Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/90XvLLGW0KumvppeoKFiDcImZ30.roa
File:                     90XvLLGW0KumvppeoKFiDcImZ30.roa (raw, json)
Hash identifier:          h5HntV3C0vZu+tyQIYuA0c4YjClXcIz/7VxExBiGwCA=
Subject key identifier:   F7:45:EF:2C:B1:96:D0:AB:A6:BE:9A:5E:A0:A1:62:0D:C2:26:67:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0508
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/90XvLLGW0KumvppeoKFiDcImZ30.roa
Signing time:             Wed 18 Dec 2024 02:40:13 +0000
ROA not before:           Wed 18 Dec 2024 02:40:13 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.233.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:13 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=F745EF2CB196D0ABA6BE9A5EA0A1620DC226677D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:4f:23:b2:d8:a6:34:65:22:8f:2e:f1:08:
                    46:60:9c:b4:68:33:c7:f0:47:5f:bd:8e:de:fe:0a:
                    06:9b:60:79:72:1d:28:bd:62:05:76:d2:d9:38:cd:
                    a3:c2:78:8f:e6:cc:92:41:e5:30:4d:05:ed:0c:6d:
                    15:e5:60:5d:1c:2b:12:f4:d8:e9:e5:d0:78:b0:11:
                    4e:69:58:b8:b4:73:a9:ac:f1:9f:ad:e3:68:ed:64:
                    5e:bf:a1:ab:5e:20:86:6d:36:0a:3d:73:af:0a:15:
                    36:5f:f4:57:b7:09:1c:2a:49:bb:a8:cb:a5:39:38:
                    a8:ba:ae:b1:46:52:82:a8:51:87:06:11:0b:ca:fa:
                    f4:79:f2:25:d8:1b:56:45:5d:ae:32:1f:5c:82:33:
                    c3:a4:42:f9:22:15:48:84:82:02:46:49:19:0e:b0:
                    32:43:ac:b6:a7:71:d9:1a:8a:83:7d:0e:ea:fd:ba:
                    7e:85:9a:7c:d8:df:b0:29:0a:d1:4c:76:49:24:19:
                    32:9a:e6:d0:d9:2a:45:0a:d9:ec:01:c0:43:93:f9:
                    4f:15:10:0c:f9:45:d0:a6:02:00:3d:2a:c8:72:4d:
                    7c:54:8d:7e:b7:17:26:cb:4f:4a:1e:51:26:24:50:
                    99:4d:2e:73:da:17:e0:b8:08:cd:64:f8:02:77:66:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:EF:2C:B1:96:D0:AB:A6:BE:9A:5E:A0:A1:62:0D:C2:26:67:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/90XvLLGW0KumvppeoKFiDcImZ30.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:3b:34:67:3d:35:c1:6b:15:2a:ad:2d:de:7a:01:bd:f8:
         de:8f:70:f6:c1:b8:36:ff:6f:ae:a8:5e:94:93:85:31:7f:b0:
         ca:84:ca:b5:f2:a5:68:5f:e9:81:b8:43:90:85:f3:e5:c2:5f:
         a4:b5:c5:97:25:45:6f:f5:43:7a:43:85:16:89:c8:d9:28:5b:
         f0:8e:59:41:02:bf:8a:bf:1f:d0:e6:7d:9c:6d:1a:9e:4a:6a:
         32:53:7c:d0:6c:e5:75:bc:a3:35:dd:59:d0:5e:4e:65:33:aa:
         36:d7:d1:17:e4:9b:db:5b:1e:52:6e:9c:86:49:e8:69:85:ed:
         c0:07:5b:7d:d1:32:62:aa:cb:ba:d5:24:05:df:aa:a5:0f:18:
         16:b9:43:1f:81:1f:d4:a9:b8:70:b7:82:d3:e1:17:db:99:4f:
         0a:bf:e8:48:f6:4c:6d:88:e2:bd:ea:0b:ae:96:42:a3:51:b0:
         65:fb:4a:ac:b9:fe:c7:4c:34:eb:be:ee:8b:af:5f:d3:90:da:
         83:6d:a5:6d:23:63:11:0a:f3:36:1a:61:b8:59:44:0f:3a:66:
         fd:2d:0a:90:66:24:4d:02:83:c7:20:f4:84:32:a7:f8:a6:bb:
         5b:95:ed:ec:9b:0e:65:60:af:19:25:31:e1:df:35:a4:ee:ae:
         f9:25:c6:d4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQwMTNaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY3NDVFRjJDQjE5NkQw
QUJBNkJFOUE1RUEwQTE2MjBEQzIyNjY3N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlnE8jstimNGUijy7xCEZgnLRoM8fwR1+9jt7+CgabYHlyHSi9
YgV20tk4zaPCeI/mzJJB5TBNBe0MbRXlYF0cKxL02Onl0HiwEU5pWLi0c6ms8Z+t
42jtZF6/oateIIZtNgo9c68KFTZf9Fe3CRwqSbuoy6U5OKi6rrFGUoKoUYcGEQvK
+vR58iXYG1ZFXa4yH1yCM8OkQvkiFUiEggJGSRkOsDJDrLancdkaioN9Dur9un6F
mnzY37ApCtFMdkkkGTKa5tDZKkUK2ewBwEOT+U8VEAz5RdCmAgA9KshyTXxUjX63
FybLT0oeUSYkUJlNLnPaF+C4CM1k+AJ3ZjPNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU90XvLLGW0KumvppeoKFiDcImZ30wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzkwWHZMTEdXMEt1bXZwcGVvS0ZpRGNJbVozMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS6XowDQYJKoZIhvcNAQELBQADggEBACTAOzRnPTXBaxUqrS3eegG9+N6P
cPbBuDb/b66oXpSThTF/sMqEyrXypWhf6YG4Q5CF8+XCX6S1xZclRW/1Q3pDhRaJ
yNkoW/COWUECv4q/H9DmfZxtGp5KajJTfNBs5XW8ozXdWdBeTmUzqjbX0Rfkm9tb
HlJunIZJ6GmF7cAHW33RMmKqy7rVJAXfqqUPGBa5Qx+BH9SpuHC3gtPhF9uZTwq/
6Ej2TG2I4r3qC66WQqNRsGX7Sqy5/sdMNOu+7ouvX9OQ2oNtpW0jYxEK8zYaYbhZ
RA86Zv0tCpBmJE0Cg8cg9IQyp/imu1uV7eybDmVgrxklMeHfNaTurvklxtQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:49 2025 by rpki-client