Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0FBY5EDv1NhV87Ns9oIlIzcNbIk.roa
File:                     0FBY5EDv1NhV87Ns9oIlIzcNbIk.roa (raw, json)
Hash identifier:          zHB3zw2stoVr+r1ccoPD+AADDF98Exs0kzglxwOqsYE=
Subject key identifier:   D0:50:58:E4:40:EF:D4:D8:55:F3:B3:6C:F6:82:25:23:37:0D:6C:89
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02E3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0FBY5EDv1NhV87Ns9oIlIzcNbIk.roa
Signing time:             Sun 31 Mar 2024 01:35:44 +0000
ROA not before:           Sun 31 Mar 2024 01:35:44 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        124.213.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:44 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=D05058E440EFD4D855F3B36CF6822523370D6C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:fb:e5:39:97:d8:51:89:f2:a2:c3:a8:22:
                    c6:e0:73:d4:d2:31:1f:d8:15:55:84:c8:98:28:76:
                    9c:dc:d8:6f:8c:88:0a:53:3d:82:60:d9:21:30:5c:
                    8b:2e:86:a6:c5:62:5f:f2:81:2a:84:19:b5:7f:12:
                    c6:4d:69:5a:2b:f9:34:fd:00:15:9a:e1:81:ea:42:
                    0e:a0:75:61:4c:a9:4d:73:7b:9f:8d:ad:7b:9a:cd:
                    2d:63:21:50:f2:c6:99:db:2a:b3:df:db:32:0d:0d:
                    41:34:58:86:72:52:20:90:8a:b1:9a:f9:2e:3b:ab:
                    ea:07:45:14:a2:72:46:b5:07:2a:4f:58:93:d8:26:
                    17:6c:f8:08:b5:05:64:d4:65:85:e2:ce:7e:29:99:
                    f3:03:32:44:7c:89:0d:14:b7:99:ad:ff:5b:53:15:
                    4b:0a:0c:0d:e8:f3:4b:5b:69:e2:9f:7c:57:e8:54:
                    bb:8e:24:c6:4c:b1:44:06:95:79:3e:ce:39:39:f8:
                    1e:41:d5:7c:ee:59:e9:08:c4:b4:4e:29:13:0c:f9:
                    eb:b9:34:ef:3f:15:45:2f:ee:57:ba:71:58:5d:70:
                    91:3d:09:76:0e:71:fb:21:00:9c:85:08:7d:ef:2e:
                    68:3a:38:11:c3:46:54:90:b2:cf:78:35:ed:7f:46:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:50:58:E4:40:EF:D4:D8:55:F3:B3:6C:F6:82:25:23:37:0D:6C:89
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0FBY5EDv1NhV87Ns9oIlIzcNbIk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:66:91:fa:ce:ae:87:50:bb:5c:a8:45:37:bf:4a:d5:72:
         0a:fe:c7:17:f3:99:34:99:f3:fc:97:9e:9e:99:85:3a:17:87:
         21:14:a1:83:8f:33:66:8d:06:91:ee:f0:d2:e6:c2:93:03:df:
         db:e6:7a:3f:48:bf:11:5a:7c:34:06:38:08:88:2e:53:f2:8b:
         b1:09:a1:42:f8:0c:a2:ba:3e:69:60:96:f4:f3:e4:ac:4c:5b:
         be:d2:04:d9:8c:c7:67:58:17:90:6d:c6:59:c5:78:cc:73:cd:
         e4:c4:a9:24:1f:73:0d:be:12:1a:6e:4b:25:5f:70:ef:00:cf:
         f2:2f:64:62:83:21:28:ed:34:45:58:42:e1:d9:05:3e:ee:0d:
         37:61:dd:c0:f4:eb:c6:2c:67:ea:02:e8:9e:32:01:94:8e:3f:
         0b:a5:8b:b2:6e:91:78:66:29:93:7b:0b:08:7f:52:ec:64:52:
         62:05:c0:73:3e:32:22:e7:74:16:57:6f:ef:2a:da:42:e1:40:
         d1:a7:a6:08:01:9d:30:5d:9a:e8:34:0d:9e:dc:45:a7:7d:47:
         2c:cb:4c:25:05:f9:ba:69:f7:4d:14:ac:66:4a:bf:e5:4f:92:
         4f:16:5a:da:77:2c:c2:57:c8:18:44:74:eb:4b:50:f7:04:46:
         33:65:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org