Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/HbbxFcGk6epDKfPJZ5m9QY1alNw.roa
File:                     HbbxFcGk6epDKfPJZ5m9QY1alNw.roa (raw, json)
Hash identifier:          lKlh3F0/3yMbKs4okc363/DhZtNEQG231y/MjgGzjms=
Subject key identifier:   1D:B6:F1:15:C1:A4:E9:EA:43:29:F3:C9:67:99:BD:41:8D:5A:94:DC
Certificate issuer:       /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial:       10
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/HbbxFcGk6epDKfPJZ5m9QY1alNw.roa
Signing time:             Tue 13 Aug 2024 18:58:42 +0000
ROA not before:           Tue 13 Aug 2024 18:58:42 +0000
ROA not after:            Thu 07 Aug 2025 09:46:37 +0000
asID:                     151381
IP address blocks:        157.15.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Validity
            Not Before: Aug 13 18:58:42 2024 GMT
            Not After : Aug  7 09:46:37 2025 GMT
        Subject: CN=1DB6F115C1A4E9EA4329F3C96799BD418D5A94DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:69:4f:23:22:7e:61:16:07:bb:10:3e:7f:
                    95:b0:5f:3f:37:4f:20:b8:71:d3:2c:1e:b9:cd:87:
                    c1:db:07:08:8e:85:1c:de:f1:f6:46:c0:70:7d:79:
                    21:5a:fc:bc:1d:8e:1b:d5:08:8d:49:49:d7:33:4a:
                    b9:a6:a1:52:45:b3:c9:18:b0:49:5c:50:aa:76:8f:
                    3d:70:55:3b:08:3c:94:41:04:bb:2f:04:f6:8c:40:
                    31:50:3f:55:8a:ae:f0:31:ec:06:7d:15:89:5f:00:
                    f3:26:da:2a:e4:aa:b8:ff:e2:74:af:53:68:dc:9e:
                    b4:46:f1:e1:d5:a4:21:da:2c:40:a8:51:cb:95:8f:
                    0c:ed:73:05:20:87:0a:48:15:4c:4c:f4:4b:67:22:
                    07:e5:c9:0d:bc:a6:ac:71:f2:09:17:54:5e:8e:94:
                    6e:e5:18:f6:77:91:1b:ee:b3:41:9b:5d:dc:47:7c:
                    32:e9:6a:cc:31:e9:6f:82:59:ab:b0:e2:dd:e6:d7:
                    9a:8f:b7:07:2f:b1:de:e8:7d:e1:70:82:93:a0:63:
                    58:23:bf:df:9d:79:c9:92:3b:a5:df:cf:d4:a0:20:
                    48:3b:ea:c9:32:17:ff:75:13:63:e4:ec:73:73:08:
                    bf:a8:9d:68:37:88:68:88:09:08:42:99:97:3f:79:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B6:F1:15:C1:A4:E9:EA:43:29:F3:C9:67:99:BD:41:8D:5A:94:DC
            X509v3 Authority Key Identifier:
                keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/HbbxFcGk6epDKfPJZ5m9QY1alNw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:20:54:be:79:04:79:a5:53:d1:53:a7:1f:20:17:51:da:bc:
         67:96:2a:8d:9d:04:55:bb:bb:42:bd:ca:8c:e3:e9:7c:a1:f1:
         09:76:5a:cd:7a:85:2c:cd:2d:32:20:50:8b:6f:e5:13:81:0b:
         66:3c:6e:2c:fc:76:68:3a:c6:76:ec:1d:6a:84:1e:09:e4:14:
         3c:89:9b:c6:84:5e:43:b8:98:e6:8c:e7:17:22:ad:f2:4c:88:
         b4:11:b4:71:24:51:ec:4b:c3:99:ce:04:42:46:eb:14:fb:ea:
         9d:43:88:5f:99:74:5d:49:e5:2e:00:ee:c9:9a:a2:a3:82:63:
         42:ed:1b:55:90:6e:43:25:9c:bb:e0:1f:f2:da:81:2c:c9:1b:
         59:26:97:6f:e4:72:83:0f:56:fc:4d:83:b6:35:4f:6a:9e:a5:
         3c:b6:5a:39:fe:9d:10:b1:90:22:6c:37:0d:d4:9e:a5:c7:b4:
         27:fb:60:17:39:78:f8:c5:f2:b7:8e:05:53:7b:fa:08:9f:69:
         14:74:f3:6c:fe:a6:0d:67:91:8d:3b:51:f5:17:9f:f7:81:d2:
         a4:60:53:48:5a:52:9a:5c:f9:15:b2:77:7b:2f:9b:c6:10:3b:
         46:33:6f:06:f6:19:be:4b:a0:1b:c4:72:09:62:77:2b:7d:e4:
         fd:92:dd:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:50 2024 by rpki-client on console-ams.rpki-client.org