Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6sK30XAs8LGLOAlbc0tDgmb2FnE.roa
File:                     6sK30XAs8LGLOAlbc0tDgmb2FnE.roa (raw, json)
Hash identifier:          ljyVv2Zvz2Fst947WmqGZ6e+cNQC1wXJL8kGZ3iNB0E=
Subject key identifier:   EA:C2:B7:D1:70:2C:F0:B1:8B:38:09:5B:73:4B:43:82:66:F6:16:71
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0397
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6sK30XAs8LGLOAlbc0tDgmb2FnE.roa
Signing time:             Sat 31 Aug 2024 01:29:56 +0000
ROA not before:           Sat 31 Aug 2024 01:29:56 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        121.107.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:56 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=EAC2B7D1702CF0B18B38095B734B438266F61671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:33:2e:ca:ca:bd:5a:4e:37:76:35:81:09:
                    b1:99:ab:34:6c:a1:f1:77:55:86:c7:98:19:79:78:
                    1b:ff:7b:97:8c:34:99:d9:21:65:cf:ce:73:2f:94:
                    10:41:94:36:15:1f:d8:c1:f3:82:c0:e2:fe:39:5f:
                    1f:10:d2:1b:94:6b:a5:cc:a7:4f:d6:8c:67:78:fc:
                    02:b7:89:3a:fc:05:fe:03:5f:8b:2b:6c:1b:f4:ad:
                    7e:2a:c9:06:b4:47:7f:66:59:46:6d:71:6e:60:29:
                    7a:b1:ab:a6:69:4f:3d:93:0d:38:42:13:1c:77:ab:
                    4c:a2:ae:1d:9b:74:4d:02:23:30:f5:49:db:89:cf:
                    18:88:60:4f:8c:68:16:ef:76:36:f5:95:bb:0c:fb:
                    28:70:dd:a0:36:00:b5:4b:8b:9d:bd:81:55:22:99:
                    5b:82:4c:a9:88:4b:28:7f:68:f6:a5:31:a2:4f:f6:
                    e9:60:36:b6:70:98:7e:ae:87:a9:c1:56:7c:18:82:
                    dd:8c:f1:f8:d7:bb:ba:4f:e3:46:0f:ac:2e:f9:53:
                    3a:ca:0b:47:b8:cb:80:37:15:ba:71:18:56:f4:ef:
                    ab:e8:c2:15:b4:f8:38:fb:7d:be:75:b4:4a:6c:51:
                    f4:14:03:86:4c:e9:9c:f7:9a:69:e1:fd:46:e4:67:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:B7:D1:70:2C:F0:B1:8B:38:09:5B:73:4B:43:82:66:F6:16:71
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6sK30XAs8LGLOAlbc0tDgmb2FnE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:c8:d1:e5:fd:97:6f:33:0d:97:71:6d:75:be:93:47:65:
         20:72:55:be:66:de:8f:50:4f:12:ad:4b:37:16:23:4e:67:f5:
         d8:12:26:79:ab:bf:64:82:43:b1:8a:12:55:d5:1b:ff:a3:ba:
         e0:d1:8e:b9:cc:c9:df:d8:95:98:2e:2f:2d:d8:e8:c9:e1:26:
         ce:15:d3:0a:11:6e:a8:ea:37:cd:2b:6d:33:33:a6:4e:1b:87:
         2f:3a:3f:33:95:34:52:eb:9a:50:a7:51:89:f8:49:d2:8f:ae:
         c4:4b:b5:99:0d:d1:76:80:a8:f9:25:13:e9:d8:9e:23:9d:1c:
         95:87:92:5a:88:2b:00:5e:88:b2:7e:10:c4:77:00:bc:e8:ea:
         1f:ed:5e:4b:c1:d0:51:e2:39:87:11:fc:f3:2f:6a:56:72:0b:
         45:8d:67:05:88:a8:e0:c1:05:97:e7:bc:77:8b:17:3f:98:0d:
         cc:c3:ec:df:55:16:dd:64:78:50:ef:60:fa:2b:16:c4:4d:ea:
         98:81:19:06:a1:ee:37:4f:9a:76:fe:b4:53:42:78:c8:2e:89:
         86:38:59:c2:dc:39:45:bb:1d:49:da:d7:97:d6:ec:bc:15:90:
         37:0c:7a:1b:38:99:b7:02:ea:19:70:e8:71:fa:b7:7d:6f:69:
         55:8d:f2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org