Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ihduN5494jImbeFVX3y94NlLuCM.roa
File:                     ihduN5494jImbeFVX3y94NlLuCM.roa (raw, json)
Hash identifier:          YkqpMRV4wiLfpCiSwEcqose0exWnacsOhtUqrqJy5U4=
Subject key identifier:   8A:17:6E:37:9E:3D:E2:32:26:6D:E1:55:5F:7C:BD:E0:D9:4B:B8:23
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03FF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ihduN5494jImbeFVX3y94NlLuCM.roa
Signing time:             Wed 18 Dec 2024 02:18:51 +0000
ROA not before:           Wed 18 Dec 2024 02:18:51 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        113.157.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:18:51 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=8A176E379E3DE232266DE1555F7CBDE0D94BB823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:17:b5:6b:20:74:5b:4f:09:87:ae:07:b3:
                    88:c3:aa:99:8c:07:00:57:5d:3f:29:72:b7:fc:55:
                    71:f0:5c:b7:e2:d5:10:c9:83:a3:9e:f0:f4:48:9d:
                    55:d3:76:db:24:5e:d7:fa:06:fc:58:20:ba:13:cc:
                    5e:fd:7c:3f:4c:19:69:49:ea:f2:88:28:6e:0e:7d:
                    59:e2:0e:0e:29:95:33:1a:55:0b:7a:88:c0:21:8d:
                    cd:72:3e:db:e2:35:29:ab:7d:6a:e2:e7:e4:47:9c:
                    03:1b:01:33:d7:27:f8:55:f5:d8:ba:ac:93:90:4e:
                    7f:8f:32:52:80:17:e9:7e:b1:59:30:c4:7a:0c:c0:
                    b6:a8:51:c0:0b:aa:44:68:d1:c4:e3:ac:ff:2f:84:
                    f4:17:34:d6:b4:51:50:2b:10:14:0b:ce:48:76:da:
                    19:69:3d:2e:c4:6c:d5:81:9b:cc:e9:bd:e6:06:8e:
                    44:8d:a4:4f:8b:c0:c5:69:03:8b:4b:8d:75:31:cd:
                    21:16:23:b6:f6:df:9b:2e:d6:e4:ce:0c:ab:7a:76:
                    b3:4c:b5:61:68:64:5f:4b:b6:ec:d7:bd:3c:c2:ee:
                    73:4e:74:ae:ae:18:75:2c:09:61:e5:1d:06:ac:0e:
                    2b:f7:b4:42:76:35:65:6b:91:ea:dd:dd:93:28:53:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:17:6E:37:9E:3D:E2:32:26:6D:E1:55:5F:7C:BD:E0:D9:4B:B8:23
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ihduN5494jImbeFVX3y94NlLuCM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:54:4a:6a:2a:c7:71:a4:af:13:2b:d1:ee:da:c1:44:d5:f7:
         da:48:0c:6b:b0:71:85:da:0a:56:72:fe:db:5d:50:bc:33:a7:
         47:39:ad:1b:d8:8a:29:a7:e6:ab:d5:97:6a:54:4a:36:8c:36:
         f9:04:2b:b4:d9:a7:c0:ef:55:0b:3e:3d:8a:42:ef:91:d5:b5:
         3c:18:bf:3e:1e:6c:21:6f:c1:d5:31:7c:db:7c:f6:18:a1:d2:
         8b:e4:fb:02:41:0c:3f:aa:eb:84:a3:04:ec:d6:a2:f8:12:ac:
         2c:bf:44:23:d1:af:f4:cc:8e:b3:67:cf:4b:d4:8b:4d:3f:36:
         b3:fe:13:10:b0:06:34:61:03:f7:fe:f4:e5:03:33:3a:54:63:
         11:56:9b:a3:24:c8:af:f2:1f:dd:17:23:0b:1f:99:4c:02:32:
         3a:c6:a9:fb:5e:cc:90:19:c7:40:e7:e2:aa:e8:5c:2f:1e:8b:
         0c:37:0c:b9:f7:cf:7e:b0:18:94:70:a4:3b:bf:75:17:47:34:
         c5:cb:92:82:70:98:fc:15:89:e9:04:3f:9d:3a:07:cd:b3:a3:
         81:f0:4a:26:45:a5:61:13:b8:87:21:81:4c:13:a3:55:32:c1:
         cb:7c:55:ae:bd:23:28:8c:92:d4:f9:0e:dd:b5:9c:be:2a:53:
         0c:b8:b8:d5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjE4NTFaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDhBMTc2RTM3OUUzREUy
MzIyNjZERTE1NTVGN0NCREUwRDk0QkI4MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6ghe1ayB0W08Jh64Hs4jDqpmMBwBXXT8pcrf8VXHwXLfi1RDJ
g6Oe8PRInVXTdtskXtf6BvxYILoTzF79fD9MGWlJ6vKIKG4OfVniDg4plTMaVQt6
iMAhjc1yPtviNSmrfWri5+RHnAMbATPXJ/hV9di6rJOQTn+PMlKAF+l+sVkwxHoM
wLaoUcALqkRo0cTjrP8vhPQXNNa0UVArEBQLzkh22hlpPS7EbNWBm8zpveYGjkSN
pE+LwMVpA4tLjXUxzSEWI7b235su1uTODKt6drNMtWFoZF9LtuzXvTzC7nNOdK6u
GHUsCWHlHQasDiv3tEJ2NWVrkerd3ZMoU98XAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUihduN5494jImbeFVX3y94NlLuCMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2loZHVONTQ5NGpJbWJlRlZYM3k5NE5sTHVDTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZxnUAwDQYJKoZIhvcNAQELBQADggEBALhUSmoqx3GkrxMr0e7awUTV99pI
DGuwcYXaClZy/ttdULwzp0c5rRvYiimn5qvVl2pUSjaMNvkEK7TZp8DvVQs+PYpC
75HVtTwYvz4ebCFvwdUxfNt89hih0ovk+wJBDD+q64SjBOzWovgSrCy/RCPRr/TM
jrNnz0vUi00/NrP+ExCwBjRhA/f+9OUDMzpUYxFWm6MkyK/yH90XIwsfmUwCMjrG
qftezJAZx0Dn4qroXC8eiww3DLn3z36wGJRwpDu/dRdHNMXLkoJwmPwViekEP506
B82zo4HwSiZFpWETuIchgUwTo1Uywct8Va69IyiMktT5Dt21nL4qUwy4uNU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:22 2025 by rpki-client