Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FYvtE33rfrzsnHORnhIbRiSOjE8.roa
File:                     FYvtE33rfrzsnHORnhIbRiSOjE8.roa (raw, json)
Hash identifier:          OV/rmlAdYxa79f+QGf5ogXNDKk6N+rLpnW505Opx8ZM=
Subject key identifier:   15:8B:ED:13:7D:EB:7E:BC:EC:9C:73:91:9E:12:1B:46:24:8E:8C:4F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02D0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FYvtE33rfrzsnHORnhIbRiSOjE8.roa
Signing time:             Sun 31 Mar 2024 01:33:26 +0000
ROA not before:           Sun 31 Mar 2024 01:33:26 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.166.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:26 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=158BED137DEB7EBCEC9C73919E121B46248E8C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:e1:9b:33:00:7b:4e:31:46:4d:ac:5c:bb:
                    ad:6d:be:3a:66:0f:8a:f7:46:43:08:49:63:94:d0:
                    48:6d:56:b3:86:43:3d:5d:ec:0f:cf:62:cb:19:b6:
                    c3:83:17:b4:57:ef:91:27:6f:8e:a8:0d:75:38:a6:
                    ea:fb:87:cf:1a:b4:60:0d:65:c2:08:7c:13:8b:a6:
                    a1:74:52:c6:b2:28:51:72:18:cc:bc:4b:bb:8e:0b:
                    e3:ed:04:69:82:6e:79:0d:09:0a:b0:55:98:da:cf:
                    9f:d8:01:33:fc:14:4a:0b:60:5d:e3:15:ca:cb:9f:
                    d7:16:d6:76:6d:85:d3:9c:ef:69:6a:bb:c9:ab:91:
                    a3:8e:f3:3b:e7:01:9e:8e:07:e7:08:ad:d2:cb:89:
                    ab:a7:02:c8:1c:c5:a6:9a:14:b0:49:c9:c7:b7:44:
                    b0:3b:d7:9a:27:5c:f8:75:5c:39:db:1f:fa:c4:af:
                    5a:2a:9c:31:ad:d9:de:77:9a:0f:7f:1f:56:7c:cb:
                    df:9a:9c:81:e7:5f:80:3e:45:96:c2:4d:6e:68:80:
                    a3:27:00:ea:0a:01:8f:f8:73:87:58:01:9f:f8:50:
                    3c:d7:32:27:71:4e:6a:9e:b7:55:db:01:42:d8:40:
                    ab:9a:0f:65:8f:f6:c9:1c:98:b9:c4:dd:dd:a6:db:
                    b2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8B:ED:13:7D:EB:7E:BC:EC:9C:73:91:9E:12:1B:46:24:8E:8C:4F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FYvtE33rfrzsnHORnhIbRiSOjE8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:fb:d3:b1:18:25:a1:89:09:e9:a3:9f:81:f9:af:8b:27:
         41:15:ea:12:64:90:ae:16:87:0e:1c:5a:26:dc:67:3f:b9:3b:
         83:58:2a:fd:89:f5:58:b1:75:76:75:e6:68:4b:86:aa:13:ba:
         ec:ef:e0:82:e9:07:79:c0:e1:c9:55:21:10:16:b6:c9:de:15:
         13:86:64:5d:87:13:51:96:5f:74:d4:be:47:17:fe:88:1b:69:
         1a:1b:f7:72:e1:47:66:06:0c:a1:3e:79:07:8b:83:17:4e:3e:
         2e:62:8b:a9:15:41:d4:49:82:9b:a8:6d:25:a4:48:5b:25:55:
         c3:d7:8a:a0:5e:63:2f:49:de:ab:ee:93:d3:53:3a:e0:02:20:
         1f:df:ca:95:48:fd:7c:01:72:2d:88:bf:ba:ea:99:27:b7:45:
         a3:41:f3:2d:a2:a7:9b:7f:99:3d:b3:a2:d4:75:5e:b2:12:ce:
         77:85:a7:8b:4e:58:fa:b0:f6:ce:c6:21:f7:70:e5:f4:27:76:
         c9:c2:0f:50:9a:1d:fa:b1:35:74:d4:20:49:71:bf:fa:c7:ca:
         74:99:45:be:55:5f:57:15:2b:84:82:44:45:f5:1e:4f:13:2e:
         ba:e0:93:db:8d:ee:55:1e:ed:9b:7e:5c:23:65:ac:2b:1b:e4:
         0d:54:db:b3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTMzMjZaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1OEJFRDEzN0RFQjdF
QkNFQzlDNzM5MTlFMTIxQjQ2MjQ4RThDNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChfuGbMwB7TjFGTaxcu61tvjpmD4r3RkMISWOU0EhtVrOGQz1d
7A/PYssZtsODF7RX75Enb46oDXU4pur7h88atGANZcIIfBOLpqF0UsayKFFyGMy8
S7uOC+PtBGmCbnkNCQqwVZjaz5/YATP8FEoLYF3jFcrLn9cW1nZthdOc72lqu8mr
kaOO8zvnAZ6OB+cIrdLLiaunAsgcxaaaFLBJyce3RLA715onXPh1XDnbH/rEr1oq
nDGt2d53mg9/H1Z8y9+anIHnX4A+RZbCTW5ogKMnAOoKAY/4c4dYAZ/4UDzXMidx
Tmqet1XbAULYQKuaD2WP9skcmLnE3d2m27LTAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUFYvtE33rfrzsnHORnhIbRiSOjE8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0ZZdnRFMzNyZnJ6c25IT1JuaEliUmlTT2pFOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqpjANBgkqhkiG9w0BAQsFAAOCAQEAHLf707EYJaGJCemjn4H5r4snQRXq
EmSQrhaHDhxaJtxnP7k7g1gq/Yn1WLF1dnXmaEuGqhO67O/ggukHecDhyVUhEBa2
yd4VE4ZkXYcTUZZfdNS+Rxf+iBtpGhv3cuFHZgYMoT55B4uDF04+LmKLqRVB1EmC
m6htJaRIWyVVw9eKoF5jL0neq+6T01M64AIgH9/KlUj9fAFyLYi/uuqZJ7dFo0Hz
LaKnm3+ZPbOi1HVeshLOd4Wni05Y+rD2zsYh93Dl9Cd2ycIPUJod+rE1dNQgSXG/
+sfKdJlFvlVfVxUrhIJERfUeTxMuuuCT243uVR7tm35cI2WsKxvkDVTbsw==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org