Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa
File:                     fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa (raw, json)
Hash identifier:          zI7WpT/LECYsNlxOI6S92hffehVdbrfTOPGee2ACb7A=
Subject key identifier:   7D:CB:E7:F1:EC:99:8C:63:57:E0:76:1F:97:80:8D:2A:AA:52:5C:0E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       04D2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa
Signing time:             Wed 18 Dec 2024 02:36:59 +0000
ROA not before:           Wed 18 Dec 2024 02:36:59 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.238.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:36:59 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=7DCBE7F1EC998C6357E0761F97808D2AAA525C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:72:ff:d8:96:0f:6b:9a:d9:07:44:55:9e:88:
                    83:e6:46:c7:42:05:9b:7d:c4:70:6b:45:15:02:a1:
                    d1:12:46:a9:34:fe:e5:5a:d8:d1:8a:2b:96:65:94:
                    1f:60:f3:6d:16:67:55:74:e8:f4:c8:8e:f6:b4:70:
                    da:73:89:34:bc:77:0f:ab:d2:d1:25:f3:33:7b:6d:
                    fb:28:e8:59:1d:86:72:57:18:f0:bb:8a:f4:74:72:
                    4b:64:e0:99:7d:c7:a4:39:2c:ea:a5:6f:ce:10:e2:
                    b0:59:fd:f0:81:c7:ba:b9:1d:aa:f3:46:db:89:b6:
                    ad:64:1a:af:bf:b5:a2:4a:59:8d:c7:02:ad:70:ed:
                    96:6f:1e:a5:ef:16:4c:a2:66:72:79:cf:08:f9:61:
                    a3:57:02:3b:85:8d:05:2f:c9:b5:49:96:cc:c2:b1:
                    a5:46:12:cd:65:f7:66:15:3a:7d:5d:cd:8c:63:d8:
                    ce:27:23:bc:63:52:85:0f:f4:d4:b0:8b:bd:4d:ad:
                    46:ee:cf:9d:52:55:8d:3c:f9:25:e0:19:27:ca:5b:
                    3e:33:8f:1d:bf:5b:6b:33:21:5c:0d:70:07:0f:19:
                    8b:f2:c3:89:b3:d4:7c:78:f9:7d:80:b3:13:7d:e5:
                    63:32:ec:1b:ff:48:76:40:55:60:2f:63:05:ad:9c:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CB:E7:F1:EC:99:8C:63:57:E0:76:1F:97:80:8D:2A:AA:52:5C:0E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:9d:2b:5f:af:31:ab:35:f5:93:22:a2:6f:63:37:85:93:
         5c:43:64:25:46:16:56:1b:ca:be:89:ff:23:42:fc:8d:3e:86:
         61:d2:90:65:4f:b1:c7:19:05:cd:9f:9a:19:da:b5:35:8e:67:
         99:97:90:77:0a:f5:08:11:b7:09:c5:00:7e:bb:3c:7d:b6:6d:
         d6:33:50:56:db:12:12:84:ed:29:83:15:80:91:21:b2:67:03:
         b1:44:df:e6:40:7f:f8:ed:0a:bb:28:de:43:01:92:90:6c:df:
         e0:c2:83:6d:1e:f7:35:e7:06:77:50:f2:b0:84:e8:68:eb:8c:
         be:13:7d:f3:54:8e:4d:ea:ed:2b:19:7d:bd:3f:0b:df:98:04:
         9f:da:e4:e1:bd:1c:e8:23:6d:ab:e2:2a:78:bf:34:8f:37:3b:
         49:da:7a:4c:67:a7:37:9e:db:1e:20:5c:f4:23:ce:60:bf:d0:
         5f:0b:f2:01:cf:00:36:e0:87:59:66:4d:4a:2f:d9:39:94:5f:
         a1:c0:c7:85:59:79:b1:7a:e3:6b:bf:c2:02:6b:fb:34:92:cc:
         5d:89:f7:6f:08:82:92:77:24:88:f2:e0:a6:0e:39:ca:a4:48:
         a4:a1:83:74:b7:72:d4:3c:98:ab:16:67:7a:4b:58:74:9b:66:
         f7:55:f2:d6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjM2NTlaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDdEQ0JFN0YxRUM5OThD
NjM1N0UwNzYxRjk3ODA4RDJBQUE1MjVDMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDocv/Ylg9rmtkHRFWeiIPmRsdCBZt9xHBrRRUCodESRqk0/uVa
2NGKK5ZllB9g820WZ1V06PTIjva0cNpziTS8dw+r0tEl8zN7bfso6FkdhnJXGPC7
ivR0cktk4Jl9x6Q5LOqlb84Q4rBZ/fCBx7q5HarzRtuJtq1kGq+/taJKWY3HAq1w
7ZZvHqXvFkyiZnJ5zwj5YaNXAjuFjQUvybVJlszCsaVGEs1l92YVOn1dzYxj2M4n
I7xjUoUP9NSwi71NrUbuz51SVY08+SXgGSfKWz4zjx2/W2szIVwNcAcPGYvyw4mz
1Hx4+X2AsxN95WMy7Bv/SHZAVWAvYwWtnHJnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfcvn8eyZjGNX4HYfl4CNKqpSXA4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2Zjdm44ZXlaakdOWDRIWWZsNENOS3FwU1hBNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADS7gMwDQYJKoZIhvcNAQELBQADggEBAIrZnStfrzGrNfWTIqJvYzeFk1xD
ZCVGFlYbyr6J/yNC/I0+hmHSkGVPsccZBc2fmhnatTWOZ5mXkHcK9QgRtwnFAH67
PH22bdYzUFbbEhKE7SmDFYCRIbJnA7FE3+ZAf/jtCrso3kMBkpBs3+DCg20e9zXn
BndQ8rCE6GjrjL4TffNUjk3q7SsZfb0/C9+YBJ/a5OG9HOgjbaviKni/NI83O0na
ekxnpzee2x4gXPQjzmC/0F8L8gHPADbgh1lmTUov2TmUX6HAx4VZebF642u/wgJr
+zSSzF2J928IgpJ3JIjy4KYOOcqkSKShg3S3ctQ8mKsWZ3pLWHSbZvdV8tY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:21 2025 by rpki-client