Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JvjYS2O8p9iwkRLP6zRPBNH1uxE.roa
File:                     JvjYS2O8p9iwkRLP6zRPBNH1uxE.roa (raw, json)
Hash identifier:          NLQyM1DY12LUS5ktcyg2Oau00NV2XaQ5KsetMqWx0I0=
Subject key identifier:   26:F8:D8:4B:63:BC:A7:D8:B0:91:12:CF:EB:34:4F:04:D1:F5:BB:11
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0579
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JvjYS2O8p9iwkRLP6zRPBNH1uxE.roa
Signing time:             Wed 18 Dec 2024 03:01:01 +0000
ROA not before:           Wed 18 Dec 2024 03:01:01 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.141.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:01:01 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=26F8D84B63BCA7D8B09112CFEB344F04D1F5BB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:77:5a:b3:22:d3:36:1a:8c:21:34:53:db:
                    3d:c0:ef:bd:d4:25:f2:79:bc:8c:2e:3b:dc:4c:7d:
                    13:d3:4f:bf:e0:dd:0c:15:e2:a1:0f:60:39:ce:36:
                    65:3e:c8:3f:79:65:78:78:45:3a:b4:88:5e:40:50:
                    ce:16:0b:de:af:be:33:8d:2e:8c:d8:37:5d:e0:2b:
                    ee:36:50:6a:7e:a4:1f:f1:83:56:06:a1:64:6e:7c:
                    d9:17:19:b6:97:e5:1f:14:a7:54:3b:fb:3e:13:ed:
                    d2:ef:b6:5d:78:a6:45:7f:6d:8c:14:8e:e3:8f:aa:
                    31:00:a9:ea:4c:80:1b:0f:d0:94:26:00:5e:f1:47:
                    44:a5:58:1c:11:88:24:75:df:1f:0d:6f:c0:b3:04:
                    cc:e8:69:6e:af:84:f7:69:d4:5d:9d:b4:c7:bb:a3:
                    ae:3b:77:b6:47:69:75:d7:a3:5b:00:c0:cc:8b:de:
                    52:76:2c:3f:f9:7f:cf:c2:75:c7:1c:1f:9f:5f:6a:
                    79:52:b7:96:eb:4e:07:ea:b4:1a:3a:2c:2e:11:c1:
                    60:0c:e5:c7:fc:41:76:fc:0b:9c:eb:83:25:09:39:
                    5a:5d:01:5b:0e:e5:ad:6b:6c:ec:a0:91:e5:65:fc:
                    00:9e:60:6d:98:1e:7e:6d:86:73:21:e1:08:5e:39:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F8:D8:4B:63:BC:A7:D8:B0:91:12:CF:EB:34:4F:04:D1:F5:BB:11
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JvjYS2O8p9iwkRLP6zRPBNH1uxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:67:5e:82:c3:ab:6b:45:ab:a7:9a:5a:ad:99:51:9a:3f:ea:
         83:40:c3:c2:75:ea:b5:de:33:f4:35:ff:e1:f9:02:6d:a6:dd:
         70:42:01:db:76:1d:a2:45:38:d7:1b:57:74:b1:e5:3f:81:3f:
         bc:52:95:ed:91:ed:f1:e0:5b:b3:c1:de:77:ad:64:f1:be:8a:
         00:64:9d:30:da:7e:c7:9d:2d:3a:3e:56:c5:42:1a:5d:47:c8:
         e2:eb:bf:a8:d9:df:f4:41:48:02:c7:02:b5:d6:75:04:53:c4:
         1a:d1:b0:b8:8b:e3:f4:9c:db:5e:a6:93:c5:e7:a2:8a:bb:64:
         e7:90:9c:04:04:44:38:65:f2:06:fa:b2:5a:cd:d5:95:a8:f8:
         5a:23:98:e3:0f:09:c4:63:81:c5:d7:91:8d:f1:57:27:29:9c:
         30:62:1f:df:7e:4f:32:c0:fc:cf:8c:5d:64:43:36:f3:7b:41:
         a7:b9:d5:3b:7f:25:41:60:ee:8b:9c:25:dd:cc:a5:5f:8c:9a:
         ac:e8:4c:20:8c:8b:11:e4:2f:84:70:b4:d3:ec:0f:9d:07:8e:
         8b:b3:0e:04:b0:23:45:e7:26:57:91:d7:3f:3f:08:19:77:7f:
         14:55:a2:f9:11:f6:67:35:1e:be:37:c4:ee:2e:24:d1:61:88:
         76:34:5d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:29 2025 by rpki-client