Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/odRN_moEXj7scdWPg4VD0V2umaU.roa
File:                     odRN_moEXj7scdWPg4VD0V2umaU.roa (raw, json)
Hash identifier:          djUFzNULxKMgIwQqUFyvqSoET/94KBStwYVeapnbRcI=
Subject key identifier:   A1:D4:4D:FE:6A:04:5E:3E:EC:71:D5:8F:83:85:43:D1:5D:AE:99:A5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03EC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/odRN_moEXj7scdWPg4VD0V2umaU.roa
Signing time:             Wed 18 Dec 2024 02:16:36 +0000
ROA not before:           Wed 18 Dec 2024 02:16:36 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        124.215.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:36 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=A1D44DFE6A045E3EEC71D58F838543D15DAE99A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:cc:6b:5f:f7:01:18:09:dd:f2:f6:87:d0:
                    e6:3a:25:38:f4:94:fa:76:11:0e:d6:17:71:de:c2:
                    96:c8:b2:2b:7c:44:ee:72:35:74:b4:7f:4f:91:58:
                    e3:3d:94:98:8d:a1:37:a0:1b:46:f0:d2:82:56:b3:
                    28:1f:5b:52:d4:f8:39:5f:f5:6a:d1:71:8b:f3:2e:
                    53:d5:3e:9e:b1:23:90:ee:78:15:3c:99:69:22:ab:
                    49:f5:ed:f0:60:ac:db:c8:bf:4d:97:5f:19:1e:76:
                    28:90:72:ea:9a:c4:da:c9:80:39:15:33:b9:c9:0a:
                    98:62:05:17:31:e3:55:61:8d:1f:75:c3:c6:41:d5:
                    96:a5:03:85:69:0c:0a:8b:f1:c7:c2:d4:6a:6e:68:
                    f6:7a:21:33:9d:7b:12:ca:3f:fc:c4:d3:d9:ea:24:
                    e9:b0:7c:c5:bc:b4:2b:09:3c:41:7e:43:c5:bf:46:
                    37:af:19:57:98:79:b8:48:b8:bf:6a:45:ef:08:b8:
                    93:c0:75:9e:9d:1c:67:b7:21:ae:e9:b8:fb:67:f8:
                    3c:58:a5:a4:bf:4a:b9:7e:08:a6:cf:5c:2b:df:66:
                    48:eb:71:23:be:10:c1:d6:81:00:68:ec:c2:0c:ac:
                    dd:ea:3b:89:84:ca:a3:75:78:23:8e:f8:cf:76:6e:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D4:4D:FE:6A:04:5E:3E:EC:71:D5:8F:83:85:43:D1:5D:AE:99:A5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/odRN_moEXj7scdWPg4VD0V2umaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:04:23:30:21:94:a7:e1:b2:dc:eb:92:48:c3:b9:6e:74:
         0c:cb:bd:65:83:75:31:83:e1:b2:24:ff:78:9b:93:fa:b9:d8:
         67:85:c0:37:56:fd:64:4f:f5:10:b6:be:07:7e:66:5f:fc:ee:
         f8:3f:d5:d7:ca:b2:bc:de:f4:56:9d:df:6c:d0:0d:f8:92:4b:
         00:85:9d:3b:30:08:46:5b:21:00:5c:eb:37:a8:a5:32:14:22:
         86:59:2c:35:33:a6:ef:b4:df:d8:e1:b6:be:7a:b9:65:b2:3f:
         be:0e:77:eb:2a:46:13:95:8c:0c:e4:bf:d7:d7:bd:d8:4b:10:
         f6:de:2f:f7:e2:8c:4d:ed:b9:68:95:53:de:e0:b0:18:a5:b3:
         bc:01:7c:a8:d0:08:07:57:99:58:82:78:3e:40:1c:e1:de:a5:
         c6:92:65:03:41:72:55:62:b6:8c:fb:43:8e:be:47:99:ca:86:
         f5:2e:c3:5b:ab:e3:b4:7a:19:2a:64:88:39:ab:67:34:1a:06:
         7e:d8:ba:f2:2f:ae:cd:03:68:6c:3a:28:3b:fc:ec:04:7a:2e:
         b0:c3:82:32:87:e9:e9:83:f9:6b:86:cf:74:3e:68:10:38:08:
         c4:f1:44:12:31:93:6e:3e:d9:e6:c2:33:5b:9d:72:23:62:53:
         2c:09:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:02 2025 by rpki-client