Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/uiGjxLYcHAmP1EArk8lK8UmLX6M.roa
File:                     uiGjxLYcHAmP1EArk8lK8UmLX6M.roa (raw, json)
Hash identifier:          m+r/NshK5m3nmSDw8sxn1h43xGX46+cF3TZ0PQNVykw=
Subject key identifier:   BA:21:A3:C4:B6:1C:1C:09:8F:D4:40:2B:93:C9:4A:F1:49:8B:5F:A3
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       011C
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/uiGjxLYcHAmP1EArk8lK8UmLX6M.roa
Signing time:             Fri 31 Jan 2025 01:31:10 +0000
ROA not before:           Fri 31 Jan 2025 01:31:10 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     9607
IP address blocks:        203.216.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan 31 01:31:10 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=BA21A3C4B61C1C098FD4402B93C94AF1498B5FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f8:f4:c5:c7:9a:e1:99:f5:b6:8c:0f:b5:b2:
                    ac:62:de:63:0b:81:b7:39:ff:3d:71:dc:f3:8b:36:
                    0f:ed:ec:72:41:6b:75:3b:0d:b4:03:8d:2c:da:22:
                    73:14:10:40:e7:ce:13:ec:da:90:4f:7c:5f:ca:33:
                    91:32:5f:99:47:3d:b5:62:e6:21:e2:b1:d9:43:8f:
                    f5:de:37:53:46:c5:b6:20:e2:55:d7:d2:de:bd:30:
                    bd:75:1f:cb:7b:6a:c7:92:fa:53:33:be:13:20:c3:
                    26:29:8b:8c:dc:b1:a8:a6:91:d8:86:09:9d:5a:d3:
                    a6:43:b7:a7:4e:6b:40:af:47:39:9b:9c:13:10:bb:
                    9a:66:8a:2e:77:9f:07:41:c7:1e:0b:14:a4:00:36:
                    91:04:94:49:38:07:f2:7b:2b:09:b3:52:86:9c:3d:
                    d0:ec:b6:a1:f7:a7:ab:cc:ad:a4:6b:cd:c6:f1:28:
                    9f:94:5d:34:60:ed:20:30:ba:01:3d:16:31:b0:58:
                    99:59:4c:b4:fc:d9:cf:8d:61:16:9f:cb:af:7c:b0:
                    d9:c7:c6:b7:0d:9b:19:53:f7:48:65:ae:6b:77:c0:
                    54:b1:b5:c1:29:c6:a8:e7:07:8e:17:f6:2f:26:81:
                    d1:a3:e9:38:9c:20:3c:15:41:05:ea:9b:08:3c:1d:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:A3:C4:B6:1C:1C:09:8F:D4:40:2B:93:C9:4A:F1:49:8B:5F:A3
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/uiGjxLYcHAmP1EArk8lK8UmLX6M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:83:2c:5c:7e:9f:9d:06:46:28:95:8d:1b:68:82:84:db:
         99:dc:75:05:6b:3c:f1:ac:89:6f:49:dd:d2:d9:f5:65:2b:66:
         57:a8:2a:ed:fa:fc:5f:eb:6d:1d:ab:bb:54:2d:48:11:cc:2a:
         9a:16:30:48:f7:62:d0:f6:46:1e:63:47:73:0c:ec:2c:b7:63:
         84:fe:69:d3:97:33:c3:a6:f4:40:9f:2d:2b:68:f5:06:60:27:
         ca:74:e0:50:45:b5:15:ed:61:47:f4:b9:21:1d:11:fe:b3:08:
         f0:ca:ce:a8:0f:9a:3e:cb:e9:79:9b:16:9d:1e:59:42:81:94:
         fd:7f:ad:2d:53:f9:44:7c:16:86:3e:b7:47:b0:49:dc:d1:8f:
         dc:5a:08:65:3b:05:22:1c:e9:c1:1f:bd:f6:49:c4:cc:b9:09:
         21:33:3a:88:28:be:74:40:54:32:81:3f:c7:01:60:5d:17:b0:
         ca:ba:1f:8e:1c:49:dc:ac:c5:d6:68:f8:6b:ff:7b:b2:9d:4b:
         db:88:1e:b9:ba:2b:e7:32:cb:af:20:f3:53:94:ef:72:63:43:
         1f:21:00:c8:a5:45:ce:00:94:bf:f3:63:d5:f9:15:b7:9d:7d:
         0b:4d:76:ba:f0:1c:6e:59:34:e1:e1:90:4c:25:4a:f2:f0:f0:
         0e:4f:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:50 2025 by rpki-client