Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EfIIx73N6kBzUgdEcNxNrELUw5k.roa
File:                     EfIIx73N6kBzUgdEcNxNrELUw5k.roa (raw, json)
Hash identifier:          GNzEvcMU6zyRMNy1iLQL5SRdhWehtzHZF2geTUk3N2w=
Subject key identifier:   11:F2:08:C7:BD:CD:EA:40:73:52:07:44:70:DC:4D:AC:42:D4:C3:99
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03D1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EfIIx73N6kBzUgdEcNxNrELUw5k.roa
Signing time:             Wed 18 Dec 2024 02:13:09 +0000
ROA not before:           Wed 18 Dec 2024 02:13:09 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        121.105.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:13:09 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=11F208C7BDCDEA407352074470DC4DAC42D4C399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f9:48:b9:19:db:89:70:a2:72:e2:29:f7:4f:
                    2d:97:bf:b0:c3:69:21:0f:c3:8a:1b:22:0f:f0:a8:
                    3b:e8:c1:43:c1:09:db:75:c4:b6:31:24:cf:fd:5c:
                    1b:ca:1e:7d:f4:c4:0b:71:b8:ed:3b:15:e0:ce:f4:
                    78:7a:e7:58:d1:7a:56:73:62:05:bf:54:30:32:9b:
                    6c:1c:3b:c2:65:5b:e7:73:dd:ee:41:9f:c6:86:90:
                    aa:ec:0c:aa:f1:14:f5:85:e9:89:77:79:3c:78:61:
                    3b:f4:b9:ce:3b:da:76:38:54:21:35:f7:80:f6:af:
                    de:2e:31:ab:e4:b6:17:65:34:eb:a8:fb:88:45:ac:
                    7a:54:21:7d:18:8d:b1:d5:09:33:ab:8d:11:13:3d:
                    6c:bf:15:11:15:2e:a7:93:2b:de:98:df:d4:5c:2a:
                    97:29:f0:ff:6a:c7:bc:eb:da:cd:b5:fa:fd:03:4f:
                    5a:a7:2b:61:3a:dc:91:95:91:96:d4:7f:9a:04:e6:
                    cf:a8:f4:26:55:6e:a9:64:4a:ed:5f:b0:23:9c:27:
                    06:71:10:f0:30:3e:ee:6a:36:63:62:33:ed:ad:f3:
                    8b:10:ea:50:25:78:18:2b:af:e7:f3:c0:e4:dc:20:
                    88:cf:6f:67:43:0d:b0:9b:1a:7e:b6:e5:4b:45:68:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:08:C7:BD:CD:EA:40:73:52:07:44:70:DC:4D:AC:42:D4:C3:99
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EfIIx73N6kBzUgdEcNxNrELUw5k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:e0:aa:f2:0e:85:93:7f:f1:47:58:cb:8b:81:fa:ce:02:31:
         5f:c1:00:da:21:76:6a:f7:c9:ba:39:83:ca:79:2f:9c:e0:8d:
         dd:8a:23:2d:b2:02:0f:64:49:1b:c9:fe:9d:a1:e7:b4:12:4d:
         8b:f9:9e:87:ae:34:26:20:5f:b0:6e:b0:41:d8:2e:b6:4f:da:
         4b:78:94:3e:0c:2a:51:94:ee:1c:53:ad:b1:18:a5:53:e3:fb:
         49:db:2b:7e:8d:b7:92:5c:6b:c3:37:fb:a7:18:28:45:73:40:
         ff:ff:65:6d:ef:ea:da:e5:33:7d:94:b0:23:8f:e5:d8:83:2c:
         42:8b:00:d3:93:f9:69:0d:63:3b:6e:2e:39:0b:89:e2:ba:a8:
         06:bf:7e:36:94:30:fa:c6:70:5e:d4:30:7e:a2:9d:0b:3d:b5:
         af:8f:76:3f:f9:7b:af:a4:1b:5a:10:7f:90:10:45:c1:b8:18:
         76:e4:6f:a2:c7:55:0b:7f:16:f2:bb:28:b5:e2:e2:c0:0b:eb:
         48:85:98:56:26:ea:79:05:b6:8b:99:3b:a0:e5:dd:ed:8f:cf:
         67:2a:2b:43:36:6b:0a:e6:9c:c0:df:16:76:41:bb:fc:48:3d:
         bd:50:7f:2d:26:01:2e:c1:22:c1:f8:79:40:41:44:c1:c3:c7:
         5f:df:c3:b1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjEzMDlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDExRjIwOEM3QkRDREVB
NDA3MzUyMDc0NDcwREM0REFDNDJENEMzOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD+Ui5GduJcKJy4in3Ty2Xv7DDaSEPw4obIg/wqDvowUPBCdt1
xLYxJM/9XBvKHn30xAtxuO07FeDO9Hh651jRelZzYgW/VDAym2wcO8JlW+dz3e5B
n8aGkKrsDKrxFPWF6Yl3eTx4YTv0uc472nY4VCE194D2r94uMavkthdlNOuo+4hF
rHpUIX0YjbHVCTOrjRETPWy/FREVLqeTK96Y39RcKpcp8P9qx7zr2s21+v0DT1qn
K2E63JGVkZbUf5oE5s+o9CZVbqlkSu1fsCOcJwZxEPAwPu5qNmNiM+2t84sQ6lAl
eBgrr+fzwOTcIIjPb2dDDbCbGn625UtFaAhzAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUEfIIx73N6kBzUgdEcNxNrELUw5kwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0VmSUl4NzNONmtCelVnZEVjTnhOckVMVXc1ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB5aTANBgkqhkiG9w0BAQsFAAOCAQEABeCq8g6Fk3/xR1jLi4H6zgIxX8EA
2iF2avfJujmDynkvnOCN3YojLbICD2RJG8n+naHntBJNi/meh640JiBfsG6wQdgu
tk/aS3iUPgwqUZTuHFOtsRilU+P7Sdsrfo23klxrwzf7pxgoRXNA//9lbe/q2uUz
fZSwI4/l2IMsQosA05P5aQ1jO24uOQuJ4rqoBr9+NpQw+sZwXtQwfqKdCz21r492
P/l7r6QbWhB/kBBFwbgYduRvosdVC38W8rsoteLiwAvrSIWYVibqeQW2i5k7oOXd
7Y/PZyorQzZrCuacwN8WdkG7/Eg9vVB/LSYBLsEiwfh5QEFEwcPHX9/DsQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:55 2025 by rpki-client