Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BBkQrsWSfPSohu5eJsM_JP-PUhI.roa
File:                     BBkQrsWSfPSohu5eJsM_JP-PUhI.roa (raw, json)
Hash identifier:          P13bMSicjNVcTeYfKa8EMJRqbmqSeu00jzn5WQFY+kw=
Subject key identifier:   04:19:10:AE:C5:92:7C:F4:A8:86:EE:5E:26:C3:3F:24:FF:8F:52:12
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02F7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BBkQrsWSfPSohu5eJsM_JP-PUhI.roa
Signing time:             Sun 31 Mar 2024 01:35:53 +0000
ROA not before:           Sun 31 Mar 2024 01:35:53 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        111.104.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:53 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=041910AEC5927CF4A886EE5E26C33F24FF8F5212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:23:7e:29:b8:ea:79:07:67:bf:73:d1:8d:
                    08:27:71:8e:a0:fb:12:a4:27:00:17:08:ad:2e:f0:
                    0a:5b:d0:89:3c:8f:5d:6f:de:3b:b0:8e:56:06:36:
                    1b:9f:f5:4a:64:03:0c:8a:83:41:e2:36:71:d0:26:
                    e4:66:83:5d:96:53:df:ef:a2:31:f1:d4:a2:4f:2a:
                    1b:5f:64:20:e7:48:86:fa:be:b2:ae:fd:3c:b1:7e:
                    10:d9:da:b8:e1:74:99:28:1f:d1:11:d3:bc:03:e3:
                    86:7b:ef:a2:a6:87:40:14:3d:80:19:44:37:27:bb:
                    c9:29:46:c2:16:4e:ef:50:22:36:7a:ad:1a:12:56:
                    4d:9c:2a:ad:c9:77:0f:ad:b6:8b:06:5f:b5:6c:95:
                    8b:a3:16:0f:83:b6:de:d7:34:a0:45:14:cb:32:7a:
                    ef:0f:72:56:21:c9:1c:24:78:5c:c2:06:48:28:27:
                    be:89:d7:69:2c:9c:77:ca:fc:c0:e5:c4:79:95:00:
                    f6:4d:4b:28:16:27:6e:a0:ac:fb:b5:cd:92:71:09:
                    a5:e8:e2:e1:f9:a8:de:d0:f2:27:2a:57:fd:4c:64:
                    dd:27:20:30:12:2b:99:a6:1d:4a:24:71:09:ed:9c:
                    18:12:04:48:ae:da:83:a4:2f:05:eb:08:55:05:66:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:10:AE:C5:92:7C:F4:A8:86:EE:5E:26:C3:3F:24:FF:8F:52:12
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BBkQrsWSfPSohu5eJsM_JP-PUhI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:10:42:19:56:80:0a:9e:99:f3:28:1d:c3:38:75:aa:8c:
         c4:2d:6a:63:9e:48:02:af:9c:b4:a5:8d:2e:c7:c1:37:5b:e1:
         dc:d8:e1:86:b2:a0:1f:2d:0d:a8:ac:54:b7:7c:3b:2c:fc:a0:
         67:d6:90:77:90:78:f0:e9:dc:53:58:a7:9c:65:df:13:4a:0b:
         c4:fb:0b:ec:c1:e5:6c:2f:0b:50:3a:ac:1f:cc:39:3c:ce:31:
         87:c6:c6:2a:17:00:7c:de:b5:b5:09:83:03:0b:02:70:db:4f:
         dd:5c:67:e7:e2:d8:01:bd:d9:40:d8:a8:3c:6a:61:30:02:f1:
         59:10:4f:b1:63:c6:9b:c9:8c:79:06:2d:06:fa:15:a7:00:b4:
         10:8e:e1:19:6b:60:31:ef:df:05:50:c4:2c:50:1b:48:d2:ab:
         fc:7e:21:47:76:c7:e6:a0:53:3d:e7:90:2e:89:7c:48:95:6d:
         5d:82:9f:4f:58:7c:4b:ce:d1:34:48:68:e0:df:04:09:aa:32:
         c8:6f:90:3b:81:44:cd:23:a8:be:ef:b7:31:64:e3:e5:e3:e7:
         50:ba:28:e1:17:d9:cb:5d:31:f3:76:56:6d:54:34:88:2b:8e:
         e1:d7:0c:29:73:0b:4b:f6:d9:76:90:d9:cd:4e:30:dd:be:e6:
         25:39:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org