Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/U0xaDJQYHGmJoIi0VvW2X41Pz_0.roa
File:                     U0xaDJQYHGmJoIi0VvW2X41Pz_0.roa (raw, json)
Hash identifier:          +FVyRKxD8Vo9/Z4MypodM7heXx6aJEcXQY9OFxXVLZc=
Subject key identifier:   53:4C:5A:0C:94:18:1C:69:89:A0:88:B4:56:F5:B6:5F:8D:4F:CF:FD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0446
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U0xaDJQYHGmJoIi0VvW2X41Pz_0.roa
Signing time:             Wed 18 Dec 2024 02:22:24 +0000
ROA not before:           Wed 18 Dec 2024 02:22:24 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        124.211.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:22:24 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=534C5A0C94181C6989A088B456F5B65F8D4FCFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b7:19:e8:56:88:3a:64:d2:6e:a9:c2:52:c0:
                    68:d4:fa:40:16:af:87:a4:84:20:53:b5:c0:23:96:
                    20:86:96:d6:9a:e3:5c:f5:a6:68:1e:7c:55:de:7f:
                    4a:1b:0e:42:ce:92:7d:64:bb:68:72:3e:49:21:09:
                    03:94:0c:0c:e1:00:4a:62:ba:04:16:96:6a:8d:9e:
                    5d:6a:a1:c2:c1:a3:f4:a0:10:bc:0a:4e:ba:ed:5f:
                    7d:9e:ca:0c:32:8c:c7:af:fe:ac:d5:50:bc:1f:06:
                    cf:2e:d2:00:79:6e:3f:09:0b:cd:d2:3a:cc:00:2e:
                    69:e1:c7:d7:ff:4c:86:42:e6:b0:65:ad:d6:a0:96:
                    c6:b2:65:31:cc:7f:6d:25:a2:59:1d:9c:5b:92:d8:
                    2a:aa:37:60:72:1f:ed:16:a6:fd:85:c5:72:93:d2:
                    2b:e3:95:85:ac:5d:15:e6:62:fa:5f:9d:be:b0:c3:
                    78:b5:91:ae:99:93:1e:3b:83:a3:2a:f9:c9:2b:97:
                    f6:63:ec:f4:59:6f:c4:a2:b4:97:ef:1e:d3:8f:9a:
                    87:eb:91:4f:ef:a9:49:9f:f2:8b:34:40:2a:30:40:
                    f6:67:9f:e3:87:b1:97:9a:64:66:2c:1b:3d:8f:40:
                    a5:6c:f9:df:24:53:ce:94:7a:15:2c:d9:f2:dc:73:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4C:5A:0C:94:18:1C:69:89:A0:88:B4:56:F5:B6:5F:8D:4F:CF:FD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U0xaDJQYHGmJoIi0VvW2X41Pz_0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:f3:5e:f2:e7:38:e2:3b:ec:c1:2d:50:fb:04:aa:65:5c:
         8a:97:1d:33:49:b0:97:92:d8:12:65:15:72:d7:60:b2:3a:27:
         57:d0:30:01:26:cc:c5:86:41:7c:a4:3d:24:ba:fa:3a:ea:12:
         40:21:91:af:37:cf:06:c7:e8:df:9e:7a:1f:09:86:fa:82:eb:
         16:77:83:f3:4b:41:36:e0:c3:2d:86:11:b4:ff:52:8e:e4:85:
         34:d9:64:00:35:fe:16:52:c3:44:50:98:ac:cc:5a:c5:2d:f7:
         eb:dd:e3:60:9e:74:6c:b2:9e:e7:e9:e2:4c:17:9a:6e:31:3e:
         d7:6b:52:f7:f9:06:df:06:8e:93:cd:1e:04:d1:6f:b2:44:9f:
         de:8e:61:f0:0f:1b:38:fb:f8:75:19:0a:07:03:ff:1d:c3:c7:
         98:cf:ec:95:a2:83:77:3b:d3:1d:54:74:31:ba:04:a1:23:a6:
         50:12:15:24:f7:b9:8b:69:3f:6f:2a:b8:82:73:60:ad:4e:e8:
         f1:ee:7d:bf:c5:fe:89:4a:d8:78:c6:86:ff:7a:50:8e:04:cf:
         c1:81:1a:2d:02:04:e3:a2:74:c7:9f:79:27:06:d5:2e:64:13:
         6a:f2:a3:7a:fd:44:01:da:4c:f2:80:e8:91:07:c1:0e:33:9a:
         27:4f:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:31 2025 by rpki-client