Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-OAnkhK7G4TRquidYpbT7Jhwwas.roa
File:                     -OAnkhK7G4TRquidYpbT7Jhwwas.roa (raw, json)
Hash identifier:          USRroX7PwI9YQZwIkfmxkMqWKZjWJuwKaZibCf0G9u0=
Subject key identifier:   F8:E0:27:92:12:BB:1B:84:D1:AA:E8:9D:62:96:D3:EC:98:70:C1:AB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04B1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-OAnkhK7G4TRquidYpbT7Jhwwas.roa
Signing time:             Wed 18 Dec 2024 02:29:04 +0000
ROA not before:           Wed 18 Dec 2024 02:29:04 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        59.128.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:29:04 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=F8E0279212BB1B84D1AAE89D6296D3EC9870C1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:c6:3f:90:cd:c4:e0:6a:29:e7:48:01:b9:
                    97:67:f4:3d:18:0e:44:b3:57:0a:8a:6d:c6:68:90:
                    8f:8f:e0:e8:1e:72:21:04:83:96:f1:63:89:9c:22:
                    37:c9:f7:02:3b:84:62:7d:4c:a1:a1:52:71:91:0b:
                    31:d2:2f:a9:67:15:ad:f1:ed:e3:48:dd:4e:5a:eb:
                    08:fe:79:07:c5:79:4d:27:bc:25:71:49:fe:df:1e:
                    3c:8b:fc:13:45:32:58:a4:c7:9b:85:bd:bd:91:82:
                    95:20:f7:13:22:52:d2:05:ed:6f:d8:50:ec:ff:ab:
                    2c:4b:05:26:03:6d:bf:28:46:59:47:3d:2d:e7:a0:
                    1f:2c:e9:c9:60:90:98:91:d7:27:03:ce:57:40:7a:
                    ed:49:2c:a9:6a:e8:40:ae:0b:e9:4b:9c:4b:ad:8f:
                    e4:bb:af:45:b6:c0:dd:e0:8d:57:e7:51:4c:e0:04:
                    e9:75:95:ec:cc:5d:a7:9b:0e:a9:a4:24:7b:61:0f:
                    df:bb:0a:49:41:bb:e3:b6:d0:f3:e5:45:71:20:ad:
                    2e:f1:3d:9f:2c:5a:b9:44:23:0d:0c:82:8e:73:5f:
                    ca:08:cd:ab:b5:09:27:d8:e9:e4:1f:4d:2e:63:b4:
                    00:d3:3a:c0:08:d5:9b:4c:aa:d9:ff:72:6a:28:22:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E0:27:92:12:BB:1B:84:D1:AA:E8:9D:62:96:D3:EC:98:70:C1:AB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-OAnkhK7G4TRquidYpbT7Jhwwas.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.128.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         59:74:7b:03:a5:53:4b:3a:55:6d:7b:2f:82:6c:7b:a4:7c:93:
         80:a1:57:5b:65:e9:c7:42:08:84:cb:85:b0:e3:e5:0a:cb:c4:
         3f:92:fb:f9:8c:f9:f0:a1:6b:d2:99:15:9d:11:f1:69:5a:19:
         5a:34:36:52:8c:b2:c8:44:c4:58:74:3a:ef:92:de:9d:6e:86:
         45:49:67:c1:42:f2:7f:de:cc:2b:fc:00:e1:f5:fd:e7:08:ea:
         91:c6:7a:f3:84:2f:75:5b:6c:d0:55:b3:34:ea:85:b6:82:7f:
         18:5d:34:d3:67:36:97:28:ba:e0:18:f6:85:bd:4f:d2:a2:74:
         58:25:f4:4b:ed:5b:6f:08:9c:64:e3:e5:bb:76:1f:1c:da:b4:
         77:07:92:d8:9b:c8:28:ae:67:73:3b:bc:ce:de:94:cc:ff:66:
         58:ab:55:5b:62:b7:ec:01:74:4f:74:b5:b9:62:57:c9:98:f0:
         6a:57:5f:61:27:10:bf:c4:83:d5:13:5e:2a:af:0a:a8:6d:4b:
         a0:84:69:66:d0:b4:3f:c7:6e:53:65:eb:f0:f2:41:aa:3e:b7:
         fa:80:4a:a8:d8:ac:a7:1c:2a:93:af:34:1d:fe:ca:1a:76:66:
         eb:82:9c:b6:8c:69:cf:c0:f0:fc:86:c1:05:d2:a1:3b:a8:4e:
         b3:71:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:40 2025 by rpki-client