Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ub5kV2eNcrxKQ6v1EvhsLEKECPM.roa
File:                     ub5kV2eNcrxKQ6v1EvhsLEKECPM.roa (raw, json)
Hash identifier:          OZuQ6isWquUuBoubNSe0990hQsUwVKTPGB71Un8nB68=
Subject key identifier:   B9:BE:64:57:67:8D:72:BC:4A:43:AB:F5:12:F8:6C:2C:42:84:08:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02FD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ub5kV2eNcrxKQ6v1EvhsLEKECPM.roa
Signing time:             Sun 31 Mar 2024 01:35:56 +0000
ROA not before:           Sun 31 Mar 2024 01:35:56 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        111.110.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 01:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:56 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=B9BE6457678D72BC4A43ABF512F86C2C428408F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:42:3a:39:5b:c0:0c:f8:81:ca:46:d1:08:
                    d3:97:dd:f6:a3:a0:79:f8:49:a9:80:d7:56:33:71:
                    f0:4f:95:92:66:6f:99:7c:b2:7a:12:c9:5e:7f:fd:
                    85:8e:57:a6:98:08:5e:8c:28:f8:bf:d3:12:fc:ab:
                    e8:54:b7:93:e8:d7:c0:77:5b:2b:d6:b0:77:73:56:
                    a1:15:b0:8a:36:86:31:18:12:bf:c8:e5:f7:a5:de:
                    2d:ae:06:36:5f:d8:12:22:73:8c:53:ed:15:4b:17:
                    99:dd:b5:9b:6d:42:42:e6:28:61:69:e2:1d:ab:6a:
                    65:5b:59:7a:67:71:8c:f5:e3:51:ae:d4:96:12:a7:
                    18:a7:bb:f4:61:51:a4:37:e9:b0:b5:98:47:ca:a5:
                    b5:12:bf:8a:87:bc:4a:d2:48:8e:0e:52:71:ac:f5:
                    74:75:d4:71:98:20:e1:bd:72:ff:df:96:a6:35:7c:
                    fd:6a:34:06:4e:5b:1b:8d:bc:b1:eb:42:04:47:9d:
                    7f:41:4a:17:cd:f0:92:31:84:f9:88:92:2e:d4:92:
                    d6:9b:6b:48:20:4b:5a:b0:de:8f:3a:c4:d0:c3:65:
                    96:7b:40:97:6b:55:2a:90:cb:9e:56:20:79:cd:54:
                    81:33:92:f0:7d:36:07:b1:ca:a0:9d:ab:03:08:e5:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:64:57:67:8D:72:BC:4A:43:AB:F5:12:F8:6C:2C:42:84:08:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ub5kV2eNcrxKQ6v1EvhsLEKECPM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:5a:18:ae:23:b1:43:01:65:e9:0c:33:68:49:c0:5c:fc:
         ab:6d:2c:85:aa:be:82:f4:9c:64:fc:c8:a2:6a:83:bc:7e:df:
         d1:a8:98:28:e8:70:7a:31:00:71:2b:c6:99:0a:96:52:98:3e:
         19:e5:50:6a:8d:84:fe:b2:0f:5a:f6:ca:ae:a7:a6:b3:74:c8:
         88:d2:44:6a:cf:e3:df:d5:f5:f7:9d:8c:e0:20:60:b6:ef:d8:
         34:64:1b:a1:e9:fd:cf:63:12:4e:23:a7:2e:ea:db:ad:d7:da:
         d2:eb:8a:60:58:ed:e0:38:59:44:df:49:6a:d8:9c:da:d1:14:
         bd:1d:06:dd:76:4a:5b:8a:f0:c2:50:71:97:76:65:3f:f2:b0:
         c5:bf:4e:ff:cf:25:dd:ff:46:e1:40:8f:01:be:b1:fd:2c:68:
         d9:06:ff:b2:3e:b3:3a:83:5b:ec:53:66:62:f7:89:00:b5:55:
         b6:5c:24:d9:af:df:10:ec:48:3a:c4:ec:04:28:47:98:9a:f2:
         03:b7:19:4c:47:63:ce:46:f2:31:84:f9:ae:2e:12:75:43:69:
         96:13:09:e1:c8:0f:da:29:54:78:f9:32:e1:c5:37:3b:87:ef:
         db:f5:e5:27:ae:a4:42:32:30:2e:fb:53:11:a6:ff:b7:01:05:
         e2:a9:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 08:53:09 2024 by rpki-client on console-fra.rpki-client.org