Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DQNQyXWD88mDnzN2sjs9ddnYSh0.roa
File:                     DQNQyXWD88mDnzN2sjs9ddnYSh0.roa (raw, json)
Hash identifier:          o+dma48svyQsVdhIeTDqOcmnRhrt40wqRzbk0uBNTjA=
Subject key identifier:   0D:03:50:C9:75:83:F3:C9:83:9F:33:76:B2:3B:3D:75:D9:D8:4A:1D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02A1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DQNQyXWD88mDnzN2sjs9ddnYSh0.roa
Signing time:             Sun 31 Mar 2024 01:29:40 +0000
ROA not before:           Sun 31 Mar 2024 01:29:40 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        113.150.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:29:40 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=0D0350C97583F3C9839F3376B23B3D75D9D84A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7f:89:c4:8b:a3:5a:4b:dd:3e:83:da:ec:4c:
                    e9:4f:a3:6e:42:f5:94:a5:d3:7b:e0:e2:c4:c7:b6:
                    bd:e2:21:78:d5:45:c1:7a:1f:b2:31:40:0b:12:1b:
                    db:9e:4f:b8:5d:c5:5d:e2:bc:fd:ce:fe:bb:a6:c9:
                    5e:15:c3:77:82:88:de:83:15:cf:e8:60:10:62:67:
                    0a:15:95:f7:ad:3f:1a:de:27:38:32:03:31:ed:ed:
                    49:69:8c:8c:27:a4:25:38:c7:9b:91:7c:87:4f:62:
                    9e:77:a5:74:40:0a:54:af:ed:5f:f6:de:ba:ae:32:
                    5c:bd:a6:a4:d6:21:a4:22:d5:23:47:1d:0b:1a:b7:
                    df:07:8b:18:59:34:cc:f3:5b:1d:18:e5:5f:5a:af:
                    da:e7:06:96:41:82:73:6a:af:9e:09:41:d6:41:da:
                    bf:14:94:59:c5:dc:d8:76:8b:e4:2e:6d:f1:c7:b8:
                    e6:99:6d:fe:6c:d6:01:63:3c:47:9c:1c:99:23:68:
                    e6:8b:f5:81:39:b5:f5:93:94:3a:ef:ab:d9:3c:c9:
                    0f:a3:20:d8:79:ab:da:39:d5:bc:bc:2b:a4:52:26:
                    6e:53:10:80:11:9e:e6:a9:5a:6e:3d:18:25:53:6f:
                    90:c6:6c:5f:45:31:08:4d:53:c5:3d:0d:19:9b:ba:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:03:50:C9:75:83:F3:C9:83:9F:33:76:B2:3B:3D:75:D9:D8:4A:1D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DQNQyXWD88mDnzN2sjs9ddnYSh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:d0:15:0e:8d:55:7a:5f:59:3b:27:0a:c5:fb:46:b2:7c:bf:
         9c:73:86:c1:bf:5e:64:2d:97:0f:14:41:19:b3:e6:e0:7e:7f:
         b0:05:42:51:3a:08:e9:b4:b8:76:b1:9f:03:c1:ae:b2:69:76:
         92:0e:0f:0d:09:58:1e:ef:b3:54:3a:29:12:b1:95:54:a6:62:
         fe:66:43:54:c7:28:60:73:00:29:9a:39:39:10:19:0a:b7:35:
         29:40:5d:9b:f3:50:9f:5e:56:ba:94:b0:ba:ca:f7:89:f4:27:
         b0:62:a9:06:c1:e4:fe:4b:4e:8d:b6:4e:1e:05:70:1b:f1:ea:
         dd:33:2e:64:d8:94:fe:ab:0e:fc:8f:ea:63:46:c0:80:53:39:
         0c:83:b3:1d:c1:3e:03:b3:0e:cc:95:98:af:4a:10:35:74:46:
         84:11:82:a3:6e:a5:3e:44:1e:48:f3:49:55:a4:03:5d:17:78:
         93:bb:f1:29:32:47:0f:c6:ca:4f:fd:e9:10:41:88:97:42:e7:
         59:b6:77:95:b6:0a:03:1d:a9:28:6d:0d:88:73:78:0f:c8:5a:
         7a:8c:89:a7:4c:46:61:a1:df:dc:55:b9:a2:d2:08:de:f0:66:
         b6:ae:65:9a:75:97:40:54:a6:0d:bb:2c:94:70:b0:58:ee:8f:
         9c:fe:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org