Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gkb5XBNz4mRiKiWiweXG0Si_YF4.roa
File:                     gkb5XBNz4mRiKiWiweXG0Si_YF4.roa (raw, json)
Hash identifier:          07m8B9wrz4NtzDxka31I4e5X29M9pR/kjFdjIu9aQSI=
Subject key identifier:   82:46:F9:5C:13:73:E2:64:62:2A:25:A2:C1:E5:C6:D1:28:BF:60:5E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0514
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gkb5XBNz4mRiKiWiweXG0Si_YF4.roa
Signing time:             Wed 18 Dec 2024 02:42:17 +0000
ROA not before:           Wed 18 Dec 2024 02:42:17 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.238.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:42:17 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=8246F95C1373E264622A25A2C1E5C6D128BF605E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:f0:da:81:8d:a9:10:42:96:3d:a6:a2:6f:
                    91:78:0a:d9:15:f7:2f:89:e2:d3:1b:5f:bb:07:e9:
                    0f:4c:d0:4f:a6:5f:10:f6:05:d7:a6:30:fa:11:ec:
                    f3:10:2e:21:24:84:b5:35:61:1d:de:4d:c6:17:c7:
                    3f:31:81:54:2b:a7:2b:75:07:a1:9f:a8:7c:49:9d:
                    ad:5b:49:0f:1d:51:18:23:aa:bb:ea:a7:1f:29:1f:
                    2f:46:10:71:29:5c:dd:0c:1a:01:62:3c:69:4a:6a:
                    31:26:8d:20:1f:d8:e4:8d:a7:f7:b8:73:7e:90:80:
                    15:b8:88:bf:ee:68:eb:a6:47:a1:3c:01:11:c3:ef:
                    67:ce:11:28:b9:75:93:47:fd:88:7f:e5:a0:01:43:
                    0d:99:0f:9f:e0:74:68:4a:27:8f:bb:84:ae:0e:45:
                    93:74:ca:72:a8:cd:55:e6:bc:2a:8e:69:5d:e8:17:
                    a2:77:9e:55:96:cb:e8:7a:37:fd:93:1e:7e:1c:e7:
                    40:a6:53:15:d5:fe:4b:e8:49:e4:2a:03:9d:a2:99:
                    a7:2b:78:67:f8:35:ea:9e:bf:46:60:ec:f6:73:88:
                    a6:14:a5:bf:c4:9a:7f:56:51:d2:f8:c6:81:df:2e:
                    4e:46:29:e9:73:a1:7a:ba:0a:81:ec:0b:90:a8:a7:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:46:F9:5C:13:73:E2:64:62:2A:25:A2:C1:E5:C6:D1:28:BF:60:5E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gkb5XBNz4mRiKiWiweXG0Si_YF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:df:6d:e3:12:ff:b9:e2:c3:1f:06:56:5a:d6:34:a9:3a:
         f4:2d:3a:6b:53:59:50:6e:9a:1d:95:1b:25:4d:c5:f8:85:ac:
         ce:d1:9e:86:b7:e7:28:fe:cf:2b:7b:4c:19:fa:8f:c3:d1:f4:
         d3:fc:78:dc:6d:a6:41:74:7f:b0:38:57:d6:18:45:6a:8c:fe:
         86:55:6c:99:a3:2f:dc:ea:c1:94:3c:39:a7:b4:de:46:ff:c9:
         07:ec:39:ef:fd:46:e4:9e:d7:29:20:83:bd:f8:d2:3b:2e:23:
         2e:81:ef:30:8c:15:2c:c5:ee:f1:8d:61:cb:3c:a3:ef:48:40:
         bc:d6:18:c9:1b:ad:e3:0a:a4:a7:87:1a:6e:19:f3:ad:91:e1:
         e4:af:8d:39:74:36:fb:4c:0b:a2:55:04:f4:c2:12:3e:4a:dd:
         ca:05:04:46:0f:d1:3b:aa:fe:be:78:b8:a8:55:51:be:a2:24:
         9d:99:53:2a:8e:f3:16:94:bd:29:b8:38:20:87:1c:33:be:36:
         f1:d5:47:28:a3:45:ec:d6:3e:14:99:14:f2:43:18:72:33:9c:
         e4:a4:44:73:1d:2f:8e:f0:f1:93:e8:12:77:63:7e:fc:a1:12:
         59:8b:07:7f:55:6e:91:3f:7a:ef:44:a6:e8:d3:fd:55:df:9f:
         d4:bc:ff:46
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjQyMTdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDgyNDZGOTVDMTM3M0Uy
NjQ2MjJBMjVBMkMxRTVDNkQxMjhCRjYwNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCW6/DagY2pEEKWPaaib5F4CtkV9y+J4tMbX7sH6Q9M0E+mXxD2
BdemMPoR7PMQLiEkhLU1YR3eTcYXxz8xgVQrpyt1B6GfqHxJna1bSQ8dURgjqrvq
px8pHy9GEHEpXN0MGgFiPGlKajEmjSAf2OSNp/e4c36QgBW4iL/uaOumR6E8ARHD
72fOESi5dZNH/Yh/5aABQw2ZD5/gdGhKJ4+7hK4ORZN0ynKozVXmvCqOaV3oF6J3
nlWWy+h6N/2THn4c50CmUxXV/kvoSeQqA52imacreGf4Neqev0Zg7PZziKYUpb/E
mn9WUdL4xoHfLk5GKelzoXq6CoHsC5Cop9odAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUgkb5XBNz4mRiKiWiweXG0Si/YF4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2drYjVYQk56NG1SaUtpV2l3ZVhHMFNpX1lGNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS7gowDQYJKoZIhvcNAQELBQADggEBAGzv323jEv+54sMfBlZa1jSpOvQt
OmtTWVBumh2VGyVNxfiFrM7Rnoa35yj+zyt7TBn6j8PR9NP8eNxtpkF0f7A4V9YY
RWqM/oZVbJmjL9zqwZQ8Oae03kb/yQfsOe/9RuSe1ykgg7340jsuIy6B7zCMFSzF
7vGNYcs8o+9IQLzWGMkbreMKpKeHGm4Z862R4eSvjTl0NvtMC6JVBPTCEj5K3coF
BEYP0Tuq/r54uKhVUb6iJJ2ZUyqO8xaUvSm4OCCHHDO+NvHVRyijRezWPhSZFPJD
GHIznOSkRHMdL47w8ZPoEndjfvyhElmLB39VbpE/eu9EpujT/VXfn9S8/0Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:27 2025 by rpki-client