Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa
File:                     D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa (raw, json)
Hash identifier:          EsCRgHyplf9YdOFBNWbGWQIbFa9Ru7UnUJoypJzGgnc=
Subject key identifier:   0F:DC:4F:33:81:DB:21:98:7B:2B:C2:79:69:93:88:F6:7D:47:6D:EC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02F1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa
Signing time:             Sun 31 Mar 2024 01:35:51 +0000
ROA not before:           Sun 31 Mar 2024 01:35:51 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.198.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:51 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=0FDC4F3381DB21987B2BC279699388F67D476DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:01:b2:d6:e5:20:da:f8:be:aa:0f:1d:9d:
                    d1:4d:18:fb:82:4e:e2:b7:93:37:b4:5e:9e:d4:e2:
                    a0:74:86:3b:1a:0e:a7:25:b0:f3:79:72:f4:c3:76:
                    88:81:2f:8f:27:ba:0a:e1:cc:31:ae:03:f5:6f:f2:
                    f7:23:5e:29:7b:85:28:15:ff:b4:26:8b:1e:e0:31:
                    f3:cd:4f:3c:01:d6:5c:c4:16:f1:45:65:23:40:75:
                    28:9e:8c:19:41:7f:d6:80:50:64:65:7a:e5:25:b7:
                    88:44:32:3f:89:14:92:6a:df:08:1f:31:f5:97:c1:
                    37:94:0d:94:d1:89:60:16:96:61:5e:65:79:73:72:
                    c1:9c:98:df:62:cc:e9:04:b3:e8:43:f2:f7:2e:9b:
                    17:c4:70:b8:e2:39:e1:20:d9:cc:08:56:75:1e:31:
                    c9:c3:a1:14:79:1b:6c:52:51:ed:81:b9:5c:00:92:
                    ac:c9:8d:c8:a3:0a:79:59:47:89:3b:40:19:28:ab:
                    86:cd:57:09:3f:17:b7:fa:78:df:07:4a:c2:08:ae:
                    e4:74:c3:73:02:dc:0b:9d:bc:8a:8c:7f:e7:e7:d7:
                    f6:64:d1:a9:16:7e:be:49:47:e6:5a:90:08:49:24:
                    e3:59:d9:6a:79:1b:6b:ef:3a:29:9a:ec:bd:8a:f6:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:4F:33:81:DB:21:98:7B:2B:C2:79:69:93:88:F6:7D:47:6D:EC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D9xPM4HbIZh7K8J5aZOI9n1Hbew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         26:35:ef:5b:ae:08:92:34:62:da:09:86:91:25:8a:50:05:9a:
         51:c8:27:69:6f:25:3a:4a:e4:fc:63:14:a7:bc:c4:5a:06:f8:
         8d:54:ab:f9:1b:bd:9d:85:1d:47:ce:07:73:64:f0:d8:56:eb:
         fb:87:05:89:0d:cd:dc:3d:39:24:e5:e3:5b:cc:f5:01:a0:06:
         ee:08:d0:9f:c9:14:cf:58:73:c8:4a:a5:b3:38:f1:41:a7:55:
         21:4c:5d:91:4a:ec:19:e7:92:19:50:27:75:cc:66:e3:42:86:
         89:7d:bb:30:08:08:2f:7b:95:21:94:37:47:fa:69:b0:70:13:
         86:36:6c:9b:94:13:77:9c:ed:ef:a1:13:48:72:ed:35:cf:75:
         70:4e:16:60:0a:8f:03:a7:78:46:54:7c:08:f3:1d:fc:8c:e7:
         f4:38:02:b8:9d:92:6c:35:51:4e:6a:36:28:11:29:96:9d:34:
         cb:df:b3:3f:3d:a8:18:20:d4:7c:31:80:b8:be:30:b3:99:c0:
         c5:1f:da:06:c1:77:0d:5d:d7:92:7e:5e:2d:7b:b5:cb:3a:49:
         b9:e4:12:5b:fb:c0:ed:b5:0a:d3:ea:de:0b:7e:1b:37:df:34:
         4d:b6:ee:d7:2b:da:00:8f:a5:e9:b1:15:53:98:98:c1:bb:e2:
         bc:10:00:64
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTM1NTFaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBGREM0RjMzODFEQjIx
OTg3QjJCQzI3OTY5OTM4OEY2N0Q0NzZERUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi+AGy1uUg2vi+qg8dndFNGPuCTuK3kze0Xp7U4qB0hjsaDqcl
sPN5cvTDdoiBL48nugrhzDGuA/Vv8vcjXil7hSgV/7Qmix7gMfPNTzwB1lzEFvFF
ZSNAdSiejBlBf9aAUGRleuUlt4hEMj+JFJJq3wgfMfWXwTeUDZTRiWAWlmFeZXlz
csGcmN9izOkEs+hD8vcumxfEcLjiOeEg2cwIVnUeMcnDoRR5G2xSUe2BuVwAkqzJ
jcijCnlZR4k7QBkoq4bNVwk/F7f6eN8HSsIIruR0w3MC3AudvIqMf+fn1/Zk0akW
fr5JR+ZakAhJJONZ2Wp5G2vvOima7L2K9ksnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUD9xPM4HbIZh7K8J5aZOI9n1HbewwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0Q5eFBNNEhiSVpoN0s4SjVhWk9JOW4xSGJldy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfSxoAwDQYJKoZIhvcNAQELBQADggEBACY171uuCJI0YtoJhpElilAFmlHI
J2lvJTpK5PxjFKe8xFoG+I1Uq/kbvZ2FHUfOB3Nk8NhW6/uHBYkNzdw9OSTl41vM
9QGgBu4I0J/JFM9Yc8hKpbM48UGnVSFMXZFK7BnnkhlQJ3XMZuNChol9uzAICC97
lSGUN0f6abBwE4Y2bJuUE3ec7e+hE0hy7TXPdXBOFmAKjwOneEZUfAjzHfyM5/Q4
Aridkmw1UU5qNigRKZadNMvfsz89qBgg1HwxgLi+MLOZwMUf2gbBdw1d15J+Xi17
tcs6SbnkElv7wO21CtPq3gt+GzffNE227tcr2gCPpemxFVOYmMG74rwQAGQ=
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:37 2024 by rpki-client on console-fra.rpki-client.org