Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/G8BVN_Iuf-hoP91iZ-FhYr7Uh_s.roa
File:                     G8BVN_Iuf-hoP91iZ-FhYr7Uh_s.roa (raw, json)
Hash identifier:          c5R+Cwi+3hoTFjUb1XDtSHRlugYow4P632KqV+k8HeQ=
Subject key identifier:   1B:C0:55:37:F2:2E:7F:E8:68:3F:DD:62:67:E1:61:62:BE:D4:87:FB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       038C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/G8BVN_Iuf-hoP91iZ-FhYr7Uh_s.roa
Signing time:             Sat 31 Aug 2024 01:29:50 +0000
ROA not before:           Sat 31 Aug 2024 01:29:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        61.202.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=1BC05537F22E7FE8683FDD6267E16162BED487FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:b3:ca:92:eb:18:53:da:8f:f4:c4:0f:0a:
                    98:bc:77:47:c0:46:db:92:8e:64:f7:54:fa:21:af:
                    bb:e6:61:cb:c7:8d:d5:29:a6:f1:ee:52:05:90:79:
                    fd:a8:a0:c8:8e:48:bd:b4:f1:a9:6d:1d:bb:00:f3:
                    fe:b4:63:30:fd:56:7a:6b:37:a5:14:b1:a5:24:60:
                    8b:45:6c:72:0d:6a:4c:50:78:17:b6:b3:d8:28:3b:
                    68:d8:fd:13:da:d4:93:51:27:1d:4d:0a:c3:e3:73:
                    85:75:12:e5:f2:b0:a1:53:55:16:ba:d6:5f:8b:1e:
                    ee:0b:38:50:c0:b8:b8:77:ce:8a:1c:03:f8:6b:64:
                    b3:b6:86:ad:7c:43:af:07:5d:b3:32:4e:ec:93:5b:
                    71:19:c2:2f:aa:b5:0c:26:af:09:77:d2:99:46:ca:
                    1b:ee:9b:00:33:41:f4:63:3b:f3:b8:d1:ec:3f:eb:
                    6b:a1:42:d9:58:1e:c1:3e:e7:0a:3c:cd:6b:30:7f:
                    0b:f3:82:d0:de:88:f2:87:bb:72:aa:7c:91:5f:8a:
                    c2:13:82:35:38:ee:b8:f2:81:df:ab:3c:e0:74:8d:
                    50:f2:4c:66:93:62:df:52:e8:6d:0c:33:a5:4c:33:
                    5f:c1:cc:80:c3:e3:8d:0f:02:46:50:62:65:fa:a5:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C0:55:37:F2:2E:7F:E8:68:3F:DD:62:67:E1:61:62:BE:D4:87:FB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/G8BVN_Iuf-hoP91iZ-FhYr7Uh_s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.202.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:18:e5:d3:98:fd:3f:e3:97:4c:86:7a:78:4f:e8:18:36:
         51:fa:c3:47:1d:67:8b:aa:28:e4:92:41:9b:93:16:28:43:4c:
         16:ff:4d:90:e5:53:f4:23:d8:5b:1b:71:53:00:bc:d7:a8:44:
         d1:85:c3:f1:cc:e7:95:3a:cb:e4:c3:fd:4e:0e:b3:fa:37:e1:
         85:75:0d:05:2f:a1:7e:56:9c:0e:cd:62:ab:5f:ec:f2:84:7b:
         0f:fc:35:14:70:6e:7e:af:5c:8d:04:bb:dd:02:85:70:b0:49:
         23:93:4a:c2:b9:16:c9:33:b0:09:59:4b:46:6b:9a:03:66:7e:
         ed:f1:94:ab:c3:2b:f7:3e:47:a8:ba:30:91:49:60:3c:a3:68:
         1e:0a:46:b9:9d:5f:23:12:83:f9:69:8c:16:d4:00:6b:9b:e0:
         51:7e:06:b2:f3:fa:de:fc:2e:b2:4b:e7:6a:5c:ad:43:ed:b8:
         0e:f0:3f:b1:3e:89:1b:a6:3d:a3:e3:11:77:b3:4f:d4:28:0f:
         45:5e:c9:bd:c9:74:f2:9f:28:e8:5b:80:aa:b0:d6:92:f0:a0:
         1e:a3:68:54:81:a1:ed:07:9c:ba:fd:a3:86:3b:a1:02:34:a4:
         24:95:1c:a1:52:cd:fe:14:6b:9c:a2:dd:39:f1:4b:79:16:83:
         2a:07:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org