Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/42mn_u_7gl35YVH-Sc9ZxMbSjU4.roa
File:                     42mn_u_7gl35YVH-Sc9ZxMbSjU4.roa (raw, json)
Hash identifier:          DR9iByVL2hnAeH312hZRzXN0bprmpYgIWL76rcpl/30=
Subject key identifier:   E3:69:A7:FE:EF:FB:82:5D:F9:61:51:FE:49:CF:59:C4:C6:D2:8D:4E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02B7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/42mn_u_7gl35YVH-Sc9ZxMbSjU4.roa
Signing time:             Sun 31 Mar 2024 01:29:50 +0000
ROA not before:           Sun 31 Mar 2024 01:29:50 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        118.154.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:29:50 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E369A7FEEFFB825DF96151FE49CF59C4C6D28D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:9b:96:f9:d4:57:bd:b7:cb:03:c4:46:c1:
                    cf:ba:61:16:ba:6c:16:05:1f:8d:e6:b3:b1:0b:24:
                    68:ec:6c:ce:34:24:22:ce:6a:55:e6:ac:b3:de:98:
                    bb:1c:ea:80:ec:7c:37:80:91:24:61:20:ac:73:c4:
                    0a:69:85:7d:4e:75:f7:f3:f6:99:f0:7a:c9:a9:60:
                    5b:0f:3d:b0:e4:e9:44:e7:32:fe:96:eb:e7:0e:38:
                    c8:1b:d5:28:0b:03:28:85:59:5b:02:7a:b4:f5:dd:
                    a6:77:bd:51:40:e4:fe:0a:30:fa:a5:d2:8c:f6:99:
                    c8:df:68:d6:24:91:10:cb:45:d7:cd:0e:06:67:b0:
                    c5:26:ce:b4:71:9f:94:6a:4c:4f:79:c8:1c:67:a2:
                    53:e8:56:2b:67:94:17:a1:08:df:5c:c7:dc:8a:65:
                    2f:f4:12:59:1d:34:80:81:48:f9:66:a1:44:f1:af:
                    5a:7a:2c:00:66:82:27:28:3a:7d:73:f0:25:ea:d3:
                    5e:9a:3c:22:a9:52:c5:d3:1b:98:37:fe:ce:4f:e2:
                    7f:56:b2:70:f4:68:7c:8e:b5:e2:2d:06:d7:59:01:
                    76:9d:4a:83:77:6e:b0:b0:57:a4:00:c9:f1:67:41:
                    98:03:b4:d6:e3:b2:c9:50:61:4d:6f:0d:a2:7b:cd:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:69:A7:FE:EF:FB:82:5D:F9:61:51:FE:49:CF:59:C4:C6:D2:8D:4E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/42mn_u_7gl35YVH-Sc9ZxMbSjU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:b2:ba:8f:17:c8:f8:5f:cc:75:47:bb:00:63:2c:d1:47:
         a5:c7:e9:5e:ce:52:d8:80:0a:35:91:bd:29:70:81:6d:5d:85:
         ac:11:3b:a0:31:1b:87:45:f6:ac:4b:b6:07:10:3a:46:f7:62:
         e9:2c:6d:a4:ef:22:b2:d8:5c:df:e4:87:f2:1d:a8:34:e6:66:
         ea:ca:32:6c:8a:64:08:5d:92:97:a6:ba:d9:c4:4d:67:f4:1d:
         4b:08:59:e1:ea:aa:fd:a0:a0:fd:bb:00:66:bf:8c:e4:aa:a6:
         09:d2:3f:c4:59:09:90:a3:3d:59:d4:9f:a0:c2:63:11:c7:94:
         54:ca:4e:22:ba:6b:36:bd:dc:b3:3f:80:e1:fe:48:f6:d1:80:
         70:66:08:34:7d:fd:22:c1:bb:e8:06:52:77:8c:ee:e0:f7:fe:
         2e:dc:86:50:21:73:c9:40:3b:90:cd:8d:10:88:58:d9:03:f8:
         01:fd:20:aa:7e:92:20:00:b1:a3:db:1d:5f:e5:bb:95:b0:4b:
         be:f1:20:dd:08:f1:6b:87:4e:e3:ea:5c:f2:0e:18:27:2a:f1:
         3e:12:1f:df:30:eb:fb:a4:64:9c:35:4d:76:2d:63:cd:df:c3:
         a4:76:0b:fc:5a:25:88:82:b5:83:ea:6b:7b:57:25:3f:75:89:
         2c:76:6c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org