Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7UYkar5Lk_Ycj7O7LNYxqpgReKU.roa
File:                     7UYkar5Lk_Ycj7O7LNYxqpgReKU.roa (raw, json)
Hash identifier:          k+ntgyWg3dmCxyg/pLTMp+zQVIeXQ9hujBWVBOwz4Pc=
Subject key identifier:   ED:46:24:6A:BE:4B:93:F6:1C:8F:B3:BB:2C:D6:31:AA:98:11:78:A5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       025A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7UYkar5Lk_Ycj7O7LNYxqpgReKU.roa
Signing time:             Sun 01 Oct 2023 01:29:16 +0000
ROA not before:           Sun 01 Oct 2023 01:29:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.251.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=ED46246ABE4B93F61C8FB3BB2CD631AA981178A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:92:47:df:37:f7:f7:6c:2c:38:33:b0:6f:
                    40:9b:4d:fb:df:c7:5f:1f:98:34:22:c4:e1:b9:15:
                    16:8f:4d:aa:a9:68:58:a4:ad:27:4c:42:3f:42:38:
                    49:84:eb:0f:0f:d3:04:4b:50:a0:a6:5b:4b:8c:19:
                    78:18:af:02:9d:db:0b:54:31:15:1c:8c:94:de:3d:
                    eb:e7:a4:6b:66:39:68:ee:99:9b:b3:ae:d5:ce:28:
                    a7:60:e2:6f:57:e5:20:b9:95:5d:5d:67:ad:e0:ab:
                    e7:01:de:06:2b:93:85:32:2c:2e:4d:94:4c:96:64:
                    dd:31:bc:f7:43:0f:5d:8f:1c:7e:29:f7:25:0b:5f:
                    f8:b3:08:c6:81:5a:b0:4c:55:ba:7f:ae:43:70:27:
                    84:f5:43:04:e1:35:61:b1:cc:b8:b6:ed:8d:90:3d:
                    32:fe:5c:b7:2e:9a:21:2b:6b:28:83:5f:23:53:4d:
                    02:54:4e:44:b0:2b:a4:fe:09:c6:ec:b6:de:d0:b0:
                    d7:8b:a4:a1:e3:42:88:a2:cf:fa:48:99:83:3d:de:
                    34:b8:2d:80:71:91:ca:85:2b:0f:ee:a0:67:d3:ba:
                    41:d5:11:01:18:f2:2f:71:2d:29:d6:57:ca:46:31:
                    d4:4f:f3:d3:bd:fd:9d:d1:46:c8:1d:e9:c3:98:42:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:24:6A:BE:4B:93:F6:1C:8F:B3:BB:2C:D6:31:AA:98:11:78:A5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7UYkar5Lk_Ycj7O7LNYxqpgReKU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.251.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:68:c5:22:ec:ce:6b:2b:28:71:fa:65:1f:a1:29:95:aa:e9:
         11:e2:3e:46:2e:66:df:1f:de:34:a2:70:8c:24:f7:19:cb:1f:
         fa:2a:39:95:c2:01:32:01:c7:8f:1b:92:c5:25:24:5f:e1:13:
         8b:09:3c:1a:2d:94:0c:d2:a2:ae:fe:67:86:64:b1:ef:27:c6:
         34:9f:3b:2f:cf:3e:cb:f3:a9:27:89:9c:84:17:17:64:47:a8:
         e8:5f:ca:70:b3:23:c3:6c:2e:fe:9d:82:44:14:9f:21:7f:b6:
         ae:a2:a5:88:98:c1:fb:e6:f6:d8:4c:38:e2:e0:ae:df:c4:8e:
         65:fc:e0:fb:37:d4:4a:6f:12:30:ce:6b:21:b7:ff:16:39:76:
         29:10:e2:76:86:b3:94:6e:9d:e4:c3:f5:08:dc:ce:93:76:29:
         c4:df:ee:fa:80:1c:05:dd:7a:f1:29:cf:e5:5d:07:f9:c9:a8:
         f8:f0:81:0c:bf:da:6f:d1:cd:a8:90:de:a0:2f:72:fc:e9:72:
         d3:16:c6:83:5f:6b:99:57:d0:38:8a:e5:a4:da:a0:17:85:fd:
         80:32:df:f6:9c:3e:4f:00:55:88:9d:36:e9:75:92:55:25:60:
         be:db:c0:62:96:ad:62:ce:44:e8:61:7a:d0:8b:ae:60:f3:5f:
         eb:02:5e:da
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzEwMDEw
MTI5MTZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVENDYyNDZBQkU0Qjkz
RjYxQzhGQjNCQjJDRDYzMUFBOTgxMTc4QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6VpJH3zf392wsODOwb0CbTfvfx18fmDQixOG5FRaPTaqpaFik
rSdMQj9COEmE6w8P0wRLUKCmW0uMGXgYrwKd2wtUMRUcjJTePevnpGtmOWjumZuz
rtXOKKdg4m9X5SC5lV1dZ63gq+cB3gYrk4UyLC5NlEyWZN0xvPdDD12PHH4p9yUL
X/izCMaBWrBMVbp/rkNwJ4T1QwThNWGxzLi27Y2QPTL+XLcumiErayiDXyNTTQJU
TkSwK6T+Ccbstt7QsNeLpKHjQoiiz/pImYM93jS4LYBxkcqFKw/uoGfTukHVEQEY
8i9xLSnWV8pGMdRP89O9/Z3RRsgd6cOYQhfdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7UYkar5Lk/Ycj7O7LNYxqpgReKUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzdVWWthcjVMa19ZY2o3TzdMTll4cXBnUmVLVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfS+wAwDQYJKoZIhvcNAQELBQADggEBADFoxSLszmsrKHH6ZR+hKZWq6RHi
PkYuZt8f3jSicIwk9xnLH/oqOZXCATIBx48bksUlJF/hE4sJPBotlAzSoq7+Z4Zk
se8nxjSfOy/PPsvzqSeJnIQXF2RHqOhfynCzI8NsLv6dgkQUnyF/tq6ipYiYwfvm
9thMOOLgrt/EjmX84Ps31EpvEjDOayG3/xY5dikQ4naGs5RuneTD9QjczpN2KcTf
7vqAHAXdevEpz+VdB/nJqPjwgQy/2m/RzaiQ3qAvcvzpctMWxoNfa5lX0DiK5aTa
oBeF/YAy3/acPk8AVYidNul1klUlYL7bwGKWrWLOROhhetCLrmDzX+sCXto=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org