Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3x35wyMwtvMDR1ysqAkaXHy1Q2o.roa
File:                     3x35wyMwtvMDR1ysqAkaXHy1Q2o.roa (raw, json)
Hash identifier:          mZo+t71TFSczVDSS75i7vyDr5d1rvjMR16Vw7BkCvcc=
Subject key identifier:   DF:1D:F9:C3:23:30:B6:F3:03:47:5C:AC:A8:09:1A:5C:7C:B5:43:6A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02C2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3x35wyMwtvMDR1ysqAkaXHy1Q2o.roa
Signing time:             Sun 31 Mar 2024 01:33:19 +0000
ROA not before:           Sun 31 Mar 2024 01:33:19 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        119.105.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:19 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=DF1DF9C32330B6F303475CACA8091A5C7CB5436A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:fb:9d:b6:a1:5b:0a:0c:23:3b:16:86:d9:
                    a8:27:fc:59:d2:06:78:5b:44:22:72:40:4f:9c:1c:
                    c2:11:c7:f8:9e:9a:40:36:07:e8:28:38:fe:40:9f:
                    90:b9:ed:ef:f0:3d:69:14:0e:fe:05:14:e9:8b:d7:
                    a5:25:bc:23:9e:c8:b1:33:23:5b:69:44:ef:92:27:
                    2c:a2:50:eb:f5:ec:42:a3:47:2b:b8:f5:2f:74:67:
                    78:7c:ee:d5:f3:cf:02:4d:2e:22:61:84:30:3b:7d:
                    99:b6:35:39:26:c5:87:74:48:7d:ab:a8:14:64:65:
                    09:50:30:63:9f:51:96:9a:e7:ea:1e:ec:fa:ed:c3:
                    b4:ec:5e:d9:c0:c9:41:57:17:1b:8a:a7:17:b8:fb:
                    5e:6b:9b:ba:24:2a:4f:84:24:a8:86:d9:c8:5a:73:
                    87:14:7e:9d:eb:ab:73:f8:92:84:13:fc:22:51:a9:
                    91:5a:86:45:46:34:93:c6:ed:dd:e1:12:df:cc:3e:
                    3a:8f:c5:0f:35:de:f2:14:bb:30:2c:55:fd:44:0a:
                    2e:bb:93:4a:a4:5d:23:db:58:45:7c:81:5b:4f:a5:
                    ab:5d:d6:4b:00:5e:cd:e2:69:1f:99:f2:8a:d5:71:
                    bd:6a:19:97:24:71:f7:4c:c9:ad:92:6b:fe:40:9a:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1D:F9:C3:23:30:B6:F3:03:47:5C:AC:A8:09:1A:5C:7C:B5:43:6A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3x35wyMwtvMDR1ysqAkaXHy1Q2o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:90:59:ec:e9:c2:65:b2:dc:cb:b2:75:67:3c:b8:21:64:
         44:61:da:4f:da:04:fe:d1:81:80:94:9b:26:68:c1:71:70:a2:
         92:d1:40:80:03:6f:fb:cc:9b:c9:ef:70:3c:d9:be:3a:09:fb:
         34:e4:f7:e8:7e:00:8e:e0:36:67:b6:83:66:04:28:be:c8:76:
         c6:55:77:06:f4:c8:03:90:a5:fb:2c:af:de:54:bc:ff:b0:80:
         21:58:d2:d5:c4:95:f2:f2:4a:18:cd:85:3c:5f:0d:e2:e4:57:
         b1:94:42:78:36:8d:a7:b0:06:ef:b8:85:5b:13:d8:8a:83:62:
         5d:87:f8:60:2b:0a:54:b1:e3:a3:53:d1:6b:ac:a5:d0:f5:29:
         b1:c4:40:b7:9c:fe:90:28:06:03:40:ff:34:24:f0:40:28:6c:
         df:ef:e0:d7:f0:ac:3a:26:ad:e8:75:ea:8a:45:dd:26:bf:60:
         9a:a8:fc:cc:59:36:eb:23:cb:10:ba:d6:fc:19:e9:b7:fe:60:
         c7:49:06:8e:29:e2:29:a4:88:4e:39:26:95:26:0d:d5:b4:6d:
         14:85:a4:2d:77:a8:47:f2:82:61:5b:49:7e:ae:15:19:b8:ab:
         9c:08:72:ae:68:02:ef:86:5d:ce:15:14:56:18:63:00:ce:52:
         2e:18:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org