Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3WKkNC9pRmKLElI8AjtS5tjKv90.roa
File:                     3WKkNC9pRmKLElI8AjtS5tjKv90.roa (raw, json)
Hash identifier:          IR4Ma12TOK/MrtUo0QnE+1RdIqowk1wZceGAAkFLLIQ=
Subject key identifier:   DD:62:A4:34:2F:69:46:62:8B:12:52:3C:02:3B:52:E6:D8:CA:BF:DD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0364
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3WKkNC9pRmKLElI8AjtS5tjKv90.roa
Signing time:             Sun 31 Mar 2024 01:44:34 +0000
ROA not before:           Sun 31 Mar 2024 01:44:34 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.186.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:44:34 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=DD62A4342F6946628B12523C023B52E6D8CABFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:a3:98:ca:b4:26:70:13:4b:29:31:89:b3:
                    21:45:5d:a1:99:01:30:84:11:82:7a:7d:ef:b9:58:
                    0b:7b:61:09:6c:f5:69:cc:d7:5c:83:8f:3d:2a:cf:
                    94:f8:a7:8f:18:a8:e7:6a:a2:90:a7:84:46:67:9b:
                    c5:2f:14:ce:91:3f:3f:1b:c9:34:2d:0a:bd:18:f5:
                    ae:1d:7c:95:a3:8a:fd:4c:5c:fa:23:8d:e7:b8:6c:
                    45:aa:f5:39:ea:9d:27:17:c5:9c:8c:28:3d:65:ae:
                    80:65:2e:86:f5:45:b9:31:b7:34:1a:4a:71:37:fd:
                    4e:51:9d:8c:41:ad:7a:47:ef:27:d7:e9:23:00:9d:
                    d6:da:e0:57:a3:ec:f1:9f:9c:39:2a:aa:2b:2d:b9:
                    bc:3d:5b:ac:45:5e:a0:d7:13:8c:cf:87:6a:b3:2a:
                    b1:c6:e1:83:3d:32:01:50:91:df:6b:97:44:91:8a:
                    f5:00:b8:d7:fb:24:f5:90:bd:84:65:d9:4d:22:4f:
                    4a:5f:ac:31:f1:a8:15:3d:b5:7c:1d:97:56:aa:d7:
                    e8:51:7a:f4:a0:7f:54:4f:d3:5c:64:60:6a:f9:aa:
                    17:2f:10:4d:b5:ce:10:24:d3:6d:93:c5:f8:c7:4e:
                    bf:56:70:a0:a9:e9:37:b9:2d:9a:ca:60:51:76:fc:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:62:A4:34:2F:69:46:62:8B:12:52:3C:02:3B:52:E6:D8:CA:BF:DD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3WKkNC9pRmKLElI8AjtS5tjKv90.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:11:c4:40:b3:94:ac:71:9b:cd:bc:ae:d3:0f:0d:b6:91:
         a3:c8:69:7d:b4:8d:53:60:84:04:fb:58:13:9f:96:d2:eb:0b:
         8e:a2:71:4f:b3:c9:d0:80:43:df:78:ba:59:2b:84:7d:b3:b2:
         df:ba:fd:b3:c0:49:7f:1d:ae:54:79:50:6c:ac:6b:6a:e4:68:
         77:7f:db:96:57:ed:32:d5:76:94:79:e2:97:1a:69:e0:7f:94:
         5b:48:76:b4:75:f8:dd:96:b2:e2:bd:61:b2:83:62:69:37:7f:
         89:7e:3f:ac:60:9b:ca:df:55:e8:09:0b:78:9c:14:bb:c9:6c:
         37:41:d5:73:a1:38:5a:b7:7e:60:a3:5f:49:43:1d:f3:fe:f3:
         87:78:45:fc:47:df:b5:08:a7:5a:e7:fd:82:0c:dc:19:00:88:
         9c:3a:31:db:02:06:df:83:2e:e7:c8:87:29:66:31:7f:6c:f0:
         74:28:96:62:e7:95:99:c5:ff:6e:cb:00:8d:ef:15:09:fc:8d:
         b9:5c:74:66:30:d4:14:55:08:c1:99:cf:01:27:d3:91:55:fc:
         d4:d3:18:4e:e2:17:60:e7:ab:bb:78:0e:06:87:08:ac:de:15:
         1a:7d:d0:d2:0c:77:e7:9a:c8:6a:27:46:7f:7b:b3:26:d2:6b:
         62:b5:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:09 2024 by rpki-client on console-ams.rpki-client.org