Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TA4br1RRYyAlgiRnj3Z_UesztYg.roa
File:                     TA4br1RRYyAlgiRnj3Z_UesztYg.roa (raw, json)
Hash identifier:          z3dxkU4ICUNvy9zCmghjAGqgZLP9xFW7ly43gQBw3/M=
Subject key identifier:   4C:0E:1B:AF:54:51:63:20:25:82:24:67:8F:76:7F:51:EB:33:B5:88
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04C7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TA4br1RRYyAlgiRnj3Z_UesztYg.roa
Signing time:             Wed 18 Dec 2024 02:32:26 +0000
ROA not before:           Wed 18 Dec 2024 02:32:26 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        113.157.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:32:26 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=4C0E1BAF54516320258224678F767F51EB33B588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:82:3f:e1:a4:0d:22:84:3f:60:fa:5b:1d:
                    94:88:67:19:6c:a7:b5:86:97:6f:10:59:42:1a:67:
                    17:78:81:ca:4f:d8:04:23:18:6b:fd:89:c6:8d:b7:
                    ff:2a:9c:76:e6:7f:16:72:93:13:d8:6c:66:22:dd:
                    46:83:70:13:77:6e:77:c1:92:e9:de:c6:b2:62:8a:
                    22:ef:6e:8c:36:49:ff:51:67:c5:0d:e2:f1:a1:55:
                    04:73:db:0f:35:da:c1:9d:78:96:b3:31:3b:dd:6a:
                    b7:58:39:1d:2d:c3:47:9d:ad:16:6c:a6:1c:88:99:
                    ee:c6:86:b9:55:97:18:46:23:a4:a9:d6:4d:e2:6c:
                    ce:c3:f5:85:69:96:ba:5d:75:d3:1d:26:d9:60:7a:
                    d3:7d:35:25:c5:86:0a:e8:d5:e1:0d:0e:cf:0c:a0:
                    e0:2d:66:5d:d2:ef:40:7d:34:88:4b:90:d8:78:da:
                    c6:31:a0:c9:82:1e:67:b9:06:0d:6e:6a:7b:78:bf:
                    0c:e0:9e:3e:4b:c2:ed:8b:14:51:37:a6:12:8e:01:
                    68:94:38:78:33:43:4f:61:71:4a:6b:89:2a:a2:60:
                    5b:71:e8:fa:59:23:99:76:4d:ea:49:9d:60:e7:a4:
                    a2:7b:08:ac:59:d6:f6:6a:2e:0f:1b:ce:2b:ec:37:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0E:1B:AF:54:51:63:20:25:82:24:67:8F:76:7F:51:EB:33:B5:88
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TA4br1RRYyAlgiRnj3Z_UesztYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:9b:9f:10:c8:19:86:73:ea:f1:a1:eb:27:bf:01:09:87:73:
         ae:a7:c7:f0:f0:2e:68:e3:26:50:ab:4a:74:c9:c0:c9:da:1a:
         b6:82:b0:25:23:df:3c:6c:f8:9e:00:9e:3c:c8:4e:70:80:fe:
         40:2d:4f:35:71:7c:7d:a8:df:d5:0d:ff:27:e5:60:5d:59:e4:
         93:26:bd:40:74:f4:b1:5f:50:cd:6c:4b:62:ca:35:bd:a9:2f:
         54:9a:15:62:63:cd:ab:25:7f:60:61:2f:ca:8d:9b:04:23:36:
         14:98:b4:a0:52:50:5b:20:53:9c:25:8e:ba:60:42:b1:9e:2f:
         3c:55:c1:6c:76:61:13:7d:87:2e:92:1c:72:0a:50:6f:73:9e:
         d3:65:1e:a2:1f:9a:87:35:42:cd:9d:85:f8:79:01:19:a9:63:
         4c:7f:00:e9:5e:ca:a0:6a:42:1a:5a:ea:6d:95:07:60:e4:3f:
         01:cc:41:e1:55:28:f3:f3:ce:99:d6:6e:d0:16:da:2b:f5:12:
         c3:62:bf:07:27:e5:31:d3:0b:02:f1:61:31:58:9c:9f:f4:6e:
         34:02:1d:aa:49:86:5e:de:95:50:79:7b:56:b1:9a:b0:91:ed:
         84:d2:22:0e:ea:e2:24:b9:bd:62:bc:c9:62:90:92:97:41:b5:
         61:c8:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:27 2025 by rpki-client