Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MeaTNUR035OZRo8gTnaEk8k4Sx8.roa
File:                     MeaTNUR035OZRo8gTnaEk8k4Sx8.roa (raw, json)
Hash identifier:          9scgye0BodXUSDPasKU7lCw7qa4lv+QOnoLfySkBFQ8=
Subject key identifier:   31:E6:93:35:44:74:DF:93:99:46:8F:20:4E:76:84:93:C9:38:4B:1F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       042D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MeaTNUR035OZRo8gTnaEk8k4Sx8.roa
Signing time:             Wed 18 Dec 2024 02:22:15 +0000
ROA not before:           Wed 18 Dec 2024 02:22:15 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        175.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:15 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=31E693354474DF9399468F204E768493C9384B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:c7:f1:d1:f3:6c:7d:88:b9:aa:0b:e4:ad:
                    bb:b0:62:6f:47:ba:b0:96:79:bd:0a:28:d8:de:a3:
                    03:be:68:6d:7c:a8:c8:8d:3f:aa:ab:8f:5f:46:3b:
                    d2:1c:19:96:58:b1:ad:e1:de:8e:55:92:90:53:f7:
                    f9:74:ad:ab:30:fb:ad:c1:9b:43:a0:7d:f5:c8:2b:
                    1a:c6:cf:ba:e9:05:2a:1f:5c:c7:e6:eb:c5:a1:43:
                    6a:5c:63:9f:f5:c0:15:30:5b:e1:de:14:d8:ca:fd:
                    5d:de:99:5e:01:7a:8c:25:e6:87:f5:b1:29:87:85:
                    d8:22:60:45:cf:65:4b:85:a1:e9:e0:a0:f7:99:fa:
                    a2:40:a3:f0:04:24:fd:f5:0d:16:67:d6:af:a9:02:
                    2d:b9:39:9d:5c:31:30:19:a3:74:59:cb:c2:b4:bd:
                    48:2c:28:62:89:64:1f:ad:23:f6:55:04:da:ea:2a:
                    84:04:1b:cf:ee:6c:6d:a4:77:e9:a6:50:b0:be:b8:
                    8e:f8:f5:93:ad:45:46:2e:38:f9:2d:3b:69:4d:8a:
                    ab:77:78:b1:1f:62:d0:38:ee:4a:de:39:e8:d6:66:
                    03:30:7c:5f:95:25:95:d3:18:2e:70:6d:62:dd:e9:
                    7f:80:60:22:66:34:aa:6b:02:f6:a0:7a:d4:52:34:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E6:93:35:44:74:DF:93:99:46:8F:20:4E:76:84:93:C9:38:4B:1F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MeaTNUR035OZRo8gTnaEk8k4Sx8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:ce:66:d0:43:d3:21:75:dc:c1:b0:be:6d:a6:b1:60:58:
         03:12:c0:7f:62:29:1d:91:f2:1a:71:0f:8e:a0:c5:38:42:16:
         fb:b5:1e:3c:dc:dd:32:0d:ea:d8:8c:65:b1:8d:89:3c:79:aa:
         95:0e:7c:bc:78:97:46:37:b3:c0:b1:85:c0:5a:88:f6:0c:1f:
         2b:74:ad:54:76:20:05:ea:56:86:28:48:fa:79:b6:cf:52:92:
         14:c1:94:45:92:a8:89:cb:be:34:bd:e9:17:0a:56:12:ea:1c:
         48:72:e3:f4:ce:c7:80:c6:35:a5:f4:77:bf:3a:e3:8c:53:cb:
         01:39:70:91:42:4a:38:8e:5a:cb:76:f8:b6:de:a9:2a:bb:b4:
         06:e0:65:52:fe:a9:b0:54:fc:86:2f:02:ee:ae:35:4f:e5:03:
         e0:22:d0:58:31:d7:7c:91:31:b9:d7:57:a4:44:dd:92:4f:24:
         88:73:1b:ab:74:6a:d2:ed:03:b0:dc:98:32:48:b4:61:3e:39:
         46:6a:65:8a:3d:49:39:2f:60:13:92:70:66:d2:8f:bf:46:d8:
         ad:e0:05:01:dc:0d:25:c4:bd:67:21:39:5f:5c:80:c8:31:41:
         3f:b3:4d:c6:60:b0:4b:2d:88:b5:ed:17:ab:b3:5b:c4:d8:08:
         3b:4d:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:58 2025 by rpki-client