Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/uhRAXNBbn7SjI821x4JO5q4J-40.roa
File:                     uhRAXNBbn7SjI821x4JO5q4J-40.roa (raw, json)
Hash identifier:          1TEmk6bU83W7ic8kjvdupTyJcOL5EKYjs9UEUd3AqqM=
Subject key identifier:   BA:14:40:5C:D0:5B:9F:B4:A3:23:CD:B5:C7:82:4E:E6:AE:09:FB:8D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       044C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uhRAXNBbn7SjI821x4JO5q4J-40.roa
Signing time:             Wed 18 Dec 2024 02:24:04 +0000
ROA not before:           Wed 18 Dec 2024 02:24:04 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        27.91.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:24:04 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=BA14405CD05B9FB4A323CDB5C7824EE6AE09FB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:c3:0d:1f:a5:e8:44:58:63:78:27:72:e0:
                    f9:6d:6a:13:3c:3e:6e:8c:b7:21:92:5f:29:15:f5:
                    d3:0f:57:1e:c2:f6:0b:13:c6:d9:f7:1d:5c:03:09:
                    17:f1:7c:9b:34:ff:95:8b:5e:93:75:e6:30:a1:73:
                    ef:1e:08:64:1e:88:16:d5:8a:b8:f4:db:3c:55:dc:
                    e3:98:a3:37:85:60:ff:de:a3:13:d4:fe:c3:c4:5d:
                    00:3b:a9:9a:d4:00:5b:2e:11:83:62:e6:b6:5f:e1:
                    58:31:86:3c:69:d7:b9:3f:c7:2a:e7:b2:be:a9:45:
                    b8:84:f9:57:d1:af:a3:bb:79:87:69:69:65:93:91:
                    92:61:f7:fa:73:16:d9:0e:97:94:60:55:84:79:f4:
                    e1:a6:ea:6b:59:00:fe:7c:46:e2:46:b4:2e:ef:20:
                    fb:37:db:10:f3:81:b2:b4:65:26:28:4f:75:f0:cc:
                    cd:d2:2e:81:c0:a1:96:dc:8c:04:97:22:a8:e9:4b:
                    c8:c2:1c:0b:0f:56:e8:19:b2:2c:53:43:6e:91:90:
                    b8:63:e0:b1:d7:87:28:9d:bb:88:7c:21:f6:0e:83:
                    25:4a:07:2c:5b:4a:8d:99:e0:f0:55:d1:ba:a2:a4:
                    48:30:b2:30:11:fa:97:f3:ba:f2:7b:93:2d:63:8f:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:14:40:5C:D0:5B:9F:B4:A3:23:CD:B5:C7:82:4E:E6:AE:09:FB:8D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uhRAXNBbn7SjI821x4JO5q4J-40.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:6d:27:c4:1f:3e:d7:98:e4:f3:d5:2c:5e:5b:a5:d8:45:c3:
         96:4a:29:a8:db:f1:2b:4a:be:ab:7d:72:3c:55:c6:95:79:83:
         e9:72:5b:38:24:00:19:47:c9:a6:81:66:7d:fb:6c:3d:24:25:
         92:26:0c:91:4d:ca:55:dc:4b:2a:9e:b9:ee:76:09:48:68:40:
         57:7a:fd:4a:d9:fa:17:0a:a1:fe:58:8e:c3:f8:dc:bf:1c:a1:
         dd:8d:96:0d:2f:af:e5:3a:fd:9e:71:75:e2:ed:e8:5b:f4:23:
         7c:40:07:57:ba:e0:c1:24:be:4e:28:c9:52:6d:30:dd:1a:51:
         0d:73:22:90:28:15:1c:ef:11:6f:08:f6:bb:d7:65:63:20:82:
         90:84:8a:94:cb:98:44:8f:7d:c8:63:17:f0:71:e7:ad:b6:99:
         54:97:db:1b:b1:20:f6:c3:d5:96:c5:10:33:f2:6a:b0:b4:37:
         39:36:62:88:e6:b6:af:06:37:3e:06:07:c2:1e:3f:d3:90:11:
         6b:cf:e8:54:10:6a:83:05:9c:71:f1:fe:37:ab:26:71:70:40:
         0a:ab:36:f8:c3:04:af:7f:e2:63:1d:0b:02:f1:51:17:9f:ae:
         8c:18:fb:d3:12:61:12:fa:ef:76:41:90:c3:e2:7d:4e:4c:89:
         44:d2:f3:5c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjI0MDRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJBMTQ0MDVDRDA1QjlG
QjRBMzIzQ0RCNUM3ODI0RUU2QUUwOUZCOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi48MNH6XoRFhjeCdy4PltahM8Pm6MtyGSXykV9dMPVx7C9gsT
xtn3HVwDCRfxfJs0/5WLXpN15jChc+8eCGQeiBbVirj02zxV3OOYozeFYP/eoxPU
/sPEXQA7qZrUAFsuEYNi5rZf4Vgxhjxp17k/xyrnsr6pRbiE+VfRr6O7eYdpaWWT
kZJh9/pzFtkOl5RgVYR59OGm6mtZAP58RuJGtC7vIPs32xDzgbK0ZSYoT3XwzM3S
LoHAoZbcjASXIqjpS8jCHAsPVugZsixTQ26RkLhj4LHXhyidu4h8IfYOgyVKByxb
So2Z4PBV0bqipEgwsjAR+pfzuvJ7ky1jjzn5AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUuhRAXNBbn7SjI821x4JO5q4J+40wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3VoUkFYTkJibjdTakk4MjF4NEpPNXE0Si00MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAbWzANBgkqhkiG9w0BAQsFAAOCAQEAOm0nxB8+15jk89UsXlul2EXDlkop
qNvxK0q+q31yPFXGlXmD6XJbOCQAGUfJpoFmfftsPSQlkiYMkU3KVdxLKp657nYJ
SGhAV3r9Stn6Fwqh/liOw/jcvxyh3Y2WDS+v5Tr9nnF14u3oW/QjfEAHV7rgwSS+
TijJUm0w3RpRDXMikCgVHO8Rbwj2u9dlYyCCkISKlMuYRI99yGMX8HHnrbaZVJfb
G7Eg9sPVlsUQM/JqsLQ3OTZiiOa2rwY3PgYHwh4/05ARa8/oVBBqgwWccfH+N6sm
cXBACqs2+MMEr3/iYx0LAvFRF5+ujBj70xJhEvrvdkGQw+J9TkyJRNLzXA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:27 2025 by rpki-client