Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/Uksb37TVPh9soVX4fFA9Su2w_wc.roa
File:                     Uksb37TVPh9soVX4fFA9Su2w_wc.roa (raw, json)
Hash identifier:          Giu/6aPDmF8GvFUd2lReXokkDdZ1hYG37lnTkLTCAfA=
Subject key identifier:   52:4B:1B:DF:B4:D5:3E:1F:6C:A1:55:F8:7C:50:3D:4A:ED:B0:FF:07
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       7F
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Uksb37TVPh9soVX4fFA9Su2w_wc.roa
Signing time:             Fri 01 Aug 2025 01:29:24 +0000
ROA not before:           Fri 01 Aug 2025 01:29:24 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     18144
IP address blocks:        202.236.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug  1 01:29:24 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=524B1BDFB4D53E1F6CA155F87C503D4AEDB0FF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:4c:23:b2:74:b7:5b:0f:76:89:fc:c4:df:
                    c7:27:e6:bd:68:1d:d3:d2:ac:19:a7:5e:1c:8e:49:
                    b3:2b:7f:1f:f3:20:a3:a8:e7:8d:43:ea:f4:2e:aa:
                    e2:02:b6:7f:91:c4:10:64:a0:7f:78:ba:59:67:f5:
                    fb:0f:9f:9a:f4:e3:ed:4b:3a:09:26:b6:32:a4:c7:
                    e9:45:31:9a:96:f5:98:70:d3:ea:c8:6e:86:e2:e0:
                    0b:71:b1:46:a7:70:5a:5a:a3:ab:34:b8:2a:03:89:
                    6e:d4:82:3f:7a:5d:e3:75:57:45:10:8f:d4:f3:43:
                    c0:02:bb:59:1c:51:63:dd:ea:90:bf:fd:61:45:f5:
                    a1:86:cc:40:a0:fb:c8:da:6d:e6:1e:a2:38:6f:f1:
                    88:b7:f8:16:75:37:ce:33:39:41:39:35:43:05:65:
                    f1:19:1b:5b:a0:e5:ae:6e:fd:bb:7b:81:2e:88:df:
                    b8:97:bf:f8:27:de:16:2a:9f:db:3e:d6:d8:69:f0:
                    81:e4:ea:b7:e7:d2:0a:0f:f3:ff:60:4c:3c:6d:65:
                    dc:42:a3:5b:d4:33:f7:3c:34:d4:66:cb:16:63:c7:
                    70:ff:9a:76:a3:8b:be:f7:c2:44:97:41:1e:03:08:
                    72:5d:9e:a5:f5:92:da:bc:da:d7:2c:9b:46:38:3c:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4B:1B:DF:B4:D5:3E:1F:6C:A1:55:F8:7C:50:3D:4A:ED:B0:FF:07
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Uksb37TVPh9soVX4fFA9Su2w_wc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:6f:11:72:46:76:65:99:cc:cc:7c:93:67:43:ac:e4:d1:e0:
         c9:74:9f:f5:89:fc:53:e8:1a:15:a6:f4:b6:73:5d:87:60:bb:
         dd:13:d5:d3:ff:61:c6:fc:0b:a8:39:3c:e5:63:97:7b:9a:d1:
         16:54:88:fb:e0:97:15:9a:60:17:bb:04:29:d1:23:02:71:53:
         22:23:00:dd:ac:c6:cb:55:62:b9:d8:e5:1c:b4:40:82:7e:bf:
         87:38:d6:53:48:86:bd:13:eb:df:93:8e:d6:d4:76:8d:10:60:
         59:f6:11:34:b4:72:65:5e:58:17:ae:62:1d:7d:06:e5:67:12:
         c0:61:66:08:b9:63:20:1c:2c:37:38:b0:52:95:5f:e2:29:0a:
         13:b6:28:a3:9e:fb:cd:38:b1:a2:19:79:2e:fa:87:4c:18:0f:
         fa:58:d5:cd:f7:dd:55:2b:be:78:ea:a4:89:c9:f7:d7:d0:87:
         6a:76:e2:0a:7c:37:c8:dd:5a:13:25:9f:f7:ca:90:c1:76:e7:
         2f:9a:3b:3e:58:5c:be:03:28:dd:5f:fb:da:8a:b5:1e:6a:04:
         7d:51:06:ba:38:04:e4:e5:da:30:8f:86:72:99:d9:30:f6:09:
         43:f9:dc:0e:f2:01:33:6a:9f:70:49:b4:b4:71:c8:d3:c8:87:
         f0:7d:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:54:32 2025 by rpki-client