Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0XzbjQ_d6EO75gbI0iuzNbM-aDY.roa
File:                     0XzbjQ_d6EO75gbI0iuzNbM-aDY.roa (raw, json)
Hash identifier:          vXxfnur6DCQoXQqT+yKndayLLx4Teaowf2q/6g/NmQ8=
Subject key identifier:   D1:7C:DB:8D:0F:DD:E8:43:BB:E6:06:C8:D2:2B:B3:35:B3:3E:68:36
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0351
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0XzbjQ_d6EO75gbI0iuzNbM-aDY.roa
Signing time:             Sun 31 Mar 2024 01:42:45 +0000
ROA not before:           Sun 31 Mar 2024 01:42:45 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.157.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:45 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=D17CDB8D0FDDE843BBE606C8D22BB335B33E6836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:ab:e6:00:72:90:8a:f9:26:94:f4:61:60:
                    f7:36:4d:37:eb:67:ac:8d:8d:4a:91:57:d1:e5:10:
                    7b:ef:e1:36:d9:4a:bc:d2:c8:cb:77:26:c8:80:1c:
                    2d:f2:d7:35:2b:f5:76:e1:e5:73:47:35:9c:d3:f4:
                    52:d1:47:a8:18:1f:53:04:2d:36:96:54:7f:11:52:
                    bb:32:26:74:63:b5:c8:d0:86:67:cd:46:bb:a8:6e:
                    48:db:9f:0e:76:c8:0e:66:d4:0c:14:1c:e1:a6:fb:
                    3c:bd:4c:4c:c7:8e:48:66:42:9d:ce:bf:76:a7:87:
                    ea:23:52:c5:2c:b3:a9:57:b5:e4:81:35:4c:6a:8b:
                    f9:d6:78:44:5e:ef:52:25:5f:16:71:4b:20:92:45:
                    0d:6b:c9:61:56:9a:6c:54:1b:92:a2:a7:32:07:68:
                    dc:e3:20:5f:8c:a6:be:e5:b4:40:04:5d:d4:2e:d3:
                    c6:67:f8:5e:ff:86:25:85:6a:e9:6e:fa:f6:ca:4b:
                    e8:b8:6b:87:b0:ae:49:dc:d8:d9:70:a2:d6:ba:42:
                    cd:34:fc:32:68:c9:a8:ed:de:62:2f:b6:a8:88:74:
                    4a:ce:e4:c4:2c:6e:a7:9a:ca:6e:48:0a:f3:b6:33:
                    4d:95:cb:28:65:90:69:a1:b3:69:74:5b:9e:33:28:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:DB:8D:0F:DD:E8:43:BB:E6:06:C8:D2:2B:B3:35:B3:3E:68:36
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0XzbjQ_d6EO75gbI0iuzNbM-aDY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:6b:63:bd:35:5f:07:88:01:49:40:e3:c8:f1:5d:11:fa:
         9c:8e:99:33:0d:7f:74:22:b4:5c:1e:12:a0:56:95:30:05:37:
         9c:80:69:bd:f7:50:3b:ec:f6:69:12:bc:15:90:0f:3d:b3:2c:
         f3:91:f1:cd:b0:41:7d:77:3c:8a:dd:cb:e4:81:c2:54:e4:30:
         1a:57:13:43:a1:4c:7e:9f:b0:a8:a6:58:7b:34:b8:f5:c3:e0:
         df:87:9f:78:4f:7a:74:b4:dc:f7:8a:ab:65:a0:9e:b7:eb:22:
         50:46:0c:b1:09:a8:53:3b:f1:39:96:87:80:c8:b0:82:3a:ce:
         bf:14:dc:bf:ee:06:a6:25:db:24:a9:38:e5:02:26:4d:41:48:
         97:e1:2c:51:6c:b1:18:c9:06:cc:f6:c2:9c:54:00:c8:06:8b:
         4c:45:f0:cf:c5:70:5a:2d:9d:25:12:14:fe:b4:93:3e:8e:69:
         6a:9b:15:ef:20:9f:4f:46:39:8a:4b:70:96:6d:6c:25:7f:87:
         47:0f:f1:13:61:54:25:22:92:2e:69:c7:8f:ac:89:0a:01:4a:
         94:f7:eb:a4:44:dc:38:f7:14:02:c1:59:a1:19:6f:be:18:c0:
         71:66:e8:59:5d:5c:a2:e6:31:1c:51:61:46:0d:dd:69:94:a4:
         da:c0:3a:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTQyNDVaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxN0NEQjhEMEZEREU4
NDNCQkU2MDZDOEQyMkJCMzM1QjMzRTY4MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGKqvmAHKQivkmlPRhYPc2TTfrZ6yNjUqRV9HlEHvv4TbZSrzS
yMt3JsiAHC3y1zUr9Xbh5XNHNZzT9FLRR6gYH1MELTaWVH8RUrsyJnRjtcjQhmfN
Rruobkjbnw52yA5m1AwUHOGm+zy9TEzHjkhmQp3Ov3anh+ojUsUss6lXteSBNUxq
i/nWeERe71IlXxZxSyCSRQ1ryWFWmmxUG5KipzIHaNzjIF+Mpr7ltEAEXdQu08Zn
+F7/hiWFaulu+vbKS+i4a4ewrknc2Nlwota6Qs00/DJoyajt3mIvtqiIdErO5MQs
bqeaym5ICvO2M02VyyhlkGmhs2l0W54zKLj3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU0XzbjQ/d6EO75gbI0iuzNbM+aDYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzBYemJqUV9kNkVPNzVnYkkwaXV6TmJNLWFEWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXSnYAwDQYJKoZIhvcNAQELBQADggEBAJ0+a2O9NV8HiAFJQOPI8V0R+pyO
mTMNf3QitFweEqBWlTAFN5yAab33UDvs9mkSvBWQDz2zLPOR8c2wQX13PIrdy+SB
wlTkMBpXE0OhTH6fsKimWHs0uPXD4N+Hn3hPenS03PeKq2WgnrfrIlBGDLEJqFM7
8TmWh4DIsII6zr8U3L/uBqYl2ySpOOUCJk1BSJfhLFFssRjJBsz2wpxUAMgGi0xF
8M/FcFotnSUSFP60kz6OaWqbFe8gn09GOYpLcJZtbCV/h0cP8RNhVCUiki5px4+s
iQoBSpT366RE3Dj3FALBWaEZb74YwHFm6FldXKLmMRxRYUYN3WmUpNrAOpw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org