Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TaLKmiscOk8jpC7K4eILaW6-yTM.roa
File:                     TaLKmiscOk8jpC7K4eILaW6-yTM.roa (raw, json)
Hash identifier:          +RqqAicDWo12bFHroQVvntlr/3eKbU0WDegmwK/dJ/c=
Subject key identifier:   4D:A2:CA:9A:2B:1C:3A:4F:23:A4:2E:CA:E1:E2:0B:69:6E:BE:C9:33
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0448
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TaLKmiscOk8jpC7K4eILaW6-yTM.roa
Signing time:             Wed 18 Dec 2024 02:22:25 +0000
ROA not before:           Wed 18 Dec 2024 02:22:25 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        111.111.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 14:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:25 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=4DA2CA9A2B1C3A4F23A42ECAE1E20B696EBEC933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:df:44:3e:9e:d7:d1:b6:36:d5:de:0b:bf:
                    0d:6a:35:c2:bd:dc:dc:11:8b:c5:fa:b5:22:9f:58:
                    c3:92:c7:ef:6f:9d:8e:24:f5:f2:92:11:75:25:a6:
                    6c:61:6c:05:1a:4b:09:85:62:61:bd:69:a5:f0:f8:
                    18:7e:22:b3:3b:80:1b:f1:4b:cf:0f:64:04:81:7f:
                    65:8f:b1:36:65:37:d5:79:2d:ae:84:9b:55:a5:8d:
                    84:3e:25:99:36:dc:8f:2d:f0:1c:e6:69:44:b2:9e:
                    ce:6e:f5:ad:2e:7f:77:7a:2b:96:c3:f3:db:88:90:
                    52:a6:7d:68:08:94:5a:69:93:d7:c8:96:e8:bf:26:
                    ab:76:fc:b9:61:0f:bb:5c:9d:fa:5a:5a:dd:8c:9a:
                    1f:d5:3b:e3:c8:75:1b:10:a6:bb:17:db:d4:9a:ff:
                    19:82:ad:1d:92:a9:71:da:26:3b:97:0c:7b:5a:2b:
                    19:fd:9b:de:77:cd:43:05:0a:67:90:5b:d9:0d:d1:
                    67:88:26:41:0c:1f:cf:a5:59:81:52:43:77:fa:ad:
                    3d:b8:59:66:97:2b:fe:e6:ae:a7:86:2a:43:d7:9d:
                    62:7f:41:34:90:76:77:af:41:44:9b:b1:4c:09:de:
                    57:1d:48:9d:ec:ff:92:ce:cc:76:19:04:38:79:33:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A2:CA:9A:2B:1C:3A:4F:23:A4:2E:CA:E1:E2:0B:69:6E:BE:C9:33
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TaLKmiscOk8jpC7K4eILaW6-yTM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.111.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:24:79:31:5f:dd:9b:6a:a2:0f:14:10:c3:b5:96:eb:e9:37:
         58:34:c6:62:24:41:74:22:4a:a4:f6:39:12:bf:8d:6e:6a:b1:
         ce:41:6c:8f:8f:ed:a4:56:de:52:e3:d9:4e:47:60:3c:09:98:
         67:dc:f2:2e:ed:ec:a0:32:40:88:89:e4:51:ab:88:b6:ba:bd:
         43:33:87:9b:77:b9:c2:0e:20:de:27:ae:38:78:ce:37:ba:5f:
         18:47:69:18:95:a0:a4:6d:fa:7c:ce:1f:c8:75:d6:8e:cb:6e:
         79:e8:34:9c:b2:46:a2:27:08:c4:d5:29:28:16:01:f0:0b:20:
         9d:b7:3d:af:06:7f:98:48:fc:3e:1a:b3:fd:a0:73:26:7c:7d:
         b3:81:24:66:68:bd:48:b4:e3:98:55:8b:7b:21:fc:9b:b2:aa:
         63:5e:0d:bc:1a:08:68:57:ec:f5:5d:6f:82:7f:cb:37:44:9a:
         aa:e8:78:0f:72:9b:ff:1a:75:26:d1:4c:60:1b:d4:14:30:b5:
         8d:03:fd:75:f1:96:63:a2:0b:4f:26:9c:af:50:1e:f5:f6:e6:
         d4:e3:7a:74:52:dc:ba:6a:1b:21:99:6f:0a:54:f0:6e:4a:fc:
         0d:66:06:7e:1a:2d:50:27:05:c2:df:b0:3f:91:05:3a:9d:73:
         d0:df:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:34:04 2025 by rpki-client