Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/E5UsBFoWMFQlz2FeFTJu6tbhjiA.roa
File:                     E5UsBFoWMFQlz2FeFTJu6tbhjiA.roa (raw, json)
Hash identifier:          GKSz30egw0HF0ZFuXYtJQdnT77Fw/FtsADDzu0wV9lI=
Subject key identifier:   13:95:2C:04:5A:16:30:54:25:CF:61:5E:15:32:6E:EA:D6:E1:8E:20
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03F1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/E5UsBFoWMFQlz2FeFTJu6tbhjiA.roa
Signing time:             Wed 18 Dec 2024 02:16:38 +0000
ROA not before:           Wed 18 Dec 2024 02:16:38 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        220.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:38 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=13952C045A16305425CF615E15326EEAD6E18E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:3e:28:36:29:7f:eb:6f:12:64:d8:00:2e:
                    5d:c3:d8:32:13:ba:18:b5:a8:94:ed:97:4a:40:7c:
                    21:6c:c5:97:f0:93:67:40:59:ac:51:19:0c:d4:fb:
                    f1:48:43:ab:0d:6a:26:53:09:c4:aa:e1:a8:f2:62:
                    6f:4e:8e:af:c1:e9:42:51:89:78:89:04:8f:93:85:
                    7e:68:f9:1b:99:d5:ed:11:45:72:c7:95:64:e1:e2:
                    6c:75:0c:8a:84:94:7c:28:f4:1a:cd:ea:90:70:9a:
                    36:bf:bc:79:d7:20:3b:25:c4:d1:64:05:25:3c:53:
                    3f:f3:62:4d:05:f7:8f:9e:10:33:40:fa:19:bf:10:
                    31:a5:31:02:d8:cb:26:1a:ca:ab:ba:d3:25:20:64:
                    2a:a7:93:7c:33:cf:09:7b:1c:f0:1f:f7:31:81:0b:
                    a1:78:ee:59:21:2a:c7:2b:58:83:86:55:e3:7c:77:
                    b9:95:f3:68:a3:34:9a:df:49:4c:60:12:4a:3f:d1:
                    06:39:ba:b5:84:17:39:19:9f:71:b9:88:3e:dc:fa:
                    82:84:e7:29:c1:af:d0:ce:07:73:d3:2d:68:12:60:
                    6d:a6:a0:8e:04:97:f9:8c:23:00:62:ac:ab:a6:1b:
                    33:a6:b1:02:dc:d5:af:62:77:bb:92:8c:9d:e1:8c:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:2C:04:5A:16:30:54:25:CF:61:5E:15:32:6E:EA:D6:E1:8E:20
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/E5UsBFoWMFQlz2FeFTJu6tbhjiA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:82:c6:b1:13:f0:af:35:a0:97:73:33:09:88:2d:1a:7e:8e:
         68:ff:87:1b:2a:bd:ee:2e:c3:9d:54:e7:26:20:07:f5:60:6d:
         bd:45:55:b5:d8:10:4f:60:da:f9:b9:73:69:61:fc:f9:bb:06:
         35:17:dd:eb:31:77:49:93:a1:0f:fd:40:0e:a8:86:94:3e:f3:
         3b:a4:fa:26:e9:f4:c5:03:10:3d:7d:bb:11:4a:a3:f8:7b:63:
         f8:b0:65:93:38:75:cb:b7:40:fd:68:b3:b4:c0:7f:31:3f:a5:
         b8:9c:da:5b:31:51:08:64:aa:5e:a5:60:13:9e:76:33:a6:0f:
         6d:d4:6f:54:1e:34:e9:d5:85:e9:8c:24:3a:28:77:07:8f:1f:
         43:b8:66:a0:d8:45:e6:7a:27:eb:43:2f:95:f0:bf:80:9a:08:
         77:e0:d5:60:4f:af:97:be:07:1d:0c:71:37:1a:07:07:f5:be:
         1d:49:52:3e:5d:93:e3:64:74:7c:66:07:d2:6b:b1:9d:42:9a:
         0c:42:3c:b4:d1:7f:18:b9:ef:8a:5e:76:28:01:4f:eb:ef:ae:
         20:13:26:b1:9e:6c:1c:b5:99:56:e1:75:a8:48:a3:44:55:70:
         07:e6:2d:70:d5:5e:c9:d7:f5:ce:89:eb:48:50:01:14:fe:42:
         d7:15:bc:ef
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjE2MzhaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDEzOTUyQzA0NUExNjMw
NTQyNUNGNjE1RTE1MzI2RUVBRDZFMThFMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC41D4oNil/628SZNgALl3D2DITuhi1qJTtl0pAfCFsxZfwk2dA
WaxRGQzU+/FIQ6sNaiZTCcSq4ajyYm9Ojq/B6UJRiXiJBI+ThX5o+RuZ1e0RRXLH
lWTh4mx1DIqElHwo9BrN6pBwmja/vHnXIDslxNFkBSU8Uz/zYk0F94+eEDNA+hm/
EDGlMQLYyyYayqu60yUgZCqnk3wzzwl7HPAf9zGBC6F47lkhKscrWIOGVeN8d7mV
82ijNJrfSUxgEko/0QY5urWEFzkZn3G5iD7c+oKE5ynBr9DOB3PTLWgSYG2moI4E
l/mMIwBirKumGzOmsQLc1a9id7uSjJ3hjBYHAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUE5UsBFoWMFQlz2FeFTJu6tbhjiAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0U1VXNCRm9XTUZRbHoyRmVGVEp1NnRiaGppQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDc1jANBgkqhkiG9w0BAQsFAAOCAQEAIoLGsRPwrzWgl3MzCYgtGn6OaP+H
Gyq97i7DnVTnJiAH9WBtvUVVtdgQT2Da+blzaWH8+bsGNRfd6zF3SZOhD/1ADqiG
lD7zO6T6Jun0xQMQPX27EUqj+Htj+LBlkzh1y7dA/WiztMB/MT+luJzaWzFRCGSq
XqVgE552M6YPbdRvVB406dWF6YwkOih3B48fQ7hmoNhF5non60MvlfC/gJoId+DV
YE+vl74HHQxxNxoHB/W+HUlSPl2T42R0fGYH0muxnUKaDEI8tNF/GLnvil52KAFP
6++uIBMmsZ5sHLWZVuF1qEijRFVwB+YtcNVeydf1zonrSFABFP5C1xW87w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:18:41 2025 by rpki-client