Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1-NtArLvczLwCkvSAk3gJDLtmWU.roa
File:                     1-NtArLvczLwCkvSAk3gJDLtmWU.roa (raw, json)
Hash identifier:          7Vd3MxKGYpCJ/intNYt/t7xFv27QQ2gxxbqoi6c73B8=
Subject key identifier:   D7:E3:6D:02:B2:EF:73:32:F0:0A:4B:D2:02:4D:E0:24:32:ED:99:65
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       028F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1-NtArLvczLwCkvSAk3gJDLtmWU.roa
Signing time:             Thu 29 Feb 2024 01:31:32 +0000
ROA not before:           Thu 29 Feb 2024 01:31:32 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        59.142.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Feb 29 01:31:32 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=D7E36D02B2EF7332F00A4BD2024DE02432ED9965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3b:b8:5f:23:a4:15:fa:2d:db:43:4b:1c:4c:
                    e5:40:b3:7b:77:23:a5:75:5d:ab:27:94:a5:fe:51:
                    20:ff:bd:8c:68:ed:20:68:15:c5:c2:f0:4b:75:49:
                    04:40:d1:c6:57:f7:c9:cd:90:a0:06:e6:23:69:66:
                    3f:56:c9:ce:a9:56:3c:b8:38:3d:f6:14:fe:f2:ba:
                    1b:3b:58:2c:da:12:bf:97:e6:f1:d9:88:4d:ad:0e:
                    06:17:82:97:32:2f:8f:fe:9a:3d:c7:19:e4:da:1d:
                    42:d0:d1:d8:93:09:22:ea:59:50:5e:4a:ae:78:42:
                    b7:e0:e6:a9:ed:00:02:e9:f7:a5:6b:34:94:e3:4b:
                    58:95:9c:63:93:da:e9:8b:59:a8:2c:5c:6a:f4:b4:
                    85:3e:df:3a:80:d4:d6:4d:bd:91:c4:62:3c:c5:af:
                    ae:bd:27:64:64:8b:69:4a:05:f3:a1:c2:6a:33:7c:
                    cc:a0:0b:f2:21:9a:ed:32:c1:00:ba:29:34:1b:0a:
                    04:35:91:52:1d:f3:2b:c0:18:9b:b5:86:eb:af:00:
                    85:31:97:0d:11:83:d7:ea:56:8b:3d:43:f3:dc:b6:
                    90:c1:a9:4f:4e:3d:5e:e0:7a:4a:82:b8:70:a3:4b:
                    c4:c1:8d:17:8d:5d:10:4d:ec:84:6f:35:2a:78:b5:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E3:6D:02:B2:EF:73:32:F0:0A:4B:D2:02:4D:E0:24:32:ED:99:65
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1-NtArLvczLwCkvSAk3gJDLtmWU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:24:bb:62:40:b9:60:45:42:0b:99:c0:e6:f2:84:c3:21:
         74:53:6e:25:fb:2c:71:8e:9c:29:6f:f0:fb:f7:d0:b8:ea:f0:
         16:96:c1:54:17:67:a4:d6:3d:7e:78:04:59:32:80:84:26:f8:
         75:2d:23:11:fc:bd:9d:5e:d4:5c:2b:b2:94:da:cf:e2:97:72:
         39:81:f4:2b:53:b3:0b:44:fc:a3:3e:53:71:1f:5e:9e:1f:5d:
         18:55:08:9a:4f:1d:b0:67:80:08:85:0b:b8:d0:17:93:fd:bf:
         7e:41:c2:7a:3c:cb:70:08:95:5d:3b:15:04:80:f0:2e:b2:bf:
         c4:31:58:b0:da:ca:e1:57:ef:0a:5f:5f:91:c3:5c:74:48:5b:
         09:d8:b3:05:55:79:74:3b:98:cd:fd:c6:7e:15:49:39:55:35:
         ae:96:77:80:d3:e1:d8:3c:4a:45:e6:c9:f8:bd:e0:80:17:19:
         29:e5:15:8b:91:4f:42:d8:35:37:c0:4a:bb:94:7c:f0:f6:1d:
         43:6d:ed:e1:ec:f3:d4:0c:76:69:8b:2e:e1:dc:c9:df:00:81:
         86:4a:ea:65:64:eb:34:d0:a9:16:cd:11:3d:1e:23:d5:ca:9b:
         aa:b3:32:5e:f9:85:af:dd:73:bb:ab:7a:d0:01:f4:ac:34:2e:
         a7:ae:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:09 2024 by rpki-client on console-ams.rpki-client.org