Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wq3xHuTEy84Kdy018k-7loTIcyU.roa
File:                     wq3xHuTEy84Kdy018k-7loTIcyU.roa (raw, json)
Hash identifier:          twkpkC3F6idgK0THOxM2sp/faSTogDafrhIce1TZvMg=
Subject key identifier:   C2:AD:F1:1E:E4:C4:CB:CE:0A:77:2D:35:F2:4F:BB:96:84:C8:73:25
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0553
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wq3xHuTEy84Kdy018k-7loTIcyU.roa
Signing time:             Wed 18 Dec 2024 02:44:28 +0000
ROA not before:           Wed 18 Dec 2024 02:44:28 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        210.253.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Dec 18 02:44:28 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=C2ADF11EE4C4CBCE0A772D35F24FBB9684C87325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:fc:bc:45:af:be:f6:5b:10:47:ee:59:88:
                    9a:0c:18:91:41:3c:5c:15:8d:42:33:a1:a2:ef:27:
                    b2:d4:20:69:cf:c0:59:fd:0c:8c:68:fa:09:8b:a5:
                    27:b0:d9:7a:29:d7:cd:dc:15:22:e5:e1:8a:d3:08:
                    15:be:28:a9:0e:35:2e:d1:58:6d:b4:c8:5a:98:53:
                    b9:0b:b1:c2:5f:83:60:f4:98:52:44:e6:57:ff:17:
                    78:7b:be:29:f7:8b:47:31:64:19:28:3b:cf:9a:f0:
                    89:42:bf:4f:a9:59:17:49:94:cf:6d:81:be:12:8d:
                    73:95:ad:c8:eb:d1:11:ee:86:57:8e:81:87:54:aa:
                    33:a5:d2:e1:d2:f8:aa:e4:21:3a:59:b0:c4:31:5d:
                    03:2f:44:e7:74:42:c7:3e:67:77:3d:1d:85:c4:a6:
                    b0:3a:e8:56:53:cd:4e:34:70:84:c4:2e:8b:af:b2:
                    42:e8:ea:7b:72:2a:dc:90:f0:47:10:47:05:ae:4a:
                    d9:76:b5:ca:e4:db:9a:b9:ad:14:e2:cc:c4:26:f7:
                    fc:59:f5:a3:57:b8:85:87:c6:ee:d5:8e:07:8f:77:
                    6c:94:27:73:1e:d2:49:13:07:31:4c:31:ee:fd:87:
                    b4:dc:04:ca:1e:71:ad:38:4d:50:af:7b:7c:d5:59:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:F1:1E:E4:C4:CB:CE:0A:77:2D:35:F2:4F:BB:96:84:C8:73:25
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wq3xHuTEy84Kdy018k-7loTIcyU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:29:82:c8:33:4f:31:87:e0:90:2a:7e:db:e9:fb:46:3c:
         fc:43:3a:a6:bc:c3:b1:30:03:24:d3:18:f4:31:67:23:0a:3e:
         22:c0:78:5b:08:80:a0:78:43:86:7a:6e:10:f4:ee:0f:98:05:
         eb:bc:72:7c:69:59:9c:70:be:8d:dd:6b:ea:80:ee:32:36:b1:
         12:6d:3f:d0:4d:b2:8d:6d:67:9e:6c:9c:86:02:30:3d:f0:51:
         87:5b:31:5d:1f:8f:05:f3:1f:14:a8:c8:43:06:30:69:fe:cf:
         97:d2:96:15:bc:b3:60:17:c2:b7:18:d7:8e:7a:cf:0e:a6:fa:
         b8:ae:5d:0b:10:1c:15:35:49:45:d9:41:75:1d:8a:26:ae:c3:
         58:dd:8b:c1:c6:54:1e:76:4a:3e:b4:27:a6:1c:08:87:06:b2:
         fe:e3:be:65:4a:68:1f:a2:24:b6:73:6d:25:c8:63:ff:75:6f:
         ee:34:22:aa:26:5c:ec:1d:a1:20:53:6e:a3:b9:89:7d:a2:d2:
         c7:b5:fa:d9:c0:8f:33:f7:78:e6:39:26:69:31:27:9f:7b:86:
         50:0d:2c:94:5e:62:33:22:99:11:b8:0b:72:84:85:88:ec:8b:
         f2:40:95:1c:44:89:53:88:90:22:d6:d2:ec:a7:d3:d4:2b:9c:
         fe:ac:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:56 2025 by rpki-client