Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JFxLYu34bg1tcbtwcnInWeU50w8.roa
File:                     JFxLYu34bg1tcbtwcnInWeU50w8.roa (raw, json)
Hash identifier:          tpXfVmTcoeNzxHU132o8zHbWYt81d12fFlgBWZI4wa8=
Subject key identifier:   24:5C:4B:62:ED:F8:6E:0D:6D:71:BB:70:72:72:27:59:E5:39:D3:0F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       040E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JFxLYu34bg1tcbtwcnInWeU50w8.roa
Signing time:             Wed 18 Dec 2024 02:18:56 +0000
ROA not before:           Wed 18 Dec 2024 02:18:56 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        222.1.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:56 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=245C4B62EDF86E0D6D71BB7072722759E539D30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:90:ea:ef:dd:92:7e:67:ad:d2:9f:19:5e:
                    cd:57:18:c1:93:13:53:43:30:6f:4b:57:cc:86:6b:
                    74:ae:00:64:bf:cf:30:23:ef:36:a4:8a:a7:81:80:
                    b1:61:9d:14:80:93:7c:6f:1c:ce:91:1b:59:68:d8:
                    8e:86:b3:1d:4a:f4:d7:c2:7d:7c:de:b3:38:48:2c:
                    1a:94:b8:03:45:ba:18:80:a7:7a:f0:e6:dc:54:12:
                    9e:93:f3:58:61:d7:37:cd:30:dd:6a:d3:15:e8:0b:
                    88:7f:49:17:30:33:66:ee:23:b9:2e:0d:81:e2:35:
                    32:f2:c9:b3:92:3a:98:bc:07:c2:09:68:1c:61:57:
                    32:ea:13:e9:5d:6e:46:34:13:51:74:ed:db:45:18:
                    b7:9e:e1:87:91:30:4b:57:f6:e8:59:d8:9b:0c:20:
                    30:13:3a:30:5f:da:70:fe:86:d8:cd:aa:30:c3:92:
                    30:36:5f:65:16:2e:6a:d8:a5:7f:9b:1f:0d:71:c0:
                    83:8e:e6:fa:fb:64:f9:67:ea:24:76:40:c7:42:72:
                    a2:b0:5e:de:47:c5:20:12:5c:be:7c:bc:51:d1:c4:
                    28:ac:bc:86:73:dd:76:56:75:86:30:35:aa:d2:d4:
                    12:5f:41:f9:c0:bb:b6:ac:07:95:2a:0b:16:57:2d:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:4B:62:ED:F8:6E:0D:6D:71:BB:70:72:72:27:59:E5:39:D3:0F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JFxLYu34bg1tcbtwcnInWeU50w8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:68:1d:22:19:c9:f8:17:81:76:65:cb:8f:44:8a:ac:3c:68:
         a7:6f:ea:b7:5a:26:9d:20:8f:76:cb:03:2a:2b:aa:bc:92:67:
         2c:07:98:9d:84:8e:c5:0f:44:0c:9d:55:fc:57:b5:16:33:15:
         75:59:93:71:12:9f:6e:9b:7e:81:d8:c4:aa:85:da:3c:9a:81:
         dd:56:71:fb:89:15:17:b8:c5:71:df:89:7e:db:54:ca:88:f3:
         ef:44:ef:4b:95:c5:59:2f:e4:46:c6:d4:a2:66:f9:5e:20:12:
         3a:37:12:8b:7c:50:fb:3e:34:66:14:f2:ba:82:8a:51:33:74:
         e0:78:5a:db:f7:52:9e:f3:d6:ee:16:75:4c:8a:13:9e:2a:0e:
         68:35:fa:07:4f:1c:75:f9:13:73:d7:2a:18:82:a2:36:da:0a:
         b6:86:91:42:eb:a2:42:67:47:6c:03:5d:e8:02:c1:4b:e7:fa:
         49:3c:18:b2:e8:a6:48:59:27:b9:04:08:0c:e7:31:ed:45:ae:
         97:bc:34:29:e1:59:f9:7c:16:be:a8:d1:5f:fe:f4:f4:32:34:
         82:79:da:ba:61:2f:13:b3:5d:ad:b3:99:ec:0f:c7:b4:bc:7a:
         2b:f2:dd:47:ea:a6:85:6e:f0:b0:70:f4:fc:58:c4:fa:d7:69:
         b4:9f:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:05 2025 by rpki-client