:e5:36:65:95:8f:76:98:9b:e6:1a:0c:ab:
                    7a:26:ad:71:a6:ee:ae:94:f9:fa:1f:58:1d:08:bd:
                    5a:72:ac:4c:cb:d3:c4:53:a0:57:6b:5e:2f:58:a5:
                    79:9c:87:da:7e:1e:a7:1c:d5:c5:1f:19:d6:56:cb:
                    2e:da:d2:ed:82:0f:8d:4a:2a:89:70:8d:5f:88:eb:
                    62:dd:6f:3d:02:3b:ea:a1:c0:27:e3:a6:ab:10:b9:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:15:09:E1:4A:87:4E:E2:78:9F:AD:19:D4:35:34:21:80:33:43:CA
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/uhUJ4UqHTuJ4n60Z1DU0IYAzQ8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.22.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:9a:ab:0d:2f:cb:c7:f4:dc:55:11:93:62:b9:a1:6f:f1:
         60:7b:3d:85:8c:60:42:5a:9c:78:ce:d2:c5:9a:39:00:84:5f:
         40:60:8a:c5:de:25:50:64:88:80:ab:ba:10:c7:70:fb:06:ca:
         fe:a7:8a:3f:07:d1:e4:a7:34:9f:2e:43:f5:56:46:aa:c7:db:
         89:58:f3:fd:a9:ed:98:33:85:c5:72:99:57:bd:cf:d9:ad:36:
         ac:b6:ce:27:d9:e2:81:c0:85:e0:d3:3a:64:a9:cc:0d:4c:a8:
         ad:49:ca:9b:b3:5d:94:da:be:43:b5:e3:d4:83:05:21:f0:cf:
         e5:b9:a7:99:f4:da:48:bf:6d:da:8a:c5:2e:19:2f:33:e3:2b:
         81:92:cb:2f:c4:b8:18:71:a6:cd:ae:f9:ab:42:93:56:a9:42:
         40:11:f6:27:f0:38:78:f5:18:a7:cf:53:cc:16:21:f0:b9:4f:
         1e:3f:ef:e0:35:5e:c3:37:ba:9c:e4:55:a3:c8:6d:a5:6f:12:
         cf:5b:9f:60:c1:49:13:49:8c:48:19:02:90:66:40:b2:89:81:
         b2:72:42:51:a4:33:77:03:22:f6:48:1a:8c:4d:ad:16:7f:be:
         36:18:62:64:ee:07:16:ff:13:44:5c:0c:fd:96:5e:a6:d6:03:
         74:64:96:52
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDYzMDAx
MzE0MVoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQkExNTA5RTE0QTg3NEVF
Mjc4OUZBRDE5RDQzNTM0MjE4MDMzNDNDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK1WMYYt+1jsl6ka+OfvycX3QvRLduX2znPjTglxIERtDsHaEwii
jnjWC6RzZiN833FQ0NKldrZK8/nSemr7i0p40CU9nz+hJGh0aPpms0Ckp5RYnx2n
1zgkMBfadK9zF0gsWkL7lmWrQcmpSJ4ydaXdZ1TKYUVxKqH3DCLSD8ivSJwyMjSv
0DNgQjTe8EyFUFoN/dIoNtDKgVoXpLWLEqmh1BJM00m55TZllY92mJvmGgyreiat
caburpT5+h9YHQi9WnKsTMvTxFOgV2teL1ileZyH2n4epxzVxR8Z1lbLLtrS7YIP
jUoqiXCNX4jrYt1vPQI76qHAJ+OmqxC5yQ8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBS6FQnhSodO4nifrRnUNTQhgDNDyjAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2L3VoVUo0VXFIVHVKNG42MFoxRFUwSVlBelE4by5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAe2FgAwDQYJKoZIhvcNAQELBQADggEBAJxKmqsNL8vH9NxVEZNiuaFv
8WB7PYWMYEJanHjO0sWaOQCEX0BgisXeJVBkiICruhDHcPsGyv6nij8H0eSnNJ8u
Q/VWRqrH24lY8/2p7ZgzhcVymVe9z9mtNqy2zifZ4oHAheDTOmSpzA1MqK1Jypuz
XZTavkO149SDBSHwz+W5p5n02ki/bdqKxS4ZLzPjK4GSyy/EuBhxps2u+atCk1ap
QkAR9ifwOHj1GKfPU8wWIfC5Tx4/7+A1XsM3upzkVaPIbaVvEs9bn2DBSRNJjEgZ
ApBmQLKJgbJyQlGkM3cDIvZIGoxNrRZ/vjYYYmTuBxb/E0RcDP2WXqbWA3RkllI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:16 2025 by rpki-client