Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/VHnbQzZWksIsoAjp-m33jUwiVq4.roa
File:                     VHnbQzZWksIsoAjp-m33jUwiVq4.roa (raw, json)
Hash identifier:          c0MwzJhH/5UbhGyWXZ9aTjxwgtFucVfehj0rkkQtRaY=
Subject key identifier:   54:79:DB:43:36:56:92:C2:2C:A0:08:E9:FA:6D:F7:8D:4C:22:56:AE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0542
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VHnbQzZWksIsoAjp-m33jUwiVq4.roa
Signing time:             Wed 18 Dec 2024 02:44:21 +0000
ROA not before:           Wed 18 Dec 2024 02:44:21 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        211.10.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:21 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=5479DB43365692C22CA008E9FA6DF78D4C2256AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:1f:01:58:45:b1:a3:95:e4:7b:c7:ca:19:
                    92:83:0f:1b:bc:ca:01:aa:0e:95:ed:a5:29:d5:3f:
                    7f:76:43:9a:09:85:b1:6b:87:4f:09:ca:ed:ab:ed:
                    89:61:ae:17:a7:0b:67:e6:40:c7:49:5c:ac:cc:87:
                    dd:02:4d:91:5d:0c:f0:dc:a2:39:a8:bf:fb:09:c2:
                    8d:80:69:8f:28:2a:ed:10:31:f6:bd:f4:0b:ca:ea:
                    11:67:65:ea:c3:24:ed:6c:b6:c4:19:37:f8:70:a7:
                    a0:0b:9e:6c:af:87:2a:cd:9e:85:07:83:cc:d9:98:
                    3f:78:5f:98:59:ef:17:27:af:ec:69:63:ff:ea:de:
                    a1:2e:05:72:b0:52:46:3a:b9:4c:85:b1:86:06:95:
                    a7:8b:50:a9:4e:70:22:a2:71:5c:39:fd:71:67:26:
                    78:ca:b8:ea:45:a3:b5:66:93:05:e9:e1:c5:aa:57:
                    f7:cd:f3:c1:f6:f6:f7:9e:8b:01:81:b5:12:58:d6:
                    ea:a9:e6:d5:4a:87:a0:ed:86:5c:28:d9:36:6e:f7:
                    20:cc:9a:c1:37:68:90:11:0c:58:11:44:c1:7a:cc:
                    70:a0:b0:5c:a3:c3:7e:10:b3:a5:44:99:29:4d:ad:
                    91:ae:53:a7:e0:97:94:e9:60:b4:86:be:d4:68:d3:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:79:DB:43:36:56:92:C2:2C:A0:08:E9:FA:6D:F7:8D:4C:22:56:AE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VHnbQzZWksIsoAjp-m33jUwiVq4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d7:a8:d9:0e:67:f2:4e:80:21:bd:ce:83:a6:36:a0:bb:d4:
         e6:a7:7d:c3:97:35:f1:2d:58:76:a8:99:77:2f:26:21:30:f0:
         76:2c:7c:6e:3a:ae:19:5e:5b:b9:5c:7c:c8:95:cf:3f:99:41:
         1f:d0:2e:7a:ce:98:49:33:37:1e:55:c7:54:23:04:c2:c0:26:
         e7:fd:c7:16:75:4d:77:ac:17:79:a6:14:6a:4c:b3:a9:66:8f:
         6e:8e:9e:4d:e5:c7:d6:5f:b7:c3:eb:1d:ee:d3:53:7d:02:7b:
         42:1b:83:e3:4b:9b:bd:bb:82:95:4c:bc:42:d4:65:20:bc:ee:
         e6:74:9f:7f:e9:9c:b5:50:d8:b5:8d:20:d6:52:07:77:36:80:
         d5:1c:2e:2d:e4:6b:46:60:96:6b:ad:8e:f9:71:9d:b2:6d:4f:
         bf:de:92:99:fd:d4:a2:f4:5f:48:6f:7e:0e:38:87:ab:5d:1d:
         b7:cb:c9:24:97:1c:de:a4:ee:5f:75:4e:28:c3:b3:b1:de:e5:
         d6:16:42:42:67:1c:13:f9:e8:b8:47:ee:50:d9:b8:35:61:e7:
         c8:b8:db:e7:e8:3b:81:1b:d4:fe:f0:2a:1c:82:24:ce:d1:ff:
         b9:c0:5f:dd:0f:40:cc:c0:9e:ba:5d:a1:fc:40:cc:06:c6:dc:
         47:4e:5d:1e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQ0MjFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU0NzlEQjQzMzY1Njky
QzIyQ0EwMDhFOUZBNkRGNzhENEMyMjU2QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2fx8BWEWxo5Xke8fKGZKDDxu8ygGqDpXtpSnVP392Q5oJhbFr
h08Jyu2r7YlhrhenC2fmQMdJXKzMh90CTZFdDPDcojmov/sJwo2AaY8oKu0QMfa9
9AvK6hFnZerDJO1stsQZN/hwp6ALnmyvhyrNnoUHg8zZmD94X5hZ7xcnr+xpY//q
3qEuBXKwUkY6uUyFsYYGlaeLUKlOcCKicVw5/XFnJnjKuOpFo7VmkwXp4cWqV/fN
88H29veeiwGBtRJY1uqp5tVKh6Dthlwo2TZu9yDMmsE3aJARDFgRRMF6zHCgsFyj
w34Qs6VEmSlNrZGuU6fgl5TpYLSGvtRo0yKxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVHnbQzZWksIsoAjp+m33jUwiVq4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1ZIbmJRelpXa3NJc29BanAtbTMzalV3aVZxNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADTCoUwDQYJKoZIhvcNAQELBQADggEBAHXXqNkOZ/JOgCG9zoOmNqC71Oan
fcOXNfEtWHaomXcvJiEw8HYsfG46rhleW7lcfMiVzz+ZQR/QLnrOmEkzNx5Vx1Qj
BMLAJuf9xxZ1TXesF3mmFGpMs6lmj26Onk3lx9Zft8PrHe7TU30Ce0Ibg+NLm727
gpVMvELUZSC87uZ0n3/pnLVQ2LWNINZSB3c2gNUcLi3ka0ZglmutjvlxnbJtT7/e
kpn91KL0X0hvfg44h6tdHbfLySSXHN6k7l91TijDs7He5dYWQkJnHBP56LhH7lDZ
uDVh58i42+foO4Eb1P7wKhyCJM7R/7nAX90PQMzAnrpdofxAzAbG3EdOXR4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:27 2025 by rpki-client