Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7aCw3tg3TcbH8oOBL2R-73DTyM.roa
File:                     F7aCw3tg3TcbH8oOBL2R-73DTyM.roa (raw, json)
Hash identifier:          r6QPi/5IPlvZIYo2UoSwQ0rBklAy+ahKeFl0YPa6dgg=
Subject key identifier:   17:B6:82:C3:7B:60:DD:37:1B:1F:CA:0E:04:BD:91:FB:BD:C3:4F:23
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0266
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7aCw3tg3TcbH8oOBL2R-73DTyM.roa
Signing time:             Sun 01 Oct 2023 01:29:23 +0000
ROA not before:           Sun 01 Oct 2023 01:29:23 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        27.93.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:23 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=17B682C37B60DD371B1FCA0E04BD91FBBDC34F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:a9:41:8b:93:7d:7c:62:98:32:08:fb:bf:
                    61:80:e9:27:0f:c3:38:c8:91:b3:70:48:5d:18:40:
                    b8:9c:33:0e:0d:c5:c3:b8:00:f4:e6:3d:39:ac:e7:
                    44:ea:a3:25:a4:7f:f6:ae:45:6d:ce:f7:3e:f8:85:
                    56:f8:33:7f:6a:f6:0c:60:87:ff:99:7c:f3:6f:e1:
                    8c:43:51:26:9d:33:77:d0:79:31:e7:7d:6d:24:b1:
                    1a:1f:25:99:f8:77:38:6d:8e:2e:29:b4:be:aa:2e:
                    91:9d:80:77:a7:de:6e:b5:c8:17:17:0e:c9:b4:d3:
                    00:e9:31:33:d9:64:b8:43:c8:e1:e3:6b:96:11:e6:
                    f2:fb:9c:48:d2:d3:82:38:ea:73:98:c3:82:4d:e4:
                    ca:d3:2d:5e:b7:aa:c9:ae:c7:46:34:b2:c5:3b:cc:
                    15:0c:00:54:76:bc:39:0a:82:8e:ae:20:9d:6b:df:
                    00:86:84:6c:76:ad:34:35:3e:4f:d8:d6:0c:e7:d8:
                    56:f9:42:1a:79:d0:eb:a3:b8:ed:55:ba:48:53:c0:
                    55:a2:48:14:cb:d4:5f:fa:85:e8:15:20:ec:00:c5:
                    02:fc:7a:f6:98:b3:ad:40:31:cc:ac:69:dc:bf:bf:
                    02:5e:a5:5f:75:05:19:80:e6:4b:51:eb:26:86:b2:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:82:C3:7B:60:DD:37:1B:1F:CA:0E:04:BD:91:FB:BD:C3:4F:23
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7aCw3tg3TcbH8oOBL2R-73DTyM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:71:f4:22:b0:81:e6:8a:ec:f9:19:23:6f:71:1d:79:46:a5:
         e2:da:55:95:16:7f:40:65:0d:64:d5:a6:39:6d:78:a0:98:01:
         ec:08:51:72:61:ff:39:cd:18:55:e9:4f:5a:32:95:3f:6e:ef:
         48:16:e9:8a:83:a8:4f:a6:0f:b8:c8:c5:df:d8:1f:19:ad:ca:
         cd:b1:af:9c:e8:89:b4:a1:4e:9f:c7:96:a1:65:f7:06:46:0a:
         98:8a:dc:67:b4:f7:3e:c7:23:f3:4c:3a:5c:86:db:32:45:20:
         b0:89:fa:2c:9e:08:bd:45:f0:2b:53:ff:40:56:56:91:c5:79:
         f8:6b:59:2c:b4:a2:04:c3:64:21:d2:b9:29:26:97:15:2c:7e:
         c1:8b:27:27:80:c2:f5:b8:95:80:9f:e1:e9:9a:cb:c0:6e:84:
         05:c5:67:bc:4b:9a:e1:15:58:c6:7c:32:2d:66:d2:1f:8a:39:
         36:e1:fb:2f:bb:86:be:75:24:e4:61:70:e2:b8:0e:74:b8:bc:
         21:03:81:d7:76:1d:93:12:fa:71:e8:6c:08:44:9b:b9:6b:7b:
         3a:02:c3:04:de:8f:6b:fd:13:0e:ab:af:9d:ea:0b:47:8f:15:
         8f:c1:77:c4:3e:e2:fa:2b:37:f2:c4:76:81:a9:06:45:3a:03:
         91:93:47:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 07:07:27 2024 by rpki-client on console-ams.rpki-client.org