Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/03lQPxfBcsqaHCIbrBEth52ruQM.roa
File:                     03lQPxfBcsqaHCIbrBEth52ruQM.roa (raw, json)
Hash identifier:          YwrrMBq20RcejhXjiXePZ6LJJBtbggtroM0Yir6NA0U=
Subject key identifier:   D3:79:50:3F:17:C1:72:CA:9A:1C:22:1B:AC:11:2D:87:9D:AB:B9:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       026A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/03lQPxfBcsqaHCIbrBEth52ruQM.roa
Signing time:             Sun 01 Oct 2023 01:29:25 +0000
ROA not before:           Sun 01 Oct 2023 01:29:25 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        61.117.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:25 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=D379503F17C172CA9A1C221BAC112D879DABB903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:bf:3c:ca:41:41:fd:89:99:db:ef:c1:d8:
                    2c:af:6d:43:81:80:a5:69:93:9d:00:22:a3:88:81:
                    dc:2b:21:aa:b3:a1:79:63:e1:08:80:41:33:20:22:
                    b7:29:53:a3:19:93:b5:06:d7:9e:38:43:23:29:38:
                    cb:42:e9:61:55:21:22:d1:25:b0:59:aa:77:07:14:
                    58:4e:96:a5:70:bb:fd:bb:ca:df:23:7c:d0:5c:41:
                    16:3b:e4:66:a0:54:73:8f:6b:e6:25:0b:47:e0:30:
                    fb:fc:31:c3:ba:92:77:b0:01:e7:f3:e7:72:ca:6b:
                    a2:11:f3:ba:c8:ad:35:c7:b0:9f:b5:a7:a6:d0:51:
                    42:03:ac:92:61:b6:68:dd:cc:45:02:69:db:32:1f:
                    11:77:19:e7:cc:d8:50:ff:db:9a:a1:a6:68:75:5b:
                    92:23:11:77:cb:1b:08:04:83:03:ca:a9:a5:e7:78:
                    19:1d:4a:ae:6e:c2:3c:90:ae:d5:26:cb:5b:b1:f2:
                    a9:bd:b0:97:79:f6:01:98:6b:6e:4c:6d:19:cf:f5:
                    f8:62:5b:94:06:9c:e9:7a:53:29:41:da:0e:dc:b1:
                    30:ce:d0:eb:c5:de:c3:5c:17:89:02:ed:74:7b:8f:
                    22:8f:ab:1a:dd:68:9f:76:99:d3:21:0d:0c:a8:ae:
                    72:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:50:3F:17:C1:72:CA:9A:1C:22:1B:AC:11:2D:87:9D:AB:B9:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/03lQPxfBcsqaHCIbrBEth52ruQM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.117.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:96:57:a4:5f:27:04:02:7a:95:08:c6:b9:38:7d:2d:76:
         c5:a5:5c:6d:90:18:b9:cd:79:7a:52:e9:cc:a0:93:64:52:b6:
         43:40:11:e1:26:43:5a:0d:c2:79:ef:27:d0:22:9d:dd:1b:d6:
         8b:30:7d:10:ca:49:aa:05:0e:80:f3:d9:94:ff:bd:ca:9a:65:
         53:7a:2c:bd:15:e9:1f:90:dc:84:9e:a9:cb:95:0e:f9:db:ec:
         84:79:6e:01:d7:0e:4b:e0:5f:7b:9d:72:98:64:a2:1c:27:a0:
         06:c7:b5:10:96:c2:e6:ca:cb:ff:50:e1:d8:97:60:9f:23:4c:
         80:64:60:ab:0e:9a:06:8e:fb:a8:d7:ae:ae:8b:aa:70:13:84:
         74:7b:3e:d5:69:7e:f4:04:92:7b:2b:97:ba:fa:f7:c2:0a:f6:
         5f:e2:21:6d:d8:42:5f:79:fb:42:af:4f:1c:33:f9:7b:17:72:
         ad:fb:bf:2e:a1:97:87:b3:6c:d3:43:5b:ab:ed:9a:dd:1b:bf:
         a8:4f:91:41:09:f8:9c:bc:19:c9:03:98:f2:b8:6a:df:53:bb:
         0c:83:a1:71:e9:62:c9:2e:dc:f2:3c:13:36:ae:1a:90:4b:cc:
         99:27:c0:74:86:7d:eb:38:3e:58:bf:0e:90:b1:20:04:03:65:
         e7:f5:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org