Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BviApBtTkJqwK71cf6ZOuOo_0w8.roa
File:                     BviApBtTkJqwK71cf6ZOuOo_0w8.roa (raw, json)
Hash identifier:          vxJnO1+det9mmOjbPbZTxUCb3Cftkekv1QmKpMWEHR0=
Subject key identifier:   06:F8:80:A4:1B:53:90:9A:B0:2B:BD:5C:7F:A6:4E:B8:EA:3F:D3:0F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       037A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BviApBtTkJqwK71cf6ZOuOo_0w8.roa
Signing time:             Sat 31 Aug 2024 01:29:44 +0000
ROA not before:           Sat 31 Aug 2024 01:29:44 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.251.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:44 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=06F880A41B53909AB02BBD5C7FA64EB8EA3FD30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:94:96:2a:4f:fb:35:73:57:4a:9a:4e:4f:
                    83:7b:67:76:7a:6c:2c:6e:b2:cf:a4:b8:5f:8e:a5:
                    1f:3d:e5:f3:6a:38:81:17:ec:f9:10:c5:73:4f:9f:
                    8b:ba:0a:6f:b7:90:a3:92:e1:4d:85:5b:af:3e:11:
                    81:0b:a0:a1:7b:d4:53:d6:cc:4c:62:39:c5:99:fb:
                    b3:30:d4:c8:59:39:b6:97:77:9d:d4:a0:cf:b4:84:
                    30:83:24:09:35:6e:32:89:fd:c5:df:21:f3:a9:f8:
                    27:ce:42:c7:7f:2e:6a:75:60:e1:b8:73:cc:7f:ea:
                    52:fd:ed:56:e1:78:82:13:a6:a6:df:12:c6:ac:39:
                    be:ef:ff:f4:87:94:e6:08:9b:38:b0:78:36:97:be:
                    6d:c3:79:4b:3b:00:d5:0b:09:0e:2b:6d:1d:b3:89:
                    7c:b4:c3:d1:c1:08:05:12:5f:f9:de:b6:66:82:5b:
                    45:8d:13:5e:0b:57:b8:f3:7a:64:e1:a4:0f:49:59:
                    7d:8c:ad:b0:d8:f2:a6:2d:bb:3f:40:04:0e:b4:f8:
                    5e:fc:2e:3b:e4:d2:d4:c4:84:b5:91:ce:f6:66:5d:
                    58:0f:5f:be:04:df:a3:1b:d8:9e:ad:0b:cf:d3:31:
                    d5:8c:20:92:ac:cf:58:1a:7b:85:1c:36:e1:48:45:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F8:80:A4:1B:53:90:9A:B0:2B:BD:5C:7F:A6:4E:B8:EA:3F:D3:0F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BviApBtTkJqwK71cf6ZOuOo_0w8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.251.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:a4:c7:09:2e:3d:2e:82:33:f3:76:ed:01:98:e8:c2:1a:
         df:9d:f2:41:13:93:f1:82:09:ff:31:03:69:29:77:a0:c5:5d:
         5b:f1:77:71:91:6d:14:af:07:cc:da:65:22:bf:30:cb:b4:04:
         ef:d0:34:5a:40:2d:20:a0:5d:13:5b:89:19:05:76:eb:48:85:
         2f:5f:4e:e6:f5:bb:03:c5:49:af:10:78:5a:e0:76:7c:76:98:
         83:41:3a:50:36:35:72:f2:b1:4d:44:14:9d:a5:9b:b3:44:38:
         ea:c3:e9:1e:58:b2:55:f2:b5:80:f9:0c:92:58:ab:ad:c6:91:
         46:1a:4a:15:9a:5a:63:2f:77:60:3d:8f:bf:b1:95:1b:f1:61:
         38:5d:6c:8f:84:fb:9a:87:08:f9:67:e5:8d:79:11:7b:cd:a1:
         2c:91:90:6f:87:38:ea:45:db:b0:c4:09:a4:d0:12:95:ee:51:
         6f:15:61:4b:8d:20:6c:69:4a:b2:31:d2:8f:49:21:70:38:a0:
         aa:9f:df:39:ec:48:64:e6:c9:f1:f9:9b:65:2d:45:a4:8c:1e:
         77:35:11:e3:1c:bf:f5:5c:c0:0e:aa:27:63:d3:d9:da:99:ff:
         3a:f1:c7:8e:fd:01:98:52:64:10:1a:eb:36:94:db:29:a3:92:
         87:97:6b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org