Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/N3uj1Kx8iMWfiTB8AA_lx98waAM.roa
File:                     N3uj1Kx8iMWfiTB8AA_lx98waAM.roa (raw, json)
Hash identifier:          lQr0Io1BMJGl9i3oHnZDTEoYsqn6DqGfngaxLgwcCMg=
Subject key identifier:   37:7B:A3:D4:AC:7C:88:C5:9F:89:30:7C:00:0F:E5:C7:DF:30:68:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0426
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N3uj1Kx8iMWfiTB8AA_lx98waAM.roa
Signing time:             Wed 18 Dec 2024 02:22:11 +0000
ROA not before:           Wed 18 Dec 2024 02:22:11 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        124.214.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:11 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=377BA3D4AC7C88C59F89307C000FE5C7DF306803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:11:69:98:72:fb:bd:1b:8a:6f:45:30:33:
                    19:18:be:b2:87:00:61:b2:41:29:46:42:e4:2a:55:
                    0b:94:7c:88:b9:97:91:f2:d5:d6:09:da:7c:22:02:
                    fa:f2:2e:18:ce:f0:82:bd:c6:a1:02:8c:86:bd:3f:
                    c7:6e:12:58:f2:b3:01:b9:cc:31:dd:8d:e9:47:fe:
                    18:f1:f6:44:95:d8:25:bb:8f:3a:50:5a:a2:8c:2e:
                    fa:87:17:44:86:4c:18:fa:98:af:aa:6d:be:64:5c:
                    04:04:00:12:f7:e7:40:9b:17:2b:6e:9f:da:b3:4e:
                    99:a8:76:54:de:7e:15:0d:83:b2:10:57:5a:15:bb:
                    db:3d:3c:36:47:92:68:38:b2:26:b1:d2:9c:1a:b4:
                    39:fd:b5:7e:17:94:c1:1b:b6:2f:69:15:55:0d:9d:
                    25:17:73:79:22:e7:1e:a2:fb:52:e8:f3:3e:c4:95:
                    f5:23:39:4c:f9:f3:6d:a3:fd:0e:15:ba:3f:83:fb:
                    a9:e5:84:1e:33:e9:96:36:d3:04:fb:df:04:a4:fe:
                    a8:ac:a9:72:b2:6f:44:d5:05:10:e9:56:43:2b:d6:
                    71:49:f8:56:0c:08:6d:c8:ca:27:19:a9:97:1a:2d:
                    b3:c1:02:de:1b:a3:41:9f:aa:9a:9f:ce:7a:6b:64:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:A3:D4:AC:7C:88:C5:9F:89:30:7C:00:0F:E5:C7:DF:30:68:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N3uj1Kx8iMWfiTB8AA_lx98waAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:28:b2:5f:cb:12:7b:11:2b:2b:22:13:8c:0c:a4:bf:60:e6:
         a9:8f:95:6c:67:8c:bd:0d:76:da:13:6f:c5:e4:82:24:e2:b5:
         40:06:b1:36:b4:8d:09:77:28:40:db:be:69:d5:1b:bb:a0:d5:
         a2:c5:59:8b:31:da:2d:f2:b0:0a:a2:0f:79:8a:6c:d1:db:e3:
         94:34:58:6e:60:cd:76:4b:6b:0a:63:b8:cd:a1:4b:51:de:4f:
         fb:ff:c1:cf:40:55:c7:69:6c:a7:3f:95:bc:88:3a:d1:8d:10:
         b1:39:b9:89:f3:76:c7:22:d2:2c:fc:e0:a2:d0:9f:2f:06:6e:
         99:c7:17:e9:70:fe:2d:f3:21:14:0f:25:02:d0:f6:15:49:ae:
         eb:e9:52:3c:6e:83:4e:01:e4:07:22:d6:89:c0:06:61:6d:dd:
         2d:04:64:45:40:bd:c9:e6:2b:04:b5:6b:74:d1:42:3d:da:ca:
         5c:7d:42:8f:e1:0f:e4:77:45:44:50:aa:a6:23:b8:26:36:c6:
         d2:04:6b:67:d2:5d:b3:1f:f2:9a:fe:f3:b6:12:0f:1a:f4:a2:
         96:5d:24:7d:9b:39:75:bf:89:ec:f7:36:c3:e6:74:41:32:0c:
         bb:ff:87:34:02:76:28:29:6c:29:c6:05:50:4e:73:7f:2e:16:
         1c:74:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:36 2025 by rpki-client