Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/V44UEoJLeYGqjL4kIgy0I1M3l3E.roa
File:                     V44UEoJLeYGqjL4kIgy0I1M3l3E.roa (raw, json)
Hash identifier:          LQ1vTy8Ll9LFsE+XsluhhRm8vWL18ncD+uju8+mzr9k=
Subject key identifier:   57:8E:14:12:82:4B:79:81:AA:8C:BE:24:22:0C:B4:23:53:37:97:71
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0541
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/V44UEoJLeYGqjL4kIgy0I1M3l3E.roa
Signing time:             Wed 18 Dec 2024 02:44:20 +0000
ROA not before:           Wed 18 Dec 2024 02:44:20 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:20 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=578E1412824B7981AA8CBE24220CB42353379771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:fb:82:e9:ff:12:fb:dc:74:d4:15:03:5f:
                    84:f5:cc:2d:3e:35:7e:48:5a:00:f5:58:64:cd:81:
                    7b:0e:98:06:20:37:fa:b8:ae:8c:eb:7b:29:83:fc:
                    86:6a:43:11:c1:43:57:f2:50:38:b5:5f:f2:76:36:
                    91:10:ba:4f:5a:9b:ca:ec:8d:d4:f8:93:9b:3d:a9:
                    f9:3b:ad:4b:c0:4d:dd:e7:74:3c:b1:0b:3d:fe:45:
                    37:12:af:fb:b5:d3:d7:19:50:e5:28:43:13:81:90:
                    da:48:fd:76:09:1b:9a:5d:27:75:f8:fb:81:4f:26:
                    9e:95:76:c1:de:b3:9f:e0:9e:0a:17:f3:c7:c7:0f:
                    0a:b6:aa:c6:bd:34:0b:4b:7f:c3:41:3d:c8:ec:f1:
                    92:5d:aa:57:69:9e:f5:fd:3b:d0:2a:17:21:00:9e:
                    70:d9:75:26:d4:57:ab:d3:2f:e2:a5:1d:b4:ea:73:
                    09:40:42:b0:e1:74:44:22:d0:a1:e9:b4:89:a3:2a:
                    92:8c:c0:26:43:12:94:e8:f4:3b:6d:b0:d8:c7:a5:
                    42:9c:ea:0f:49:23:94:e8:51:d0:93:19:ce:c6:ca:
                    b8:fc:0d:cc:a8:53:30:c7:5d:1d:f6:c1:4d:29:8d:
                    cf:8e:16:7c:56:de:4a:f5:68:a4:ed:20:cb:bb:52:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8E:14:12:82:4B:79:81:AA:8C:BE:24:22:0C:B4:23:53:37:97:71
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/V44UEoJLeYGqjL4kIgy0I1M3l3E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:6d:37:f8:17:38:af:8a:83:ee:ac:9c:fe:1a:02:51:ee:b3:
         90:91:81:62:2c:44:7a:49:99:ee:c3:0c:88:f0:61:33:0e:46:
         57:41:35:e8:8a:60:b9:2c:ae:1d:57:fd:19:35:a4:71:ed:72:
         b3:fe:04:ee:16:0b:90:03:eb:77:c2:e7:f6:b0:e8:70:a7:85:
         56:3c:70:a5:11:74:8a:52:d6:1d:af:78:b5:32:8f:93:09:21:
         e5:6e:de:67:ee:7a:d5:44:3b:d2:63:1f:54:9d:36:13:99:fd:
         4e:f7:6d:96:5c:f2:25:60:a9:a6:d8:45:31:9c:4f:bd:7f:a4:
         2d:c3:e2:c1:7e:e4:52:13:8a:4b:5d:d8:5f:a7:cb:69:0f:4d:
         64:40:78:84:77:bb:47:f7:15:c2:a7:19:d4:15:40:2f:e0:ae:
         e8:4d:50:1c:fd:64:d1:a6:fc:a7:72:8a:9a:fd:b3:8f:4e:44:
         7d:ff:3a:9d:46:41:e8:f3:9f:6b:6a:c2:9d:8c:3f:b2:ef:89:
         c3:43:df:7e:ae:8c:af:56:00:83:b8:ce:84:07:70:31:0a:e9:
         e1:42:44:83:44:97:08:d6:fd:48:fd:24:cf:53:31:f1:bc:08:
         9f:32:3d:c6:dd:d2:7f:34:12:d6:15:55:ff:e3:2f:11:4a:47:
         38:65:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:44 2025 by rpki-client