Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9AEnPB3g4ekBmWFspT883LDFcXE.roa
File:                     9AEnPB3g4ekBmWFspT883LDFcXE.roa (raw, json)
Hash identifier:          Ji2/0/hHGvviOG6xgU1H4uWSEcpM9Oeh9N1+G9fOJ3o=
Subject key identifier:   F4:01:27:3C:1D:E0:E1:E9:01:99:61:6C:A5:3F:3C:DC:B0:C5:71:71
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       032D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9AEnPB3g4ekBmWFspT883LDFcXE.roa
Signing time:             Sun 31 Mar 2024 01:40:40 +0000
ROA not before:           Sun 31 Mar 2024 01:40:40 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:40 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=F401273C1DE0E1E90199616CA53F3CDCB0C57171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:47:bb:83:df:3a:69:03:f6:4b:b4:26:98:
                    e0:db:fa:d8:73:cd:99:ac:3d:fa:56:20:b6:d8:07:
                    cb:df:2b:78:2c:0a:c3:4b:51:04:87:58:7d:9d:e5:
                    37:33:ae:3e:a0:82:c6:93:d4:35:1e:77:0e:6a:ed:
                    83:c1:53:d9:15:45:a0:39:62:a4:f3:bd:0f:bf:36:
                    fe:7d:71:e3:a8:b9:85:b2:7c:31:77:41:16:bd:07:
                    60:ec:d5:a1:19:19:ac:d0:84:17:db:d5:d0:b0:ec:
                    fe:43:6a:dc:66:de:8e:6d:cc:71:0a:a9:67:31:ce:
                    56:f7:13:d7:5e:07:60:aa:d7:78:93:12:b1:dd:da:
                    2a:08:74:2c:37:aa:37:51:88:e7:fa:60:a3:8b:9d:
                    51:81:0c:85:a3:1a:6d:35:85:48:4b:1f:1a:31:60:
                    68:e1:5e:49:55:77:a4:82:0e:d8:ab:bb:62:a0:e2:
                    32:56:04:c6:b6:eb:cd:31:e3:9f:f4:1b:d8:a8:2b:
                    56:49:62:96:a8:0d:2f:ff:89:c7:51:4f:22:a9:59:
                    3f:ab:bb:29:2b:9e:27:60:7c:c4:8a:6b:59:18:1e:
                    e3:eb:a3:e0:66:c6:d1:69:ac:fa:4e:da:8a:64:b6:
                    a0:45:df:fd:21:00:d4:ac:7a:36:6e:f8:25:a1:20:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:27:3C:1D:E0:E1:E9:01:99:61:6C:A5:3F:3C:DC:B0:C5:71:71
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9AEnPB3g4ekBmWFspT883LDFcXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:0d:5d:b3:8a:a4:13:06:22:49:31:30:0d:9a:7e:58:7d:ec:
         34:95:34:d8:29:41:dd:0f:8f:2f:4d:e3:79:45:bf:bd:5a:59:
         e3:09:82:20:44:eb:bc:b9:38:5b:4a:80:48:1a:ed:0f:59:2a:
         2f:7e:e1:8a:9f:f3:1c:43:65:de:ad:b5:1d:e9:6b:fe:88:74:
         dd:f8:df:e3:fb:74:e7:0a:51:39:2e:51:94:c4:d7:e1:f4:99:
         ed:b4:a2:6e:f3:75:f6:96:6b:f1:c0:9c:00:12:79:5c:a6:68:
         12:54:2a:fa:4f:2f:c3:01:df:70:42:92:72:4b:7e:bc:cc:5d:
         f0:06:9f:1a:50:1c:42:b6:5e:f7:6d:32:60:49:84:8d:a0:1b:
         75:80:40:c1:22:8a:0a:bc:66:b6:45:91:d4:75:96:84:f2:bf:
         68:58:09:60:06:78:24:0a:dd:96:cc:38:ec:2c:6d:4b:dd:62:
         ce:a8:30:17:b8:ec:60:c7:1f:72:2b:14:5c:e2:2e:08:b1:25:
         71:f2:29:7d:99:77:15:76:d3:c6:09:4c:8a:79:97:d9:ca:58:
         c0:e3:33:43:0f:a2:02:87:11:b3:ec:ac:8c:af:d3:9c:3e:5b:
         ad:8a:bb:8a:4d:a4:78:87:74:dc:b3:89:93:d5:ee:57:cb:02:
         6f:da:3a:0f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTQwNDBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0MDEyNzNDMURFMEUx
RTkwMTk5NjE2Q0E1M0YzQ0RDQjBDNTcxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwhke7g986aQP2S7QmmODb+thzzZmsPfpWILbYB8vfK3gsCsNL
UQSHWH2d5Tczrj6ggsaT1DUedw5q7YPBU9kVRaA5YqTzvQ+/Nv59ceOouYWyfDF3
QRa9B2Ds1aEZGazQhBfb1dCw7P5Datxm3o5tzHEKqWcxzlb3E9deB2Cq13iTErHd
2ioIdCw3qjdRiOf6YKOLnVGBDIWjGm01hUhLHxoxYGjhXklVd6SCDtiru2Kg4jJW
BMa2680x45/0G9ioK1ZJYpaoDS//icdRTyKpWT+ruykrnidgfMSKa1kYHuPro+Bm
xtFprPpO2opktqBF3/0hANSsejZu+CWhII4BAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9AEnPB3g4ekBmWFspT883LDFcXEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzlBRW5QQjNnNGVrQm1XRnNwVDg4M0xERmNYRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZxnQAwDQYJKoZIhvcNAQELBQADggEBAFkNXbOKpBMGIkkxMA2aflh97DSV
NNgpQd0Pjy9N43lFv71aWeMJgiBE67y5OFtKgEga7Q9ZKi9+4Yqf8xxDZd6ttR3p
a/6IdN343+P7dOcKUTkuUZTE1+H0me20om7zdfaWa/HAnAASeVymaBJUKvpPL8MB
33BCknJLfrzMXfAGnxpQHEK2XvdtMmBJhI2gG3WAQMEiigq8ZrZFkdR1loTyv2hY
CWAGeCQK3ZbMOOwsbUvdYs6oMBe47GDHH3IrFFziLgixJXHyKX2ZdxV208YJTIp5
l9nKWMDjM0MPogKHEbPsrIyv05w+W62Ku4pNpHiHdNyziZPV7lfLAm/aOg8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org