Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/B_MMHJoUUN-JrxIcbGyoT-FUh5M.roa
File:                     B_MMHJoUUN-JrxIcbGyoT-FUh5M.roa (raw, json)
Hash identifier:          I0D+IdmflObm4QOZbkLjsvPhPcAhxPbw0H5HxwzH8+Q=
Subject key identifier:   07:F3:0C:1C:9A:14:50:DF:89:AF:12:1C:6C:6C:A8:4F:E1:54:87:93
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0293
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B_MMHJoUUN-JrxIcbGyoT-FUh5M.roa
Signing time:             Thu 29 Feb 2024 01:31:34 +0000
ROA not before:           Thu 29 Feb 2024 01:31:34 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.29.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Feb 29 01:31:34 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=07F30C1C9A1450DF89AF121C6C6CA84FE1548793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:a9:a7:2f:2f:55:7d:b1:54:03:82:66:08:
                    d9:a3:57:7f:ec:9d:45:1d:34:fe:d3:e4:53:c9:41:
                    76:f5:10:7e:37:19:89:3c:50:82:31:23:72:05:34:
                    dd:ad:38:78:e6:de:ea:53:01:3b:5c:e8:e1:a9:1a:
                    78:e8:e0:f6:18:84:39:7d:49:43:b1:b8:c6:b8:cb:
                    7c:9a:3e:a0:5f:52:81:76:70:98:6f:61:3b:4e:37:
                    27:4f:a4:59:bb:fb:7a:4c:e7:01:f4:ae:66:ea:95:
                    cd:59:50:92:9d:ab:85:ed:18:45:e3:0e:d4:80:2d:
                    44:9d:ad:ae:10:e5:93:6d:d1:0f:33:67:4b:ec:e0:
                    6f:59:c9:08:e5:b4:f6:f5:0e:7e:cd:ce:55:b5:42:
                    f6:3d:cf:db:55:10:ee:11:ed:32:4e:68:ed:e3:f1:
                    26:e6:8d:c4:88:64:e9:4c:65:75:5e:07:83:8c:fa:
                    7f:2a:fe:6a:83:67:63:90:2f:b4:4c:eb:27:c8:9b:
                    4a:27:d9:29:fc:f9:68:e3:83:45:2e:40:36:63:87:
                    82:10:c6:5a:45:78:17:1d:0c:1c:f4:54:e2:e1:c7:
                    66:fe:c2:fe:c0:12:23:56:04:f7:64:dd:fc:8b:0f:
                    7b:90:d3:15:e8:5c:2e:a8:d2:bc:d7:4b:86:28:47:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:0C:1C:9A:14:50:DF:89:AF:12:1C:6C:6C:A8:4F:E1:54:87:93
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B_MMHJoUUN-JrxIcbGyoT-FUh5M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.29.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         09:ed:29:07:97:da:52:01:17:b1:8c:de:6d:c9:f5:b8:b7:ad:
         80:59:90:c6:78:e3:52:bf:15:7f:21:8a:7e:ad:4c:68:b5:08:
         2d:d1:89:9d:b9:b6:8f:75:02:79:1d:df:0a:1a:a0:78:88:2f:
         69:3e:bc:f8:5c:d6:32:bf:5c:ec:30:e2:8e:b3:6b:95:53:c9:
         6c:47:8f:fa:29:a9:a9:1b:bc:0b:8d:26:ae:d1:84:e8:26:4b:
         e9:8d:13:a4:ff:ce:38:de:c9:ef:b6:fe:67:7f:ad:62:85:b4:
         63:98:b8:80:56:7d:21:c2:61:6d:11:18:1f:c0:5b:39:be:14:
         13:67:ff:ff:c0:d2:bd:44:aa:9f:32:48:7d:1c:63:0f:a8:96:
         5f:7d:9f:f3:54:33:da:fa:41:9c:b7:d0:f4:23:f4:f9:a6:3b:
         66:a1:ca:f8:a2:6f:54:fa:1c:ed:b1:b6:33:1e:de:85:22:8e:
         91:ae:39:b1:92:52:9d:eb:8a:c5:e0:e6:36:47:11:f5:87:9b:
         60:8a:35:74:d5:3a:6a:c6:03:28:80:a5:eb:5c:8c:f4:02:8d:
         14:0f:d5:a9:f7:a7:d3:22:ae:6c:24:81:f5:ae:f9:ee:d8:ee:
         90:38:dc:ac:cc:95:03:a0:23:e3:8a:73:1d:83:69:83:05:29:
         03:d5:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:27 2024 by rpki-client on console-ams.rpki-client.org