Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5yNt8QMr5iHPOj937rPdwgFFA_U.roa
File:                     5yNt8QMr5iHPOj937rPdwgFFA_U.roa (raw, json)
Hash identifier:          HD2J+fFgo/enI857DnURQxbZaI/HpxAw8IeOQZpkofs=
Subject key identifier:   E7:23:6D:F1:03:2B:E6:21:CF:3A:3F:77:EE:B3:DD:C2:01:45:03:F5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       032E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5yNt8QMr5iHPOj937rPdwgFFA_U.roa
Signing time:             Sun 31 Mar 2024 01:40:40 +0000
ROA not before:           Sun 31 Mar 2024 01:40:40 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        182.249.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:40 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E7236DF1032BE621CF3A3F77EEB3DDC2014503F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:b6:f2:12:0f:12:70:34:05:63:15:f0:99:
                    8d:6a:4d:d7:cf:2f:00:fb:2c:9b:b2:3f:a7:d8:71:
                    c2:49:f3:a5:06:fe:71:0b:84:98:3e:5c:07:e8:0e:
                    a8:f0:9e:47:fe:7f:0d:cb:3c:f9:ee:6d:2d:dd:74:
                    43:56:eb:c2:f1:c0:19:81:76:a3:d9:73:7b:b9:af:
                    b3:fb:df:e8:56:fc:33:a5:cc:e9:fc:da:30:66:07:
                    f6:e5:eb:61:58:64:d9:18:e5:37:6c:bf:a9:d8:26:
                    1c:49:b1:a7:96:3f:a3:5e:36:dd:11:77:17:78:bc:
                    7d:60:be:34:e4:e1:4c:75:e8:ef:a8:5d:05:26:ff:
                    39:26:e4:f7:6f:51:86:02:46:31:e8:20:3e:53:c0:
                    16:ff:1b:81:db:cd:ce:60:53:a3:cf:ef:cb:be:98:
                    99:a1:0d:74:16:0d:43:0e:4c:19:16:fe:2c:32:10:
                    12:b2:c1:52:7b:94:03:5c:21:f9:ae:ef:f5:11:81:
                    8f:3e:fe:30:6b:9c:74:23:30:96:59:c5:56:f2:f7:
                    4c:b6:35:56:3c:fc:e4:7f:0a:7d:25:d9:83:a2:81:
                    29:44:95:5a:a8:32:ea:e6:2a:b2:60:16:bd:e1:ab:
                    ef:9a:39:fa:2a:91:05:56:6d:e3:79:ae:c7:f4:67:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:23:6D:F1:03:2B:E6:21:CF:3A:3F:77:EE:B3:DD:C2:01:45:03:F5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5yNt8QMr5iHPOj937rPdwgFFA_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:18:e1:c9:00:79:2f:81:95:3f:01:80:3b:aa:70:40:0e:66:
         9c:b1:14:f2:c1:83:f2:b3:2a:e0:85:1e:e1:a0:4c:6a:14:60:
         03:8b:0d:da:2e:3b:3d:73:5b:75:59:ce:0b:54:81:a1:c1:92:
         71:e1:6a:ba:a2:d5:8e:7a:5a:20:33:70:20:c0:03:10:f7:e6:
         c6:d0:e8:40:b8:42:f5:dd:51:97:e1:f3:ed:97:f1:74:8a:f5:
         77:f0:98:5d:0c:b4:65:f2:75:2e:86:03:37:26:dc:b9:00:28:
         9b:c8:58:fa:05:bf:4d:22:55:e1:31:b4:ed:e5:94:1a:5e:f8:
         d6:c5:cd:ee:11:15:91:ec:de:37:de:9a:f3:78:de:de:82:fc:
         2d:19:2a:d6:0c:22:07:57:c4:2f:e6:44:61:a1:84:02:ae:c1:
         1c:82:00:b8:61:d6:c2:27:73:b6:31:4f:d9:f2:1c:96:77:a2:
         20:5d:74:45:a6:58:4f:80:29:9c:4b:0d:f3:31:96:29:1c:fa:
         a3:c4:5d:9a:f2:9e:33:d1:90:67:a1:16:81:45:b4:c2:b8:86:
         98:08:d0:a2:81:76:46:3d:4f:a4:c9:71:69:bc:40:76:f7:97:
         ef:db:0c:bf:3d:39:f9:77:f4:78:cb:03:d7:19:0f:86:05:13:
         e7:fe:ea:9b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTQwNDBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU3MjM2REYxMDMyQkU2
MjFDRjNBM0Y3N0VFQjNEREMyMDE0NTAzRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4T7byEg8ScDQFYxXwmY1qTdfPLwD7LJuyP6fYccJJ86UG/nEL
hJg+XAfoDqjwnkf+fw3LPPnubS3ddENW68LxwBmBdqPZc3u5r7P73+hW/DOlzOn8
2jBmB/bl62FYZNkY5Tdsv6nYJhxJsaeWP6NeNt0Rdxd4vH1gvjTk4Ux16O+oXQUm
/zkm5PdvUYYCRjHoID5TwBb/G4Hbzc5gU6PP78u+mJmhDXQWDUMOTBkW/iwyEBKy
wVJ7lANcIfmu7/URgY8+/jBrnHQjMJZZxVby90y2NVY8/OR/Cn0l2YOigSlElVqo
MurmKrJgFr3hq++aOfoqkQVWbeN5rsf0Z3BXAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU5yNt8QMr5iHPOj937rPdwgFFA/UwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzV5TnQ4UU1yNWlIUE9qOTM3clBkd2dGRkFfVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwC2+TANBgkqhkiG9w0BAQsFAAOCAQEAjxjhyQB5L4GVPwGAO6pwQA5mnLEU
8sGD8rMq4IUe4aBMahRgA4sN2i47PXNbdVnOC1SBocGSceFquqLVjnpaIDNwIMAD
EPfmxtDoQLhC9d1Rl+Hz7ZfxdIr1d/CYXQy0ZfJ1LoYDNybcuQAom8hY+gW/TSJV
4TG07eWUGl741sXN7hEVkezeN96a83je3oL8LRkq1gwiB1fEL+ZEYaGEAq7BHIIA
uGHWwidztjFP2fIclneiIF10RaZYT4ApnEsN8zGWKRz6o8RdmvKeM9GQZ6EWgUW0
wriGmAjQooF2Rj1PpMlxabxAdveX79sMvz05+Xf0eMsD1xkPhgUT5/7qmw==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org