Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/teMF9p9iF3mcQDOWTguTpZAosBU.roa
File:                     teMF9p9iF3mcQDOWTguTpZAosBU.roa (raw, json)
Hash identifier:          nN3iWs7+5EDHU0DcbqXWwQC5xw+1aKin5WA2vPoyaVQ=
Subject key identifier:   B5:E3:05:F6:9F:62:17:79:9C:40:33:96:4E:0B:93:A5:90:28:B0:15
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03EB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/teMF9p9iF3mcQDOWTguTpZAosBU.roa
Signing time:             Wed 18 Dec 2024 02:16:35 +0000
ROA not before:           Wed 18 Dec 2024 02:16:35 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        59.135.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:16:35 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=B5E305F69F6217799C4033964E0B93A59028B015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:82:7e:70:fd:dc:a6:53:71:42:39:d8:9c:
                    06:a1:af:4b:65:17:14:c0:62:29:6d:6b:1a:be:89:
                    ae:c3:08:41:9b:1b:5f:a8:6e:45:c3:76:c6:f5:c8:
                    01:22:96:5a:72:7f:d5:4c:88:18:9e:6c:87:37:ad:
                    9f:d7:eb:ee:26:6d:d5:99:38:d3:c9:3e:ba:b4:ca:
                    a4:d4:c5:9d:a3:e6:f6:7f:25:71:4e:f7:f5:9e:46:
                    24:53:4e:ea:5c:79:b5:65:de:1d:7a:e7:75:e1:d3:
                    61:25:d4:13:bf:d3:06:09:0a:9e:53:ce:19:f0:e8:
                    bb:a0:43:9a:ec:01:e5:b8:75:b2:9d:5c:32:42:66:
                    ea:46:ab:a3:18:44:63:49:4f:35:c3:e6:b4:46:a1:
                    62:5b:cf:66:ec:64:07:5d:c1:6f:a5:09:44:7a:65:
                    16:14:7d:67:3b:7b:67:1a:a2:52:90:40:d5:c7:82:
                    d2:d2:da:60:f0:a1:a4:3f:5b:89:bb:b4:2a:21:db:
                    5e:9b:62:5f:27:79:02:3a:86:5c:b3:bb:20:f8:f0:
                    ba:54:3f:64:82:7f:b6:5b:d6:10:d4:4a:92:88:f0:
                    b3:59:86:8f:be:09:2f:8d:67:31:d9:5e:7e:50:6b:
                    ab:2c:01:0d:db:b8:fd:a5:f1:4d:80:ab:60:46:8e:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:05:F6:9F:62:17:79:9C:40:33:96:4E:0B:93:A5:90:28:B0:15
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/teMF9p9iF3mcQDOWTguTpZAosBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:6e:d0:f2:39:5b:b8:a9:a6:c5:65:9e:e9:49:9d:87:45:ee:
         ec:11:51:62:ea:68:09:60:f2:7f:a9:1a:0c:e9:a6:12:99:25:
         7a:d2:ab:53:88:5d:37:8c:15:07:7d:31:93:8e:15:56:84:b0:
         4a:4b:83:81:a8:58:cf:8c:a0:04:81:8b:75:e9:c7:db:7f:cb:
         2f:16:3e:20:00:fb:fa:c3:6a:6a:bd:72:2b:26:ac:86:9a:ec:
         e6:e5:ce:c9:26:d8:d5:13:5a:a4:3b:5a:48:4b:55:d5:21:28:
         84:d9:01:6f:cd:7f:cc:c2:66:b3:50:05:3f:68:94:0c:47:61:
         47:c8:7e:35:aa:40:44:d8:d4:a9:8e:c9:a1:d9:ff:9f:9a:e1:
         0b:49:7f:42:b1:c8:ca:04:93:3d:82:94:28:14:84:37:cd:8c:
         96:ea:a0:34:7f:93:a3:64:ca:5b:cf:98:86:f6:11:5b:55:51:
         f8:f4:01:9a:59:f2:a4:26:50:90:93:4e:81:5f:98:06:62:6b:
         fa:b1:3b:b8:0b:dc:ca:0d:b4:6b:61:15:d0:8a:e3:0a:ca:22:
         8b:e3:d2:3a:80:25:2b:91:90:a2:78:ac:43:01:1e:7f:6f:14:
         52:0f:ec:54:26:41:c0:99:c6:35:15:09:4a:de:76:52:7f:12:
         e3:73:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:05 2025 by rpki-client