Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6L4qYlMbyxVLXyaycaRsDFx95gM.roa
File:                     6L4qYlMbyxVLXyaycaRsDFx95gM.roa (raw, json)
Hash identifier:          V38IbVZ94Y4uGOod51sBXYVrm0QX69gBIo/svvek+wc=
Subject key identifier:   E8:BE:2A:62:53:1B:CB:15:4B:5F:26:B2:71:A4:6C:0C:5C:7D:E6:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0493
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6L4qYlMbyxVLXyaycaRsDFx95gM.roa
Signing time:             Wed 18 Dec 2024 02:28:52 +0000
ROA not before:           Wed 18 Dec 2024 02:28:52 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.155.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:28:52 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=E8BE2A62531BCB154B5F26B271A46C0C5C7DE603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:58:e2:f6:e2:3e:e5:70:72:b5:f3:34:93:
                    72:c5:bd:1f:b7:24:06:8a:71:1f:03:97:7b:7c:4f:
                    68:c3:63:6e:48:62:af:cf:52:c6:44:27:2b:59:f0:
                    5f:c5:87:0e:fe:29:6d:2f:93:18:75:a6:eb:77:7c:
                    15:fd:27:67:ad:24:21:83:50:9d:32:1c:2c:76:5b:
                    f4:31:05:66:43:d5:4d:5a:e5:f5:2a:21:a2:fa:ab:
                    dd:a6:33:70:9b:dd:13:85:b4:bf:57:9a:b1:3c:f5:
                    90:3c:91:e0:e8:05:fc:b2:18:15:7b:a1:1b:3f:65:
                    a4:bc:35:e5:61:ea:e7:da:92:1f:e0:aa:1d:f4:98:
                    f7:17:ac:1e:2c:30:42:5d:f1:60:2f:8a:4b:f8:f0:
                    02:ea:3e:1b:df:cc:0a:1b:2b:21:fc:d1:a0:75:f9:
                    28:59:e1:28:2a:f1:7b:73:46:52:05:c2:f3:b9:d9:
                    29:62:ce:42:68:2e:78:e9:03:ad:d5:07:ee:3b:94:
                    6f:6a:3f:25:2f:06:bb:dd:ab:d5:d3:c2:b0:15:8d:
                    c9:22:e2:ff:76:a8:ab:65:ac:b3:da:f5:a7:0d:6e:
                    0c:41:e3:9f:39:0c:7d:65:c7:81:7e:a4:d2:df:df:
                    f8:09:b2:8d:dc:7e:25:f0:19:b3:3d:4e:e2:66:f5:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BE:2A:62:53:1B:CB:15:4B:5F:26:B2:71:A4:6C:0C:5C:7D:E6:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6L4qYlMbyxVLXyaycaRsDFx95gM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:05:28:01:98:3d:97:b3:a7:b7:bf:1b:a4:b7:ca:a4:b9:c9:
         1b:73:44:62:37:18:f6:bd:17:f9:9d:22:1a:f1:87:0b:43:e8:
         79:e8:55:5e:4a:c5:5b:1e:46:05:82:b1:55:80:5d:3b:2f:d0:
         b0:9c:5b:b1:dd:0a:4e:85:38:42:51:fc:98:50:36:c5:54:f4:
         d0:17:85:a9:e8:75:93:68:65:a3:86:4f:69:0d:c2:02:c9:c3:
         57:69:9e:78:21:33:97:ac:a7:79:02:9c:2f:b7:fb:81:a6:40:
         e0:b0:cf:d8:d8:f2:9b:eb:b0:2c:5b:90:76:de:c4:32:6f:09:
         28:18:17:15:c4:40:d0:62:f6:e1:95:13:78:6b:c5:7c:8e:ae:
         e5:5f:ab:91:95:12:ba:45:bc:46:fb:43:1e:f7:b8:16:33:0d:
         57:e4:ba:c0:5e:8b:4d:5e:51:9f:29:15:6b:82:54:92:6d:eb:
         b3:52:6e:b4:7a:ce:ed:ee:d8:5f:bb:61:0d:57:86:94:d8:43:
         ec:e4:2f:2e:ce:c5:52:2d:a9:ad:c5:8a:05:ef:93:b4:48:d0:
         40:78:e7:83:a2:43:a9:5c:7b:73:0f:c5:b3:05:1a:58:44:85:
         02:aa:e9:cf:d7:02:49:2c:cf:06:15:e0:43:4f:22:cf:74:46:
         7e:bf:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:14 2025 by rpki-client