Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lq82sJG0v7qfdfbCDnJjDgngdRM.roa
File:                     Lq82sJG0v7qfdfbCDnJjDgngdRM.roa (raw, json)
Hash identifier:          nEJ890MoSTV2iFB1sBj1b9rTLP0ZkfLcLxRG26MGXfM=
Subject key identifier:   2E:AF:36:B0:91:B4:BF:BA:9F:75:F6:C2:0E:72:63:0E:09:E0:75:13
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       049A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lq82sJG0v7qfdfbCDnJjDgngdRM.roa
Signing time:             Wed 18 Dec 2024 02:28:54 +0000
ROA not before:           Wed 18 Dec 2024 02:28:54 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.167.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:28:54 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=2EAF36B091B4BFBA9F75F6C20E72630E09E07513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:ac:a7:81:9b:8c:b1:83:07:e7:4f:2d:9c:
                    b2:82:ae:e2:a8:34:ac:ef:65:a5:e4:e2:32:55:b1:
                    8e:cf:85:b4:e1:2b:d7:f2:25:f9:d9:95:d7:a0:f5:
                    4b:01:69:d6:2c:86:07:b4:5d:6d:9c:d7:7d:c1:52:
                    c4:39:3e:16:5d:57:63:f1:7f:6e:1b:89:0a:06:1e:
                    38:c2:8e:58:f2:2d:55:4a:6e:d0:4e:ae:18:d8:68:
                    35:3b:eb:45:a7:2d:98:a4:84:dd:21:4d:64:db:c4:
                    eb:e6:99:65:65:1a:b7:e6:c0:aa:92:43:b2:3a:9a:
                    68:a0:9f:f5:55:c3:7a:85:c2:e1:c0:58:5a:26:17:
                    6e:3f:4e:5c:74:98:75:8a:92:1d:94:27:4c:47:3e:
                    30:ad:34:22:88:79:5d:4a:2c:c1:04:99:49:52:99:
                    28:a9:50:2a:12:05:37:b9:e5:c7:2d:e5:60:3b:69:
                    ea:1f:9b:9c:2c:4f:ca:ee:5e:1d:9d:5e:ad:5b:7f:
                    14:6b:32:63:4a:3f:7d:9a:d1:7d:55:96:47:dc:18:
                    44:31:ca:c8:76:5d:7e:1d:b6:29:a3:a3:73:f9:a5:
                    a4:14:8c:f1:56:5a:62:29:c7:d7:aa:c4:93:cb:a1:
                    c7:e2:a8:88:e4:20:0e:ec:49:ca:d3:e0:90:88:db:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AF:36:B0:91:B4:BF:BA:9F:75:F6:C2:0E:72:63:0E:09:E0:75:13
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lq82sJG0v7qfdfbCDnJjDgngdRM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:78:4c:5c:25:8c:f3:82:69:be:b7:37:a3:6a:41:98:03:df:
         53:08:fc:18:ef:8c:2c:80:69:f5:9b:67:ca:8a:50:c8:e9:cb:
         49:41:cb:9a:e6:ac:99:5f:86:28:34:c7:2d:4c:00:91:37:f6:
         e9:ed:80:aa:43:49:d8:2a:e9:69:bc:6b:34:a4:54:81:d7:19:
         40:ad:c8:7a:69:5c:4c:ed:e1:df:df:6c:12:4b:58:50:0a:bf:
         0e:8b:7b:af:55:a0:20:21:41:0e:26:dc:19:0d:ac:40:f6:15:
         13:39:01:f9:20:c4:f8:9c:d6:ba:58:5d:d3:e7:f7:06:13:6d:
         94:e4:25:38:18:cb:82:46:14:c8:00:b3:04:24:39:e3:df:dd:
         f9:f4:38:4b:6c:0f:5a:4a:32:96:bf:13:15:83:1b:fd:e6:91:
         ff:88:f2:96:33:04:59:fa:f0:c0:93:85:37:21:a9:e9:4c:4e:
         99:6c:0f:e4:2e:5b:a6:0f:8e:5f:9a:6d:83:e3:c5:db:65:7f:
         1a:d3:1f:e7:d5:3f:61:51:11:a9:90:19:83:b3:97:8b:b1:54:
         a0:ac:bb:9d:8a:f3:41:de:0a:e8:db:41:6e:76:31:e9:18:c0:
         e9:0c:3a:1c:7e:43:50:52:66:01:7f:32:b2:2e:5e:78:9f:d5:
         ab:31:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:13 2025 by rpki-client