Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/a_8rBjQHYFXBpl51U0kNani7-P0.roa
File:                     a_8rBjQHYFXBpl51U0kNani7-P0.roa (raw, json)
Hash identifier:          NtCSbLpxyXQF0qPcB3UIDZQJITgSY4skVUaHbA9Pd40=
Subject key identifier:   6B:FF:2B:06:34:07:60:55:C1:A6:5E:75:53:49:0D:6A:78:BB:F8:FD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04D3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/a_8rBjQHYFXBpl51U0kNani7-P0.roa
Signing time:             Wed 18 Dec 2024 02:36:59 +0000
ROA not before:           Wed 18 Dec 2024 02:36:59 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        61.215.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:36:59 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=6BFF2B0634076055C1A65E7553490D6A78BBF8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:f4:b6:19:ab:47:05:5c:05:3d:03:e1:30:
                    85:54:1e:3d:55:5e:d7:f0:46:4a:d6:40:db:98:1d:
                    c9:de:bb:7c:0d:d0:c7:db:95:28:63:1e:e6:c3:1e:
                    c8:80:08:15:c9:79:5a:28:54:6d:b4:8c:cc:7b:90:
                    8b:ff:77:e3:c8:95:b8:cb:51:db:d9:0d:c1:bf:1f:
                    c9:ab:3e:75:c6:5c:b8:08:68:00:7a:36:ce:02:29:
                    da:69:1d:2d:d6:05:c8:8b:68:70:c2:b3:f0:fe:65:
                    1f:db:ba:61:fe:a3:ca:ce:b3:b2:ea:c8:e5:41:0b:
                    41:02:39:94:96:25:e4:80:ea:8c:2c:04:98:f6:38:
                    db:32:dc:4b:d4:9c:83:bb:bc:c2:6e:95:78:97:16:
                    19:cf:d4:73:d8:d6:60:eb:c5:96:fb:ec:8a:34:d6:
                    4c:2d:c8:f5:b4:94:40:c8:9d:84:8c:66:49:26:2b:
                    28:19:4c:0a:1e:d9:af:34:9e:f2:1e:ec:5b:a0:f1:
                    09:3f:65:39:b2:bc:35:38:6a:4a:74:83:a2:64:2e:
                    1b:f6:12:85:b7:f1:c7:f8:dc:0b:38:a0:1c:71:60:
                    d1:a2:a3:5f:b7:96:32:2e:4a:5d:91:92:9e:09:b1:
                    7a:0d:5c:9f:29:dd:cf:38:79:9b:44:25:70:30:42:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FF:2B:06:34:07:60:55:C1:A6:5E:75:53:49:0D:6A:78:BB:F8:FD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/a_8rBjQHYFXBpl51U0kNani7-P0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ac:98:5c:4a:b2:73:29:af:9a:83:30:5d:04:bf:8b:36:9c:9c:
         3e:bf:35:48:6a:8f:10:b3:5b:fb:b2:3d:a4:fa:21:0d:23:48:
         99:cf:8b:7a:d6:9b:43:8d:39:f8:bc:31:af:fa:55:06:86:26:
         dc:31:c6:f9:00:d8:cf:0d:7e:33:ae:06:bb:00:1c:86:b7:62:
         de:da:cc:55:a2:f5:72:56:39:38:1f:79:ca:70:e0:54:bb:03:
         e0:8f:a0:9e:32:f2:48:18:98:52:bb:47:78:12:fb:ae:60:db:
         63:dd:5d:77:1a:2e:8f:2c:34:f5:25:01:51:f7:d4:70:2e:f0:
         44:09:73:1f:0f:56:44:24:5c:f2:e4:a9:23:25:c6:ab:fa:19:
         db:85:00:d1:d8:8d:79:bb:b8:63:0d:85:ec:02:ed:49:d5:0d:
         5e:a8:7c:bf:f2:7b:5b:3a:c5:a2:4b:e4:06:5c:f0:00:5e:ff:
         cf:a1:d1:f7:02:b1:5b:3d:dc:32:a9:25:92:ab:3b:2a:ff:b6:
         5a:74:67:c2:e2:13:54:89:f8:d4:07:53:85:4c:36:29:bb:e3:
         e6:a4:26:83:7b:a3:45:44:a7:b5:4c:de:0d:4a:24:40:77:ff:
         03:80:7a:83:b0:ca:04:a4:f5:98:32:a5:1b:3a:ac:37:e4:9c:
         de:83:43:15
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjM2NTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZCRkYyQjA2MzQwNzYw
NTVDMUE2NUU3NTUzNDkwRDZBNzhCQkY4RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5rfS2GatHBVwFPQPhMIVUHj1VXtfwRkrWQNuYHcneu3wN0Mfb
lShjHubDHsiACBXJeVooVG20jMx7kIv/d+PIlbjLUdvZDcG/H8mrPnXGXLgIaAB6
Ns4CKdppHS3WBciLaHDCs/D+ZR/bumH+o8rOs7LqyOVBC0ECOZSWJeSA6owsBJj2
ONsy3EvUnIO7vMJulXiXFhnP1HPY1mDrxZb77Io01kwtyPW0lEDInYSMZkkmKygZ
TAoe2a80nvIe7Fug8Qk/ZTmyvDU4akp0g6JkLhv2EoW38cf43As4oBxxYNGio1+3
ljIuSl2Rkp4JsXoNXJ8p3c84eZtEJXAwQoYvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUa/8rBjQHYFXBpl51U0kNani7+P0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2FfOHJCalFIWUZYQnBsNTFVMGtOYW5pNy1QMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc91wAwDQYJKoZIhvcNAQELBQADggEBAKyYXEqycymvmoMwXQS/izacnD6/
NUhqjxCzW/uyPaT6IQ0jSJnPi3rWm0ONOfi8Ma/6VQaGJtwxxvkA2M8NfjOuBrsA
HIa3Yt7azFWi9XJWOTgfecpw4FS7A+CPoJ4y8kgYmFK7R3gS+65g22PdXXcaLo8s
NPUlAVH31HAu8EQJcx8PVkQkXPLkqSMlxqv6GduFANHYjXm7uGMNhewC7UnVDV6o
fL/ye1s6xaJL5AZc8ABe/8+h0fcCsVs93DKpJZKrOyr/tlp0Z8LiE1SJ+NQHU4VM
Nim74+akJoN7o0VEp7VM3g1KJEB3/wOAeoOwygSk9ZgypRs6rDfknN6DQxU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:41 2025 by rpki-client