Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6ANRXMpyYke3CMIZaCU1ZuJD1kg.roa
File:                     6ANRXMpyYke3CMIZaCU1ZuJD1kg.roa (raw, json)
Hash identifier:          izb+53TiSp0l7tHj+Rd71EGzt66/4CUd0pzllinVWE4=
Subject key identifier:   E8:03:51:5C:CA:72:62:47:B7:08:C2:19:68:25:35:66:E2:43:D6:48
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0500
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6ANRXMpyYke3CMIZaCU1ZuJD1kg.roa
Signing time:             Wed 18 Dec 2024 02:40:11 +0000
ROA not before:           Wed 18 Dec 2024 02:40:11 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.250.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:11 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=E803515CCA726247B708C21968253566E243D648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:98:3d:4f:2f:d1:41:de:99:d4:3f:f9:f7:
                    1f:5a:54:68:10:6f:0b:f1:dd:1b:39:8c:d5:67:b1:
                    ef:53:32:91:4e:1b:4a:12:9e:72:84:28:2b:ad:61:
                    68:44:6b:41:97:a1:7d:c8:3f:00:ba:29:10:7e:ee:
                    5b:7c:a5:82:e5:3a:a2:40:ab:0b:0c:e6:e6:ba:c7:
                    c3:be:ad:44:0e:36:87:97:ab:15:30:be:db:73:23:
                    23:cb:85:60:06:f1:7d:d4:68:59:ab:3c:ce:4a:1b:
                    4a:aa:6b:b0:c4:e4:6b:f0:10:8d:ea:46:38:39:22:
                    65:9c:28:47:89:c1:ef:75:d0:ef:60:8a:e9:0b:6e:
                    51:45:fa:8b:25:9a:3f:92:23:d1:d4:bd:ce:d8:86:
                    41:1c:56:4d:c0:cf:29:10:bf:39:ab:50:88:d3:7c:
                    4e:dd:48:b6:d8:7f:e4:f0:2f:8d:73:8e:0e:0e:fb:
                    9b:a1:7d:39:42:8c:0b:48:6a:2d:9e:c1:5c:02:2e:
                    e6:fd:a9:7d:b4:f7:84:ec:7d:13:75:3a:3e:ca:0e:
                    0b:45:1c:1d:1f:45:00:5f:84:3b:42:88:a5:57:2c:
                    f9:8f:bd:07:a4:02:d1:cf:2e:a2:e2:d0:9b:60:a6:
                    53:76:70:ab:38:d9:62:9d:51:18:fb:f4:d4:02:39:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:51:5C:CA:72:62:47:B7:08:C2:19:68:25:35:66:E2:43:D6:48
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6ANRXMpyYke3CMIZaCU1ZuJD1kg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:89:ac:30:0b:f4:d8:80:6b:6b:9d:20:8c:cb:bf:e4:3e:41:
         c4:fa:b5:41:16:a9:67:93:3d:dd:4c:bb:d7:81:80:9d:49:9f:
         c4:8f:c8:e3:38:32:ca:f3:41:fd:1d:6c:50:b9:90:0d:29:5a:
         2f:2d:b9:e6:4b:52:1f:cb:f3:82:74:68:88:24:5e:41:9d:9d:
         c8:5e:96:0d:c9:02:90:5f:68:4c:d4:b4:9f:6c:d7:71:31:b2:
         b7:93:58:19:22:2e:1a:83:12:4a:67:ae:42:1a:31:a3:0c:69:
         b9:0c:9b:cc:49:ff:7c:90:a0:de:8a:49:b3:83:bc:16:1a:78:
         ae:f3:fa:a9:82:97:a2:af:55:dc:62:73:c7:aa:a5:67:31:ac:
         1f:d8:ba:7b:87:92:5c:67:8b:cc:1b:76:4a:25:8e:74:6d:32:
         84:16:8a:15:d4:25:d4:03:12:f8:1d:13:34:31:cb:eb:45:8f:
         8d:c0:d4:de:1e:00:c7:4c:67:f5:d5:65:ea:83:44:c9:ee:6c:
         df:6a:24:25:4c:01:c1:eb:ed:72:09:cd:53:83:a4:9c:c2:b1:
         e6:a0:5f:53:74:62:66:2a:f5:a4:10:ba:62:ae:33:88:1a:60:
         e0:78:e8:d8:0d:33:15:6b:71:5f:7c:60:a1:8d:28:eb:73:ff:
         42:61:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:04:27 2025 by rpki-client