Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ehAnPE0L4CQmowh8CIPiKGH4FcY.roa
File:                     ehAnPE0L4CQmowh8CIPiKGH4FcY.roa (raw, json)
Hash identifier:          civ/9jZPsugGcLYbA5JM1uw3Sx6RPv3lzdo3SYIa3CE=
Subject key identifier:   7A:10:27:3C:4D:0B:E0:24:26:A3:08:7C:08:83:E2:28:61:F8:15:C6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0558
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ehAnPE0L4CQmowh8CIPiKGH4FcY.roa
Signing time:             Wed 18 Dec 2024 02:44:30 +0000
ROA not before:           Wed 18 Dec 2024 02:44:30 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:30 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=7A10273C4D0BE02426A3087C0883E22861F815C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:92:f0:df:3d:4c:9a:c9:6d:85:b3:f7:a6:
                    6f:0e:30:c5:10:96:94:e0:03:f6:cd:ef:9e:7d:60:
                    71:57:ca:04:68:ca:67:49:ce:3c:85:8e:a3:8b:8c:
                    4f:88:2d:7f:b8:4e:d3:36:c0:6b:4c:a9:30:52:70:
                    7d:53:a7:5a:16:6a:b0:e9:f8:44:fd:d5:79:43:ce:
                    22:ff:71:93:ca:2e:a1:cb:91:dd:b0:68:b7:cc:a4:
                    33:75:4f:a5:8b:1e:10:ae:7d:ec:fc:8c:58:fa:d1:
                    02:c1:c2:1b:4d:7b:3a:73:6c:f0:0f:ec:6b:51:3a:
                    d5:8b:1a:a7:de:25:4d:f5:8c:74:07:2a:10:9c:77:
                    62:20:12:9b:f9:63:9b:35:96:5e:8d:be:35:28:f5:
                    e9:12:77:9d:cc:f7:ae:9e:32:59:00:c9:a1:bd:09:
                    65:bf:34:0e:cb:c0:25:5f:87:e0:f1:69:99:bc:92:
                    57:fc:8c:88:1a:a1:06:fa:a6:5b:9d:97:b1:df:ae:
                    a2:b0:fb:c1:cc:ed:2b:e4:1d:f8:e4:95:4b:2e:77:
                    6b:03:4f:01:0f:0e:0c:69:44:95:78:62:4a:5a:42:
                    ab:01:98:e5:a6:f7:09:d5:9f:ec:39:a2:37:cf:bb:
                    d3:40:1f:12:9b:7a:d5:f5:cc:5b:0c:af:ae:8f:48:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:10:27:3C:4D:0B:E0:24:26:A3:08:7C:08:83:E2:28:61:F8:15:C6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ehAnPE0L4CQmowh8CIPiKGH4FcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a6:e4:17:22:76:d1:6a:42:e2:55:7d:5a:37:bd:6d:1d:b2:
         37:70:f4:ee:15:a7:65:0c:7b:06:85:74:9e:30:08:2c:b9:33:
         5d:d1:a1:a5:4a:5c:c8:25:a2:67:24:e2:01:c3:07:ce:ac:a5:
         55:28:73:ad:94:02:be:b9:78:47:7e:f9:dc:4a:db:17:c5:82:
         fd:7f:f1:fc:bc:c3:47:ab:11:03:d6:a7:ca:c0:6a:f3:d7:21:
         f7:1f:c2:60:d9:c1:06:77:dd:ce:84:4c:1a:2b:f4:7c:ec:c3:
         ad:b3:69:c4:bd:bd:c7:a5:7d:7c:25:16:62:55:96:0e:6f:df:
         39:1a:26:f1:f1:69:9b:af:a9:fe:c8:0d:fb:a4:dd:b6:1b:2f:
         99:8c:ac:40:3a:87:27:e0:df:0c:fb:3d:79:eb:67:a3:0f:20:
         c9:45:19:20:f8:34:58:91:f7:7f:b2:02:d4:ac:29:1b:45:cf:
         95:1b:a1:80:92:80:6e:ef:0d:4b:48:ac:48:26:f3:7a:49:2c:
         6e:bd:dd:61:c3:92:28:1f:73:c1:01:9a:b6:2e:8b:38:be:84:
         f7:c8:71:b5:3b:33:d3:34:1c:a2:56:fe:a6:a3:72:05:3c:d2:
         0a:5b:b6:63:d9:da:73:ae:32:a0:32:80:24:8f:1e:30:b4:41:
         57:56:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:48 2025 by rpki-client