Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/C8BTRJ5ZxNydYvx9N8JuIzf9QVk.roa
File:                     C8BTRJ5ZxNydYvx9N8JuIzf9QVk.roa (raw, json)
Hash identifier:          EbCY0MbYW1NXmsNg3isBCEluZGFuAXc5289fb/RdYqw=
Subject key identifier:   0B:C0:53:44:9E:59:C4:DC:9D:62:FC:7D:37:C2:6E:23:37:FD:41:59
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0260
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C8BTRJ5ZxNydYvx9N8JuIzf9QVk.roa
Signing time:             Sun 01 Oct 2023 01:29:20 +0000
ROA not before:           Sun 01 Oct 2023 01:29:20 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        222.227.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:20 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0BC053449E59C4DC9D62FC7D37C26E2337FD4159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:97:cb:b4:d2:7a:ab:aa:5a:2a:7e:3b:04:52:
                    81:f2:37:56:34:69:53:e2:cb:9b:33:47:fe:e7:32:
                    c2:38:39:4c:bd:4e:d3:df:6b:b6:8e:25:68:49:d0:
                    ae:59:7b:8c:9e:a8:34:66:d3:52:6d:81:a1:52:bb:
                    ac:06:69:83:a9:ca:81:f2:a8:06:41:d3:a4:3e:28:
                    e2:af:ed:03:e4:89:a1:44:57:83:24:a9:78:6b:5e:
                    00:5e:6c:37:b3:b1:1a:5c:e5:88:3c:fe:20:d9:ba:
                    ff:84:ae:de:aa:9a:6c:91:ea:8e:47:e7:41:e1:97:
                    09:fe:aa:ef:48:94:55:c5:fb:a9:de:3e:d6:57:bf:
                    a4:3d:3b:53:29:97:b9:7a:ee:47:02:f1:56:21:91:
                    4a:a5:8f:2c:b3:ca:53:52:67:bd:87:17:53:5d:fa:
                    d8:98:da:6f:8f:98:9a:3d:3c:63:44:45:0c:7e:d7:
                    6b:8b:c6:fa:e9:94:e5:17:e1:5d:28:2c:be:ff:be:
                    5c:93:42:6c:ae:7a:ec:f0:ec:98:64:bb:b0:79:bf:
                    76:78:09:aa:a6:6c:0c:88:c9:fa:00:a3:b3:7f:3a:
                    6f:74:09:9b:cd:2c:a2:c1:d9:ea:47:b0:7c:a6:9d:
                    9b:66:0c:21:5a:34:86:3e:73:a4:8f:70:e2:c7:a3:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C0:53:44:9E:59:C4:DC:9D:62:FC:7D:37:C2:6E:23:37:FD:41:59
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C8BTRJ5ZxNydYvx9N8JuIzf9QVk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:82:33:0c:d1:fa:f1:b2:04:05:fd:da:5a:af:72:37:38:
         61:72:76:59:99:42:8a:08:57:b5:14:c6:af:80:74:42:5f:cd:
         2e:ec:bf:b8:65:48:4d:df:b5:77:15:15:61:e2:a9:d2:ac:24:
         55:d4:73:84:57:7f:e4:f3:d1:e0:22:c3:e1:a0:00:99:13:e6:
         8d:96:85:ca:89:2a:e3:d1:49:0d:9d:4d:54:ab:45:21:41:cb:
         13:a1:1f:16:ad:67:ef:00:52:ea:ed:b5:6e:11:57:77:7e:16:
         84:d7:82:32:1d:ef:58:b2:5b:bb:4e:ce:22:17:e5:09:f3:00:
         ac:d4:72:1e:06:73:33:b3:84:ce:0e:b2:3b:0e:29:7c:89:25:
         bc:48:e2:7c:25:8f:c8:59:79:f6:ca:e0:f4:34:56:b4:8b:2a:
         8a:43:b2:d5:9c:68:6c:19:58:5e:c1:44:7c:a9:95:d6:5b:d8:
         4c:bf:63:e8:9b:40:fc:82:64:94:1d:0e:69:bb:2b:9a:6e:16:
         77:8f:15:6f:a7:5c:ec:68:7d:4c:de:da:02:b4:ea:c2:8a:b4:
         66:be:b6:3c:44:a1:a6:f1:1d:0b:18:28:c0:21:c6:20:fc:08:
         df:47:44:cb:ce:2a:7d:f0:ee:0c:f7:16:7d:76:ac:f5:ff:e6:
         e3:76:b2:f7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzEwMDEw
MTI5MjBaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBCQzA1MzQ0OUU1OUM0
REM5RDYyRkM3RDM3QzI2RTIzMzdGRDQxNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWl8u00nqrqloqfjsEUoHyN1Y0aVPiy5szR/7nMsI4OUy9TtPf
a7aOJWhJ0K5Ze4yeqDRm01JtgaFSu6wGaYOpyoHyqAZB06Q+KOKv7QPkiaFEV4Mk
qXhrXgBebDezsRpc5Yg8/iDZuv+Ert6qmmyR6o5H50Hhlwn+qu9IlFXF+6nePtZX
v6Q9O1Mpl7l67kcC8VYhkUqljyyzylNSZ72HF1Nd+tiY2m+PmJo9PGNERQx+12uL
xvrplOUX4V0oLL7/vlyTQmyueuzw7Jhku7B5v3Z4CaqmbAyIyfoAo7N/Om90CZvN
LKLB2epHsHymnZtmDCFaNIY+c6SPcOLHo7ZHAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUC8BTRJ5ZxNydYvx9N8JuIzf9QVkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0M4QlRSSjVaeE55ZFl2eDlOOEp1SXpmOVFWay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDe4zANBgkqhkiG9w0BAQsFAAOCAQEAaLyCMwzR+vGyBAX92lqvcjc4YXJ2
WZlCighXtRTGr4B0Ql/NLuy/uGVITd+1dxUVYeKp0qwkVdRzhFd/5PPR4CLD4aAA
mRPmjZaFyokq49FJDZ1NVKtFIUHLE6EfFq1n7wBS6u21bhFXd34WhNeCMh3vWLJb
u07OIhflCfMArNRyHgZzM7OEzg6yOw4pfIklvEjifCWPyFl59srg9DRWtIsqikOy
1ZxobBlYXsFEfKmV1lvYTL9j6JtA/IJklB0Oabsrmm4Wd48Vb6dc7Gh9TN7aArTq
woq0Zr62PEShpvEdCxgowCHGIPwI30dEy84qffDuDPcWfXas9f/m43ay9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org