Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KQlL5-EnkbFUT-U_nuxtfkofiuA.roa
File:                     KQlL5-EnkbFUT-U_nuxtfkofiuA.roa (raw, json)
Hash identifier:          0q8xwuUhhJPD2/nJEmXymO3CjKjSf2xDCQ38FmAOlJs=
Subject key identifier:   29:09:4B:E7:E1:27:91:B1:54:4F:E5:3F:9E:EC:6D:7E:4A:1F:8A:E0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03D3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KQlL5-EnkbFUT-U_nuxtfkofiuA.roa
Signing time:             Wed 18 Dec 2024 02:13:09 +0000
ROA not before:           Wed 18 Dec 2024 02:13:09 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.190.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979 (0x3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:13:09 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=29094BE7E12791B1544FE53F9EEC6D7E4A1F8AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:16:1d:b9:ec:36:82:a1:5a:22:97:a8:76:
                    e5:ab:95:6f:e3:d5:db:b0:3b:6e:93:e5:46:00:f9:
                    3c:77:4b:53:21:01:a0:ce:b8:ce:ca:e9:3f:22:f5:
                    25:dc:2c:55:7c:09:7d:5e:91:1d:78:68:3d:5d:b5:
                    27:0f:85:e9:ff:8e:c8:f7:3c:ea:64:97:8f:29:80:
                    9c:99:82:14:e9:6b:72:fd:47:2c:a6:66:d3:9a:82:
                    5a:b3:e8:2f:03:b0:37:0b:fa:ba:8b:25:25:68:ba:
                    f8:b6:b8:61:b1:a2:95:2a:a4:15:c9:69:18:62:50:
                    7e:2c:cf:55:e9:ba:21:fe:b8:a3:6e:db:8a:04:b5:
                    6d:5a:4e:4d:93:a2:4d:b1:0b:38:3a:58:d0:bf:7a:
                    da:48:25:b8:5d:85:01:66:4c:c0:1e:b0:b5:6c:d2:
                    23:b5:e0:79:79:4a:6f:e2:64:b6:66:ac:8e:19:22:
                    d3:4f:8a:cb:8d:69:b4:b6:f2:5a:50:da:ba:5b:75:
                    c1:e7:1e:3a:68:90:7f:ce:7c:5f:c0:80:c6:27:d1:
                    66:d6:3d:c2:ce:df:1d:6a:b7:d0:be:5c:20:db:14:
                    6e:90:dd:ed:18:bc:bc:43:e5:6d:3e:f5:3a:55:8b:
                    28:8d:8d:66:ae:0f:93:d5:a4:b6:7d:cc:05:71:09:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:4B:E7:E1:27:91:B1:54:4F:E5:3F:9E:EC:6D:7E:4A:1F:8A:E0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KQlL5-EnkbFUT-U_nuxtfkofiuA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.190.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9f:7e:fb:4b:1b:d9:fa:2e:12:37:b6:27:37:1e:86:a1:19:f1:
         02:bf:79:0a:b6:ab:d9:4e:7e:77:e6:da:96:87:5e:5b:ab:a0:
         e7:f6:3b:4f:40:1e:a5:97:5d:af:c2:db:85:35:f5:5f:ce:15:
         fb:bb:58:a8:9f:4b:38:69:39:2d:4f:ba:b6:26:b2:0f:bc:95:
         47:53:fb:c3:8c:70:ef:2d:df:28:8a:f6:69:c9:12:22:27:47:
         bf:77:c6:a6:a2:f2:26:48:83:f8:85:f4:f6:bc:56:f2:af:fc:
         12:f1:e5:9e:a2:bc:2c:2a:7f:b5:29:2b:f4:3d:8e:d4:54:20:
         88:90:a4:43:ae:c3:83:da:48:c6:14:dd:8b:a1:f5:1f:7f:9a:
         e8:11:15:97:92:ed:77:f0:bb:67:0d:f7:de:ea:d7:ab:90:e8:
         ed:a1:01:00:71:3f:a7:ca:4c:50:c6:08:36:c4:8f:38:1a:99:
         e4:30:66:26:de:c9:12:fc:e4:32:ce:bd:b3:95:ff:a6:6b:b1:
         94:15:4a:e3:81:df:d8:31:26:b5:17:78:2e:c3:95:54:8c:f1:
         16:6a:77:84:b6:3c:c8:f5:3b:17:d0:71:03:a7:25:1b:e1:22:
         a6:9a:7c:31:6d:c3:b2:a3:c3:17:b1:ea:cf:c2:2a:91:90:3b:
         e7:db:ff:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:17:38 2025 by rpki-client