Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TxQUy-DZyR63Eik0frOBIl0R06c.roa
File:                     TxQUy-DZyR63Eik0frOBIl0R06c.roa (raw, json)
Hash identifier:          qTBUh16R9oEZk41o4MbGAujjO5GQrketk7FRQmHLpSc=
Subject key identifier:   4F:14:14:CB:E0:D9:C9:1E:B7:12:29:34:7E:B3:81:22:5D:11:D3:A7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04BD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TxQUy-DZyR63Eik0frOBIl0R06c.roa
Signing time:             Wed 18 Dec 2024 02:32:22 +0000
ROA not before:           Wed 18 Dec 2024 02:32:22 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.54.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213 (0x4bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:32:22 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=4F1414CBE0D9C91EB71229347EB381225D11D3A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:59:38:5b:e7:a7:df:15:6b:f3:58:67:0c:
                    a9:da:2d:6d:91:b1:d6:cd:54:58:d3:d5:09:66:1c:
                    53:60:d5:81:9d:85:e5:01:60:9c:6a:9c:c9:3c:9b:
                    bf:b5:72:fb:8b:0c:fb:f5:ba:30:1f:a6:0d:89:eb:
                    f0:b2:6c:8e:56:76:73:65:91:00:01:c0:e6:0c:2a:
                    cb:6c:a8:c6:5a:02:b8:a2:f6:5a:3e:9d:d0:45:90:
                    5f:6c:3c:0e:95:ac:83:f4:e6:1f:a0:23:c2:93:ff:
                    1d:b4:f3:0b:02:c8:c8:e4:0a:3a:17:68:69:2f:dc:
                    5c:db:87:35:36:10:9c:7e:12:31:e2:12:28:b9:c1:
                    ba:1a:2d:58:33:12:f2:96:1d:bb:7f:94:4a:a4:d3:
                    ed:b9:0c:86:c1:8a:62:25:b4:4e:ba:2c:e0:5b:96:
                    7c:58:83:b2:13:22:30:4d:50:11:41:fb:99:d0:e2:
                    a2:07:92:ba:3c:92:6e:0e:88:d2:e7:8a:f1:d1:3c:
                    e1:f5:e8:5d:98:22:1a:d7:44:9c:0b:a0:c0:8c:51:
                    b5:da:66:65:ff:c0:cf:b9:b5:9d:c7:ac:3e:40:66:
                    b2:6e:2e:b0:5b:40:6e:84:5a:02:ee:d0:f6:4c:07:
                    bc:5a:91:8b:0e:1e:76:5b:4c:45:f3:c5:0a:e2:02:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:14:14:CB:E0:D9:C9:1E:B7:12:29:34:7E:B3:81:22:5D:11:D3:A7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TxQUy-DZyR63Eik0frOBIl0R06c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.54.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:2f:32:f9:83:e3:a7:ed:00:e0:92:36:f0:7f:7d:0c:42:
         8d:21:0d:62:1a:dd:8d:52:ed:32:7d:24:2f:98:34:6b:06:1f:
         47:ca:21:8f:20:ef:c7:31:21:93:3d:a1:b3:28:7a:b5:2e:15:
         1d:83:04:00:0e:a6:42:97:d1:56:80:02:af:f7:a0:9b:a7:fd:
         7a:d5:b8:f2:54:7e:36:70:b0:9b:2a:3c:15:1f:af:b8:4c:eb:
         c8:6f:3b:e6:3b:7d:a6:f3:8d:d1:5f:b1:57:08:8b:72:82:ed:
         69:48:1b:f0:25:46:a4:6d:27:18:52:15:89:26:ab:f4:bb:00:
         33:91:37:2e:4c:1d:80:a2:55:05:f6:aa:5a:81:1f:a7:c8:04:
         f3:b8:47:4e:f2:2e:05:07:1e:16:24:0b:6e:65:c0:a2:2b:af:
         7b:9d:1e:e4:c9:c7:71:95:27:51:d8:54:41:ec:05:1a:ec:a2:
         35:04:60:58:cb:21:a5:0f:6a:b6:c6:54:6e:5e:f6:43:7b:37:
         21:69:c4:7c:87:f7:11:5c:d2:c8:7a:1d:2c:ba:28:04:0a:75:
         69:af:e1:a1:62:e6:63:f9:45:a3:db:48:c3:44:f2:60:ba:e2:
         56:8a:c6:e2:f4:31:4f:6b:96:91:92:5d:a5:94:a4:f7:f7:24:
         13:fc:dd:93
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjMyMjJaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGMTQxNENCRTBEOUM5
MUVCNzEyMjkzNDdFQjM4MTIyNUQxMUQzQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwHVk4W+en3xVr81hnDKnaLW2RsdbNVFjT1QlmHFNg1YGdheUB
YJxqnMk8m7+1cvuLDPv1ujAfpg2J6/CybI5WdnNlkQABwOYMKstsqMZaArii9lo+
ndBFkF9sPA6VrIP05h+gI8KT/x208wsCyMjkCjoXaGkv3FzbhzU2EJx+EjHiEii5
wboaLVgzEvKWHbt/lEqk0+25DIbBimIltE66LOBblnxYg7ITIjBNUBFB+5nQ4qIH
kro8km4OiNLnivHRPOH16F2YIhrXRJwLoMCMUbXaZmX/wM+5tZ3HrD5AZrJuLrBb
QG6EWgLu0PZMB7xakYsOHnZbTEXzxQriAotzAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUTxQUy+DZyR63Eik0frOBIl0R06cwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1R4UVV5LURaeVI2M0VpazBmck9CSWwwUjA2Yy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9NjANBgkqhkiG9w0BAQsFAAOCAQEArGsvMvmD46ftAOCSNvB/fQxCjSEN
YhrdjVLtMn0kL5g0awYfR8ohjyDvxzEhkz2hsyh6tS4VHYMEAA6mQpfRVoACr/eg
m6f9etW48lR+NnCwmyo8FR+vuEzryG875jt9pvON0V+xVwiLcoLtaUgb8CVGpG0n
GFIViSar9LsAM5E3LkwdgKJVBfaqWoEfp8gE87hHTvIuBQceFiQLbmXAoiuve50e
5MnHcZUnUdhUQewFGuyiNQRgWMshpQ9qtsZUbl72Q3s3IWnEfIf3EVzSyHodLLoo
BAp1aa/hoWLmY/lFo9tIw0TyYLriVorG4vQxT2uWkZJdpZSk9/ckE/zdkw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:31 2025 by rpki-client