Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/eE9pU5RXQTMR19YdDMutLe6YfRs.roa
File:                     eE9pU5RXQTMR19YdDMutLe6YfRs.roa (raw, json)
Hash identifier:          hYnTKduAdS6lgmoB1t7TTscquKgaWflvqrz0EuJt+Ok=
Subject key identifier:   78:4F:69:53:94:57:41:33:11:D7:D6:1D:0C:CB:AD:2D:EE:98:7D:1B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0494
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eE9pU5RXQTMR19YdDMutLe6YfRs.roa
Signing time:             Wed 18 Dec 2024 02:28:52 +0000
ROA not before:           Wed 18 Dec 2024 02:28:52 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        119.105.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1172 (0x494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:28:52 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=784F69539457413311D7D61D0CCBAD2DEE987D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:bd:4f:7b:97:a9:2b:40:1a:b1:d6:5a:7e:
                    62:7b:46:13:c3:d4:7d:42:33:77:e5:f0:27:d1:b5:
                    d3:ae:7d:31:3e:79:4c:e4:df:ba:49:6a:09:4a:67:
                    b8:a1:6e:b1:cb:44:c7:1a:6f:30:a4:4f:2c:e2:2a:
                    d1:1b:10:64:fe:85:07:df:99:7a:46:71:c8:34:c3:
                    94:fe:00:07:ff:f5:84:e8:21:42:8b:98:81:8d:a8:
                    c4:a8:46:3a:55:ec:0b:64:fa:61:71:be:23:78:3e:
                    e1:1f:81:6f:46:0d:4d:d1:a7:19:4b:c9:da:38:27:
                    66:09:10:d7:ce:20:16:fb:a7:fd:9c:4e:be:c9:25:
                    b5:b6:fd:e4:da:6f:98:c0:84:d4:94:42:27:f2:42:
                    02:bf:23:93:f0:40:ca:3b:c2:a0:0b:76:6f:d3:9d:
                    fe:7c:c2:2a:47:00:35:29:0f:4b:d8:ef:b5:0a:4a:
                    1d:c3:78:ce:c9:ec:22:ff:cb:b0:0c:03:c9:d3:79:
                    15:72:c6:7c:03:76:ed:76:05:80:3a:e2:d6:3a:e4:
                    41:82:39:d3:12:2b:e4:8c:8b:ed:d4:60:48:82:fc:
                    13:dd:f2:d5:10:20:6f:73:c9:f7:33:53:2b:f8:a5:
                    d7:38:bc:85:2c:11:06:d3:7b:1d:74:14:03:8d:42:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:69:53:94:57:41:33:11:D7:D6:1D:0C:CB:AD:2D:EE:98:7D:1B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eE9pU5RXQTMR19YdDMutLe6YfRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:e7:14:37:9f:7b:4c:d3:10:65:ad:b0:c9:90:e7:69:4d:2e:
         97:09:56:fa:ae:18:5c:e2:39:7b:81:e7:5f:3b:56:35:ab:9b:
         41:67:9e:36:18:0b:6d:e7:b4:5f:91:95:20:eb:5e:85:25:0a:
         a7:15:fc:19:8a:1d:ca:09:2c:d8:a1:da:9d:e9:f1:38:dd:16:
         df:7f:7f:43:31:59:ff:ff:96:31:04:d8:cc:84:90:76:6e:41:
         a7:58:61:94:96:93:65:f0:cf:8b:d7:97:6d:0d:af:41:c2:a3:
         f2:13:f9:33:99:46:e3:7e:5f:d4:46:84:91:de:76:d0:8b:48:
         f7:48:cb:f7:4c:99:8d:6a:9f:cb:dc:38:0a:0b:20:fc:33:87:
         ec:18:46:47:c5:0a:bc:d2:c3:ed:66:62:2c:fb:b6:d1:ec:11:
         50:87:72:2d:87:8d:7b:45:31:1b:62:b1:af:55:8d:46:ec:a1:
         9b:f7:6c:88:c6:41:00:9a:42:3f:da:32:f7:0b:72:fd:7f:36:
         33:28:19:5a:9b:4e:5c:c9:8a:50:74:3b:4d:9f:3a:90:94:bc:
         f5:d7:ac:00:61:67:7d:98:d0:0b:b9:ad:24:aa:5f:f9:5b:cf:
         95:52:89:c9:79:8a:af:8d:36:88:50:ff:25:e9:ea:ae:62:33:
         b9:8f:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:16 2025 by rpki-client