Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5_jL8X37DxqieAP9t2I62R7eyv4.roa
File:                     5_jL8X37DxqieAP9t2I62R7eyv4.roa (raw, json)
Hash identifier:          5wbsMZ8cCTr7vDc7wcijECUOokFdbXP87tdAFmocvaY=
Subject key identifier:   E7:F8:CB:F1:7D:FB:0F:1A:A2:78:03:FD:B7:62:3A:D9:1E:DE:CA:FE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02B0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5_jL8X37DxqieAP9t2I62R7eyv4.roa
Signing time:             Sun 31 Mar 2024 01:29:47 +0000
ROA not before:           Sun 31 Mar 2024 01:29:47 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        114.16.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:29:47 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E7F8CBF17DFB0F1AA27803FDB7623AD91EDECAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:9f:a7:e1:86:ff:ba:3f:5c:05:7e:1a:cc:
                    25:df:5b:3d:d7:af:a5:11:fa:d6:85:43:d9:41:c4:
                    6e:2a:6f:c8:3c:0a:6a:3f:a6:01:da:00:6d:84:96:
                    e0:b9:07:f2:c3:9f:7b:d7:c7:c6:90:7f:76:83:59:
                    80:03:3b:db:a7:ac:8f:a3:23:36:37:c3:86:80:89:
                    07:e2:74:20:e7:78:c2:c3:c8:c9:65:b4:cf:cd:e1:
                    db:e3:05:a6:ce:3f:c8:2c:a2:63:6e:c5:b4:a6:8e:
                    e5:d6:42:14:0f:bc:18:4d:4d:c1:f6:03:4f:59:aa:
                    86:bc:7c:d7:bf:89:89:80:25:0c:68:9c:00:b1:af:
                    85:59:c4:1a:c6:a0:92:58:88:70:1d:f1:38:1b:58:
                    b3:23:5c:6a:06:85:19:b0:a4:ed:b1:4c:80:05:93:
                    fa:17:64:6d:a9:ef:72:22:c2:ca:4a:55:26:47:9d:
                    23:76:b2:fb:5d:7c:06:0b:93:23:00:7c:01:71:33:
                    97:84:1f:cc:5a:5b:34:6b:4c:46:37:64:aa:f0:c7:
                    2f:2d:19:d4:cb:7a:98:30:12:ac:f9:ec:bf:ff:ba:
                    69:75:61:1f:e8:f2:d0:89:d5:c8:a0:cc:d9:9e:e5:
                    8f:7e:f7:7f:89:97:d4:db:68:77:81:98:ad:fa:58:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F8:CB:F1:7D:FB:0F:1A:A2:78:03:FD:B7:62:3A:D9:1E:DE:CA:FE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5_jL8X37DxqieAP9t2I62R7eyv4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:fa:6e:c5:09:e6:eb:bb:c5:a0:01:bf:ad:3f:97:64:a5:a8:
         be:03:3b:cf:8e:e2:7f:38:bc:06:20:ce:55:e9:16:2f:f5:9e:
         29:82:01:65:ed:15:0b:f3:6f:a8:b6:58:43:74:24:86:c3:d8:
         b4:09:2f:8f:fd:ee:24:c6:16:d2:e0:f5:e9:16:51:e2:14:3f:
         7b:eb:d5:46:4b:32:f6:d4:63:c8:56:ea:c7:ec:08:8f:e5:aa:
         4b:37:b6:1d:df:cf:6a:f2:24:a6:b0:31:18:00:45:06:5a:4a:
         46:6c:91:98:cc:de:f1:71:6a:b4:ee:2c:c8:d0:f7:e0:1b:72:
         60:32:16:15:dc:73:52:01:fa:f9:6c:fd:1a:9d:8c:07:47:27:
         4f:14:eb:82:a9:8d:19:f8:e5:d4:95:a9:c5:00:5c:26:5c:97:
         23:9e:c2:cf:67:c2:c9:a3:90:aa:21:6f:c1:d0:61:8d:9f:f4:
         a5:7d:e3:24:db:8a:05:da:5c:50:55:94:fb:f0:0b:9f:ea:d1:
         16:cc:be:f8:67:6a:d7:8c:ad:2f:6e:f0:87:80:20:18:18:a3:
         e8:35:01:ad:e7:0e:ca:4a:1e:73:64:07:9a:80:a3:65:e0:b5:
         09:d0:75:6e:68:3d:b1:48:04:a0:c0:04:7b:54:cb:de:e0:f3:
         e7:5d:b8:dd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICArAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTI5NDdaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU3RjhDQkYxN0RGQjBG
MUFBMjc4MDNGREI3NjIzQUQ5MUVERUNBRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4SZ+n4Yb/uj9cBX4azCXfWz3Xr6UR+taFQ9lBxG4qb8g8Cmo/
pgHaAG2EluC5B/LDn3vXx8aQf3aDWYADO9unrI+jIzY3w4aAiQfidCDneMLDyMll
tM/N4dvjBabOP8gsomNuxbSmjuXWQhQPvBhNTcH2A09Zqoa8fNe/iYmAJQxonACx
r4VZxBrGoJJYiHAd8TgbWLMjXGoGhRmwpO2xTIAFk/oXZG2p73IiwspKVSZHnSN2
svtdfAYLkyMAfAFxM5eEH8xaWzRrTEY3ZKrwxy8tGdTLepgwEqz57L//uml1YR/o
8tCJ1cigzNme5Y9+93+Jl9TbaHeBmK36WC35AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU5/jL8X37DxqieAP9t2I62R7eyv4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzVfakw4WDM3RHhxaWVBUDl0Mkk2MlI3ZXl2NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwByEDANBgkqhkiG9w0BAQsFAAOCAQEAB/puxQnm67vFoAG/rT+XZKWovgM7
z47ifzi8BiDOVekWL/WeKYIBZe0VC/NvqLZYQ3QkhsPYtAkvj/3uJMYW0uD16RZR
4hQ/e+vVRksy9tRjyFbqx+wIj+WqSze2Hd/PavIkprAxGABFBlpKRmyRmMze8XFq
tO4syND34BtyYDIWFdxzUgH6+Wz9Gp2MB0cnTxTrgqmNGfjl1JWpxQBcJlyXI57C
z2fCyaOQqiFvwdBhjZ/0pX3jJNuKBdpcUFWU+/ALn+rRFsy++Gdq14ytL27wh4Ag
GBij6DUBrecOykoec2QHmoCjZeC1CdB1bmg9sUgEoMAEe1TL3uDz51243Q==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org