Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5K4a7tdd6xtw6vtx15Ou8NyB4So.roa
File:                     5K4a7tdd6xtw6vtx15Ou8NyB4So.roa (raw, json)
Hash identifier:          v5RdM1+qid4MVAyEIXPDKuRiJ7zxPYH7Tkt08TPHPVE=
Subject key identifier:   E4:AE:1A:EE:D7:5D:EB:1B:70:EA:FB:71:D7:93:AE:F0:DC:81:E1:2A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0518
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5K4a7tdd6xtw6vtx15Ou8NyB4So.roa
Signing time:             Wed 18 Dec 2024 02:42:18 +0000
ROA not before:           Wed 18 Dec 2024 02:42:18 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.143.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:42:18 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=E4AE1AEED75DEB1B70EAFB71D793AEF0DC81E12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:00:e0:1c:39:c1:9c:5b:0c:b6:5e:70:70:
                    96:5b:a6:ad:75:55:e4:b6:f5:2a:3b:57:94:ce:c5:
                    e0:bd:b3:49:a7:af:4a:5d:9c:ef:3e:f1:81:4d:20:
                    66:bd:37:ee:e7:05:47:67:b7:c0:92:89:13:37:26:
                    e5:f5:63:3c:bd:08:cb:dd:6e:47:35:fd:76:22:6d:
                    ef:fd:a1:cc:68:c9:31:c7:17:21:21:a4:d5:db:16:
                    20:55:48:26:8f:16:8a:10:2d:ad:2e:3a:f0:4c:57:
                    bc:8b:8b:a9:c6:36:72:81:a8:c0:48:6e:63:9c:11:
                    46:f7:51:18:e4:c0:4e:d9:e7:22:ad:f8:6d:aa:53:
                    11:e3:5f:92:c3:15:31:c3:fd:11:96:d5:2c:43:74:
                    f7:4d:20:26:dc:9d:ce:03:69:24:df:0f:0d:cd:ab:
                    1e:c6:a7:ff:da:98:c5:a2:e9:f4:89:ff:ce:e3:a3:
                    ee:29:e8:99:94:de:0b:5d:35:d2:a6:0e:6e:e2:cc:
                    1b:94:03:2b:6a:f3:3d:4e:a6:34:cf:a8:bf:86:a9:
                    0b:65:3f:bf:ad:4f:25:2c:26:03:97:d7:25:a9:b1:
                    c9:89:06:4c:93:5e:d0:6d:a4:50:33:4a:54:11:96:
                    aa:3b:fb:ec:23:a5:ac:22:6f:ec:91:45:08:af:82:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AE:1A:EE:D7:5D:EB:1B:70:EA:FB:71:D7:93:AE:F0:DC:81:E1:2A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5K4a7tdd6xtw6vtx15Ou8NyB4So.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:75:3c:24:ae:58:ff:03:9d:b2:b0:2d:5c:83:eb:d9:62:
         88:b9:a3:99:82:d6:92:8c:67:c9:e8:55:f3:9f:84:cc:a5:60:
         88:a3:f1:5e:36:59:9a:a6:18:2d:b5:a2:55:73:88:8f:58:d2:
         ee:8e:f6:f1:b3:f0:b8:b8:02:1e:2d:90:d5:27:e0:1d:5a:9a:
         86:d2:10:35:86:4d:7f:55:00:d7:8c:8d:54:cf:06:c9:26:b9:
         ca:f2:83:57:da:75:37:40:44:55:9a:cf:ea:02:41:63:64:36:
         41:c1:1f:c2:51:27:8b:0a:f0:30:e6:10:d9:aa:71:cb:b7:32:
         e6:b2:d3:1e:ce:54:bd:12:3d:8f:19:2c:41:cd:56:3a:51:e2:
         bc:4a:78:fe:00:d9:0a:e0:d3:d9:ee:23:30:10:f8:a0:ee:fe:
         c5:85:40:30:c6:88:af:22:4c:09:2d:8e:fd:d2:a6:61:b3:ca:
         a9:d5:8d:39:9e:96:00:2e:a4:39:5e:33:1f:b7:22:2d:e1:6d:
         e3:cc:b5:7e:c8:8f:98:48:20:78:2a:38:31:b0:4b:93:1c:74:
         fa:dd:ed:cd:82:48:5e:ad:6c:92:81:89:fd:5f:a0:ca:08:18:
         d6:af:73:78:19:86:01:09:76:92:32:e6:1b:b7:6c:db:53:5c:
         a9:a1:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:04 2025 by rpki-client