Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Udas8VXuhkWzAsGaJ5Ur-qFE8x0.roa
File:                     Udas8VXuhkWzAsGaJ5Ur-qFE8x0.roa (raw, json)
Hash identifier:          l0f6uBKDbq2CDMHFLCq4yI2rbem+5H5MAHPGQklbi5I=
Subject key identifier:   51:D6:AC:F1:55:EE:86:45:B3:02:C1:9A:27:95:2B:FA:A1:44:F3:1D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       056C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Udas8VXuhkWzAsGaJ5Ur-qFE8x0.roa
Signing time:             Wed 18 Dec 2024 03:00:54 +0000
ROA not before:           Wed 18 Dec 2024 03:00:54 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.143.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 03:00:54 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=51D6ACF155EE8645B302C19A27952BFAA144F31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:7b:34:cd:73:09:99:29:ca:dc:03:a9:0c:
                    34:28:0a:d5:72:dc:f7:0a:62:2d:c5:3b:a9:44:06:
                    ce:15:ab:58:d0:5b:c4:24:9d:5e:06:c0:91:75:e9:
                    c1:97:50:f2:f6:0e:a2:5b:9c:bf:1e:f0:7f:68:63:
                    3b:89:9c:70:03:82:d7:9c:83:d9:76:b7:84:c9:91:
                    50:9c:fa:d8:48:e2:74:5d:b2:bd:42:0e:cb:3d:fa:
                    61:fb:f2:8f:be:3c:1a:02:43:4e:27:a8:9e:cf:45:
                    6d:18:22:51:1a:37:50:2b:fa:eb:fe:41:b5:fe:7b:
                    ff:17:2f:14:ac:5e:6b:eb:6d:31:ff:fc:19:fd:c2:
                    b0:d3:1b:53:b5:bd:02:68:bb:2f:f6:81:10:b7:9f:
                    31:b0:36:0d:ea:79:a0:f4:6d:8e:ce:0f:4a:64:f0:
                    3b:2d:2a:6c:e0:6c:95:de:94:46:fe:44:6a:00:f3:
                    90:34:09:87:b3:62:74:9c:57:cc:03:b1:a9:1a:f3:
                    23:23:4a:45:54:ea:43:aa:f7:a8:3c:97:bb:c6:fc:
                    8f:b2:20:e5:5f:83:73:26:7d:38:17:89:8f:3d:ed:
                    37:25:aa:64:2f:68:87:39:60:1c:0e:ee:11:91:44:
                    b1:51:a4:89:d6:0b:63:d7:ed:d3:8f:9e:09:c5:94:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D6:AC:F1:55:EE:86:45:B3:02:C1:9A:27:95:2B:FA:A1:44:F3:1D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Udas8VXuhkWzAsGaJ5Ur-qFE8x0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:28:6a:b4:ef:82:f4:d0:a6:b7:4c:d7:82:27:eb:e6:f0:
         aa:74:c3:9d:9f:3d:58:06:76:e0:dc:59:eb:ff:2f:56:48:cf:
         8e:1d:4c:62:9e:00:93:67:39:3f:70:88:5d:74:19:27:c2:e7:
         77:cb:a0:54:53:d1:8b:87:c6:87:da:e8:00:d5:21:9f:0d:89:
         43:c2:8b:78:43:11:65:c8:4c:c4:04:dc:d7:57:60:2a:0e:ee:
         cc:74:91:7d:46:6a:6a:f9:e7:ee:55:5c:3f:2d:df:b9:ef:b8:
         89:4c:b5:d1:13:33:cd:4e:4c:64:c8:bd:13:2e:bf:b4:69:b0:
         c1:ea:ca:5a:fe:43:34:9b:f6:2c:35:a2:b4:9b:90:cf:85:0f:
         7a:6b:8b:8f:2f:45:f7:84:ee:84:f4:5d:26:bc:39:91:90:97:
         a8:5a:b8:f2:30:40:47:30:b9:d1:28:30:da:f3:43:92:33:c9:
         92:59:a3:12:ff:96:8c:0d:16:d4:3f:bc:bd:0f:b9:fa:4b:cc:
         76:36:56:f3:ec:92:c2:5b:cb:3d:c4:a2:83:12:28:d1:b2:b3:
         4a:8f:83:e8:3a:76:20:79:bf:37:95:a9:71:f2:74:c8:67:5c:
         a6:42:8d:31:7c:8a:ad:a1:6c:1c:28:11:2e:24:c2:5c:84:db:
         b8:4f:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:07 2025 by rpki-client