Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1B5FHu0tjc5AeYZuapjPpr9GPX0.roa
File:                     1B5FHu0tjc5AeYZuapjPpr9GPX0.roa (raw, json)
Hash identifier:          9Nz4oadk4s8ZtbU4olzc3gvL4cCgD56NBWD8lGFI6XI=
Subject key identifier:   D4:1E:45:1E:ED:2D:8D:CE:40:79:86:6E:6A:98:CF:A6:BF:46:3D:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       031E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1B5FHu0tjc5AeYZuapjPpr9GPX0.roa
Signing time:             Sun 31 Mar 2024 01:38:46 +0000
ROA not before:           Sun 31 Mar 2024 01:38:46 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        111.102.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798 (0x31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:38:46 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=D41E451EED2D8DCE4079866E6A98CFA6BF463D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:86:44:aa:53:9c:83:a9:00:02:2c:d8:83:
                    5d:98:c9:2e:5d:3e:28:4b:f0:96:18:17:85:4e:ec:
                    f4:f1:3c:5e:43:32:e0:4d:12:5e:7f:da:77:26:80:
                    d6:82:72:9d:a2:85:d6:8f:0a:6d:6b:12:c6:ee:c8:
                    f1:92:d7:24:21:de:56:4c:ea:56:44:89:67:15:a5:
                    e8:42:ed:bb:25:e3:99:06:5d:4f:0c:14:e2:13:25:
                    66:9f:a5:c9:0f:be:37:67:98:06:e6:d5:71:fd:ee:
                    e9:ca:15:35:b0:75:93:15:09:dd:5a:3f:44:cb:78:
                    8d:21:06:39:4f:0b:1c:7f:6c:e0:fe:fc:75:9f:07:
                    ed:17:d2:d7:9a:94:24:c3:f9:96:e6:8d:1a:e7:d4:
                    96:8a:3a:bf:97:d3:e8:b4:d3:fc:32:77:0f:b4:8c:
                    8b:7d:58:2f:90:97:f5:e4:ee:4a:7d:66:3f:44:17:
                    13:04:2e:16:37:28:ca:0f:9a:e2:f3:1d:fb:0e:e4:
                    20:59:55:75:cc:25:42:06:16:ee:a5:56:b1:21:25:
                    f7:ac:8b:f6:28:1b:73:66:25:65:a8:8a:07:90:93:
                    32:98:1e:e6:58:fd:8e:1d:42:c2:75:06:50:97:af:
                    27:8a:d1:b1:d0:9f:74:f3:10:af:4e:53:c7:a1:c5:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1E:45:1E:ED:2D:8D:CE:40:79:86:6E:6A:98:CF:A6:BF:46:3D:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1B5FHu0tjc5AeYZuapjPpr9GPX0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:92:1a:46:5f:49:8a:c9:bb:59:45:f2:df:9d:62:9d:90:37:
         63:b0:c5:4d:24:1b:93:2b:84:b6:dd:fa:17:e6:ce:07:b3:8b:
         f8:cf:46:4d:a4:ea:bc:d9:89:9f:aa:e2:8e:a9:4b:df:b6:76:
         4d:15:cb:82:32:f3:55:a7:73:6c:8b:bc:8f:a5:b6:91:f6:09:
         f4:cc:bd:4b:65:fa:aa:65:de:5f:66:7d:a8:fe:0d:60:22:69:
         b3:91:21:6e:0c:63:d2:50:c0:c9:57:6d:44:2e:bb:a7:e4:af:
         66:33:9b:25:16:76:2f:11:b2:c1:72:70:8a:86:cf:51:84:bd:
         22:c0:0c:ba:24:83:d8:34:12:32:b1:bf:54:21:a0:88:24:ed:
         ec:1c:da:42:7c:b9:fc:b8:27:db:db:69:c6:3e:da:bb:83:b9:
         b5:8c:b4:43:80:84:8e:be:9f:47:bc:18:a1:ff:d9:0c:32:f5:
         7a:6e:50:58:b4:bd:c2:ed:b3:9c:e5:de:44:36:75:bb:8f:8b:
         7a:92:45:72:ce:d7:ed:1b:b0:4f:54:68:db:a0:b4:e9:a5:b4:
         e5:17:f1:76:b1:a4:bd:a3:b0:6a:30:f4:e2:88:a3:ee:7e:ef:
         0f:c4:2c:5b:8c:78:fe:a8:74:be:2d:8a:c5:8a:b0:b5:c6:01:
         14:df:0d:1a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTM4NDZaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0MUU0NTFFRUQyRDhE
Q0U0MDc5ODY2RTZBOThDRkE2QkY0NjNEN0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIxIZEqlOcg6kAAizYg12YyS5dPihL8JYYF4VO7PTxPF5DMuBN
El5/2ncmgNaCcp2ihdaPCm1rEsbuyPGS1yQh3lZM6lZEiWcVpehC7bsl45kGXU8M
FOITJWafpckPvjdnmAbm1XH97unKFTWwdZMVCd1aP0TLeI0hBjlPCxx/bOD+/HWf
B+0X0tealCTD+ZbmjRrn1JaKOr+X0+i00/wydw+0jIt9WC+Ql/Xk7kp9Zj9EFxME
LhY3KMoPmuLzHfsO5CBZVXXMJUIGFu6lVrEhJfesi/YoG3NmJWWoigeQkzKYHuZY
/Y4dQsJ1BlCXryeK0bHQn3TzEK9OU8ehxSrBAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU1B5FHu0tjc5AeYZuapjPpr9GPX0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzFCNUZIdTB0amM1QWVZWnVhcGpQcHI5R1BYMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBvZjANBgkqhkiG9w0BAQsFAAOCAQEAN5IaRl9Jism7WUXy351inZA3Y7DF
TSQbkyuEtt36F+bOB7OL+M9GTaTqvNmJn6rijqlL37Z2TRXLgjLzVadzbIu8j6W2
kfYJ9My9S2X6qmXeX2Z9qP4NYCJps5Ehbgxj0lDAyVdtRC67p+SvZjObJRZ2LxGy
wXJwiobPUYS9IsAMuiSD2DQSMrG/VCGgiCTt7BzaQny5/Lgn29tpxj7au4O5tYy0
Q4CEjr6fR7wYof/ZDDL1em5QWLS9wu2znOXeRDZ1u4+LepJFcs7X7RuwT1Ro26C0
6aW05RfxdrGkvaOwajD04oij7n7vD8QsW4x4/qh0vi2KxYqwtcYBFN8NGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:27 2024 by rpki-client on console-ams.rpki-client.org