Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lni7TmBckyGeYtYGFe1Sd62MmTg.roa
File:                     lni7TmBckyGeYtYGFe1Sd62MmTg.roa (raw, json)
Hash identifier:          LoZg82Y1KRRfZLKds8WtfTbzppzEk3gfngmaExixCeQ=
Subject key identifier:   96:78:BB:4E:60:5C:93:21:9E:62:D6:06:15:ED:52:77:AD:8C:99:38
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0456
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lni7TmBckyGeYtYGFe1Sd62MmTg.roa
Signing time:             Wed 18 Dec 2024 02:24:08 +0000
ROA not before:           Wed 18 Dec 2024 02:24:08 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        106.185.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110 (0x456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:08 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=9678BB4E605C93219E62D60615ED5277AD8C9938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:21:70:a7:56:07:60:12:43:bd:bf:bb:75:
                    49:42:8b:64:82:ce:81:b2:06:1d:62:90:18:98:ec:
                    ae:35:8e:41:b5:46:4c:d3:0a:44:19:df:20:d5:19:
                    74:76:9d:ba:7f:eb:a9:3d:de:22:86:2f:45:9e:69:
                    47:bd:da:f7:d0:79:d6:a2:d5:ce:1a:47:69:f9:9b:
                    2b:2a:cc:92:25:33:e2:c2:6d:b0:fb:e0:81:56:3e:
                    30:89:15:61:ba:ee:ba:a7:9a:41:66:ac:ea:90:69:
                    10:9f:59:b0:8b:0f:2c:70:7b:c5:77:c2:5e:a3:e6:
                    66:de:e5:a0:b6:a7:3e:c6:0a:fe:7a:97:36:1a:27:
                    f8:23:93:24:1b:0b:10:c3:a2:e0:fe:54:c9:34:8b:
                    7f:11:19:b7:2a:3d:33:4d:55:de:3d:35:25:94:9d:
                    43:3d:41:0e:cf:5b:bd:54:d9:2a:dd:aa:19:07:bf:
                    17:d6:ff:4c:fb:76:b7:db:21:8b:b1:23:bc:11:33:
                    3d:29:d4:df:54:0b:42:bc:a9:01:0f:c4:d4:bf:66:
                    1c:10:b7:8e:9c:aa:0b:32:11:e6:02:74:75:55:1f:
                    a7:10:f3:92:03:60:c8:a5:58:da:ec:b7:00:ea:33:
                    e7:47:b2:b0:3e:ef:3b:0b:62:91:35:a4:6e:3b:dc:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:BB:4E:60:5C:93:21:9E:62:D6:06:15:ED:52:77:AD:8C:99:38
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lni7TmBckyGeYtYGFe1Sd62MmTg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.185.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         55:df:9a:4e:10:b0:d4:f4:30:b3:07:13:66:34:0a:59:0a:c9:
         df:fe:fc:b5:68:4b:bd:fc:02:9c:e9:a5:1c:33:51:de:8a:7e:
         72:53:45:02:85:86:63:27:20:95:74:57:da:f0:5d:86:51:9a:
         f2:01:bd:44:68:81:84:3b:f6:7f:60:04:9a:1d:c3:68:29:08:
         6a:47:02:ab:a8:51:d4:fc:33:88:a2:9c:04:a1:01:d8:ef:6e:
         7e:99:0c:92:6a:71:b8:c5:75:9f:1e:aa:e1:93:d5:58:0f:16:
         6a:89:52:73:fb:2f:70:37:81:ea:d4:75:35:52:14:67:cf:66:
         19:36:d6:25:17:be:7a:c7:8a:9d:bf:de:c5:44:e0:f0:91:72:
         5e:ef:1b:7e:1e:06:6c:3d:13:95:87:0e:4d:21:3f:27:53:b1:
         d6:8d:d7:4a:3d:e9:46:27:50:66:b7:6f:af:ab:e6:24:62:07:
         02:b2:39:e9:24:f8:43:68:95:ee:1e:06:93:bf:aa:24:71:57:
         fb:19:ae:fd:a8:79:d8:8f:2a:26:de:de:e8:ec:75:91:0d:6e:
         ff:30:e3:28:d6:fe:b3:93:17:0f:da:2d:f2:86:92:29:40:86:
         02:b9:24:86:da:3b:97:23:91:cf:e4:27:6c:2e:c1:f1:9f:3f:
         7b:1a:67:b2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjI0MDhaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDk2NzhCQjRFNjA1Qzkz
MjE5RTYyRDYwNjE1RUQ1Mjc3QUQ4Qzk5MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIDCFwp1YHYBJDvb+7dUlCi2SCzoGyBh1ikBiY7K41jkG1RkzT
CkQZ3yDVGXR2nbp/66k93iKGL0WeaUe92vfQedai1c4aR2n5mysqzJIlM+LCbbD7
4IFWPjCJFWG67rqnmkFmrOqQaRCfWbCLDyxwe8V3wl6j5mbe5aC2pz7GCv56lzYa
J/gjkyQbCxDDouD+VMk0i38RGbcqPTNNVd49NSWUnUM9QQ7PW71U2SrdqhkHvxfW
/0z7drfbIYuxI7wRMz0p1N9UC0K8qQEPxNS/ZhwQt46cqgsyEeYCdHVVH6cQ85ID
YMilWNrstwDqM+dHsrA+7zsLYpE1pG473GqhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUlni7TmBckyGeYtYGFe1Sd62MmTgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2xuaTdUbUJja3lHZVl0WUdGZTFTZDYyTW1UZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZqucAwDQYJKoZIhvcNAQELBQADggEBAFXfmk4QsNT0MLMHE2Y0ClkKyd/+
/LVoS738ApzppRwzUd6KfnJTRQKFhmMnIJV0V9rwXYZRmvIBvURogYQ79n9gBJod
w2gpCGpHAquoUdT8M4iinAShAdjvbn6ZDJJqcbjFdZ8equGT1VgPFmqJUnP7L3A3
gerUdTVSFGfPZhk21iUXvnrHip2/3sVE4PCRcl7vG34eBmw9E5WHDk0hPydTsdaN
10o96UYnUGa3b6+r5iRiBwKyOekk+ENole4eBpO/qiRxV/sZrv2oediPKibe3ujs
dZENbv8w4yjW/rOTFw/aLfKGkilAhgK5JIbaO5cjkc/kJ2wuwfGfP3saZ7I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:04 2025 by rpki-client