Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/V_8n4PmkKTLcQvcD6OcCcQJdfak.roa
File:                     V_8n4PmkKTLcQvcD6OcCcQJdfak.roa (raw, json)
Hash identifier:          DliKrDIAiXn88a7sNvF6WN3ak2uEWgriHqO9rnjcREw=
Subject key identifier:   57:FF:27:E0:F9:A4:29:32:DC:42:F7:03:E8:E7:02:71:02:5D:7D:A9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0504
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/V_8n4PmkKTLcQvcD6OcCcQJdfak.roa
Signing time:             Wed 18 Dec 2024 02:40:12 +0000
ROA not before:           Wed 18 Dec 2024 02:40:12 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.229.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:40:12 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=57FF27E0F9A42932DC42F703E8E70271025D7DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:0c:14:48:ab:cd:35:ea:3e:97:be:d2:ba:
                    4d:21:15:d4:49:eb:9c:12:29:3e:39:40:47:7a:64:
                    a3:c7:05:f6:e4:9e:5a:71:8d:32:db:3d:e1:03:37:
                    eb:e2:e6:75:6c:0f:e8:00:89:0d:b8:e0:0d:62:bc:
                    7e:88:b8:42:03:56:d5:09:14:69:0e:79:b2:b6:59:
                    a9:9b:2a:66:88:c1:31:db:e6:c0:8d:65:a1:40:d8:
                    dc:7f:58:23:fa:ff:58:36:70:c0:03:a6:86:ce:f1:
                    37:c1:7c:48:a7:59:0a:65:fb:8e:bd:92:c2:a6:63:
                    eb:fd:77:2d:74:75:f0:50:94:3a:be:26:ca:ba:96:
                    27:26:dc:5f:48:77:31:e4:69:1d:06:2c:c5:fa:2c:
                    c3:6c:de:bd:18:ba:41:c8:2d:55:b6:7e:d0:03:c0:
                    d0:aa:84:fa:c3:5e:4b:5e:ea:7f:c2:2d:05:7e:4a:
                    30:3f:9c:a6:43:6c:93:d8:ee:4f:85:02:da:48:ee:
                    a4:a6:c3:65:b6:4f:bb:9b:b8:fa:b8:c1:7f:e2:f0:
                    da:c0:40:a5:39:3a:d8:b1:5c:7e:17:3a:1b:f1:76:
                    1d:63:f7:fc:5c:43:7c:74:f4:c9:02:83:8c:fe:42:
                    c9:41:4b:ac:d5:c6:64:f9:97:ba:22:dc:f0:33:e5:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:27:E0:F9:A4:29:32:DC:42:F7:03:E8:E7:02:71:02:5D:7D:A9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/V_8n4PmkKTLcQvcD6OcCcQJdfak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:a5:dd:7e:f7:ba:54:1a:7a:a5:1a:a6:0a:7f:6c:f7:11:
         15:c9:5f:ce:e1:7e:96:93:9f:50:3d:37:91:11:46:b6:31:3b:
         c9:7c:39:1f:29:b8:fc:cd:fb:19:66:88:39:99:56:31:c7:5b:
         1b:f2:bb:87:a8:45:bb:59:7e:70:fc:90:2c:51:95:91:36:3e:
         00:1b:42:fa:1b:ee:0c:ab:12:8e:90:e9:a5:6c:64:91:11:ad:
         03:43:f5:84:29:47:e8:68:6c:0f:ca:44:71:08:ca:c0:ff:a5:
         d5:fc:c8:63:3c:14:61:84:62:bd:54:47:76:da:a0:41:63:90:
         7e:29:2b:f1:9e:7e:55:81:50:cb:ca:62:41:e6:0c:34:30:81:
         7d:9f:14:f6:d4:a7:58:bb:c9:75:5a:12:7a:3b:5e:b7:79:7a:
         3e:59:c7:51:56:2c:5f:2f:cd:58:da:b6:72:79:9b:99:63:65:
         a1:97:5e:ff:05:cc:ee:ca:fd:be:69:48:46:38:3b:e8:cd:a7:
         93:7a:a3:1f:fe:36:7a:34:a7:99:da:79:01:5e:9d:a5:a0:b4:
         01:cf:8a:76:bb:42:a2:a0:a7:6e:62:45:41:4a:bf:c3:5d:f2:
         d6:dc:ba:ad:ca:5d:90:0b:da:f6:28:9c:7d:4d:0b:f8:b9:0b:
         21:e2:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:49:52 2025 by rpki-client