Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/D-F3cSy1SXWsVQZBYh4vjeqgEYs.roa
File:                     D-F3cSy1SXWsVQZBYh4vjeqgEYs.roa (raw, json)
Hash identifier:          /f87E+R4/E+B0Vm/xx3ScrnQ32kE7uAezAIX1LSG3Os=
Subject key identifier:   0F:E1:77:71:2C:B5:49:75:AC:55:06:41:62:1E:2F:8D:EA:A0:11:8B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       039F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D-F3cSy1SXWsVQZBYh4vjeqgEYs.roa
Signing time:             Sat 31 Aug 2024 01:34:42 +0000
ROA not before:           Sat 31 Aug 2024 01:34:42 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        182.248.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:34:42 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=0FE177712CB54975AC550641621E2F8DEAA0118B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:88:c7:44:56:77:ef:88:f2:99:51:8d:41:
                    1b:62:ac:35:0f:b6:c0:dd:26:f8:54:22:96:3f:21:
                    48:1e:c4:09:1e:b7:f2:a7:26:f5:ab:b1:4a:ac:50:
                    ec:d3:32:ae:35:e7:0f:f7:22:59:9f:e1:cf:6a:f4:
                    f9:41:a0:15:f4:18:fd:d0:90:4a:18:c9:46:e2:d0:
                    c5:7a:47:d6:57:f8:a7:49:7c:cb:dd:14:8d:12:b1:
                    57:49:fb:25:da:42:26:f8:15:3a:26:55:00:c5:71:
                    08:ea:cb:12:24:e4:d8:28:f8:54:ce:3b:83:79:0c:
                    2b:97:24:57:f3:35:e1:e9:6f:3f:68:23:78:70:7c:
                    0e:d4:7c:b6:f9:b4:3d:01:1c:67:cb:14:e6:3e:c6:
                    6a:53:d2:2c:fe:2b:61:12:d8:6b:99:bd:6b:1e:a9:
                    5d:4b:93:5f:6c:5a:26:f8:ff:a9:22:dc:b6:14:4d:
                    83:f1:72:7b:78:90:77:86:71:56:ae:58:0e:cb:fb:
                    53:88:bf:bd:89:51:09:c8:6e:6d:1a:dd:f5:b5:02:
                    23:53:21:eb:e4:ce:bc:ca:90:71:10:25:2e:61:11:
                    ff:b4:6b:37:93:bd:c9:e3:97:56:6a:cd:8e:0c:f7:
                    0e:f8:ac:12:c0:8d:f7:1e:9b:73:0b:db:43:07:35:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:77:71:2C:B5:49:75:AC:55:06:41:62:1E:2F:8D:EA:A0:11:8B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D-F3cSy1SXWsVQZBYh4vjeqgEYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:c0:a0:4f:2a:ec:5e:0c:be:38:55:f9:01:2e:90:83:1a:
         33:b7:64:bb:7f:c4:83:eb:5a:2a:f6:4b:cd:f7:02:51:0e:d0:
         91:b0:cb:55:9b:d9:d5:ae:a0:03:ab:51:23:66:84:2a:f3:7f:
         b8:35:64:4c:90:d4:ca:4e:88:44:df:c4:42:b3:e8:aa:6c:d0:
         42:29:e8:a9:ca:0e:ae:c4:03:15:4d:5a:51:c6:bb:c8:2d:ee:
         ea:a8:33:b9:c4:1d:81:ea:54:63:f8:5f:fd:c6:0b:75:c2:bf:
         40:69:14:d8:59:9d:37:59:88:66:8f:18:9b:b5:26:af:9a:01:
         70:3d:f3:26:22:e4:72:91:d7:2e:97:d1:e8:57:81:06:7f:1d:
         28:6d:dd:e5:30:4b:4b:32:55:4b:36:b4:bf:ef:bb:a0:4f:99:
         4a:b7:02:3a:af:55:5f:19:ce:58:5d:ba:98:72:f7:27:2c:63:
         79:20:16:02:d2:7d:2c:c9:b2:ae:7e:1e:07:7e:ad:06:af:08:
         3d:05:ba:21:d1:49:5d:24:cd:91:6b:87:8b:d9:a1:eb:b9:0f:
         6f:db:e8:72:59:ea:90:39:a6:7a:9e:8d:df:33:1f:b2:90:0b:
         f9:06:28:e2:e2:cd:8d:ba:3c:7e:7f:ec:ce:c5:91:ab:8c:3e:
         c9:32:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org