Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/J_xZAjFtDy-orMmnahJyDxOCy8U.roa
File:                     J_xZAjFtDy-orMmnahJyDxOCy8U.roa (raw, json)
Hash identifier:          8iwDgw0Ao3YTtfC80nlAVp7N891pZpQ9xLv4Mn5qN+U=
Subject key identifier:   27:FC:59:02:31:6D:0F:2F:A8:AC:C9:A7:6A:12:72:0F:13:82:CB:C5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0572
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/J_xZAjFtDy-orMmnahJyDxOCy8U.roa
Signing time:             Wed 18 Dec 2024 03:00:58 +0000
ROA not before:           Wed 18 Dec 2024 03:00:58 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.233.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:58 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=27FC5902316D0F2FA8ACC9A76A12720F1382CBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:5c:22:fa:f0:1b:6f:2d:e8:87:d2:f2:2d:
                    64:4a:76:ba:43:1b:90:a4:a0:04:89:af:1f:21:94:
                    52:c2:9a:51:e2:e1:00:3d:24:ee:58:35:c9:a9:cf:
                    93:de:8e:96:9a:c5:d9:fa:2d:27:09:19:92:9c:6a:
                    4c:5e:bb:e5:98:a7:ce:f9:cc:03:ca:13:8c:1b:19:
                    2f:1b:94:76:5c:de:23:79:a0:6a:d1:d6:2f:1c:bd:
                    7d:5b:95:af:f0:81:a2:4e:09:73:4b:2c:fa:f5:fd:
                    af:71:dc:85:a3:4b:d0:70:79:24:2a:38:2f:4c:ae:
                    67:99:93:b1:8c:54:15:72:9d:66:6d:c2:2e:91:cb:
                    8d:24:a5:85:ac:0c:75:25:06:f8:74:c4:40:d7:11:
                    f3:38:cf:1b:8b:b3:a3:d7:8e:ce:7d:73:cb:00:d0:
                    d4:d1:c9:60:87:70:81:20:c9:60:f9:80:b0:20:b1:
                    5d:3b:ee:df:af:de:11:87:ed:40:a1:8c:7e:48:75:
                    46:f2:7a:4a:1a:3e:3f:7c:e1:20:97:1f:11:10:8a:
                    a7:82:fa:1a:18:2a:0a:5d:40:48:1f:a5:f5:a6:c0:
                    9f:14:63:38:c0:5c:9a:83:ad:21:3f:7f:10:7b:ff:
                    ec:38:6b:15:e8:78:ed:e4:00:a2:0c:b5:79:f7:af:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:59:02:31:6D:0F:2F:A8:AC:C9:A7:6A:12:72:0F:13:82:CB:C5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/J_xZAjFtDy-orMmnahJyDxOCy8U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:8b:e6:01:e5:43:6e:34:fa:aa:60:d1:cf:20:84:e2:26:08:
         59:67:da:6a:7d:59:23:1d:d1:2a:bb:8d:9f:4a:66:a6:8c:f5:
         b4:8c:ba:6e:31:b1:e6:4e:e4:96:cc:99:75:b1:76:c3:bc:14:
         6f:28:58:a6:b3:64:52:11:2b:f6:98:66:52:80:78:e2:6b:76:
         68:98:a9:1c:8b:7a:7f:2f:38:81:45:fc:34:33:03:2d:90:be:
         06:31:5a:5c:e7:20:5b:17:2d:af:51:a3:e6:40:5c:87:3b:c5:
         5a:ce:8f:87:48:f1:15:26:ab:57:ab:8e:cc:27:0c:f5:45:bf:
         70:d8:a1:79:38:6f:42:4a:43:7e:fc:56:2d:ec:fd:26:e5:b5:
         08:f7:47:38:f5:42:a0:08:5c:11:62:22:50:4a:88:bc:f6:e2:
         46:63:f7:23:08:87:3b:7e:0e:cb:8f:8a:19:12:2d:58:cd:9c:
         45:4d:20:96:d0:99:cd:b8:67:8c:7c:91:5a:b1:6b:6b:ea:45:
         d6:80:bb:e5:4c:3b:d4:42:f1:5e:ee:e0:f8:9c:78:4f:de:62:
         25:7d:ee:ce:28:99:69:b2:3d:b1:04:a3:22:27:1d:9a:d3:b7:
         a2:1d:d8:37:03:95:76:d1:86:e9:da:9d:9c:78:f9:44:ac:2c:
         c3:e7:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:20 2025 by rpki-client