Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/G9x3hSaf5Uy8rRXJQJn4qMFR8Uw.roa
File:                     G9x3hSaf5Uy8rRXJQJn4qMFR8Uw.roa (raw, json)
Hash identifier:          ko02uePRPO+veGIeS1lb7LdNJcJ0QY5kKPt+LwqIgxE=
Subject key identifier:   1B:DC:77:85:26:9F:E5:4C:BC:AD:15:C9:40:99:F8:A8:C1:51:F1:4C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0257
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/G9x3hSaf5Uy8rRXJQJn4qMFR8Uw.roa
Signing time:             Sun 01 Oct 2023 01:29:15 +0000
ROA not before:           Sun 01 Oct 2023 01:29:15 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        210.234.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:15 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1BDC7785269FE54CBCAD15C94099F8A8C151F14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:29:a4:74:fa:de:81:58:b4:6c:ce:9f:a7:
                    98:58:db:9e:ae:11:5f:08:93:81:3d:3c:21:3b:2d:
                    39:b8:47:41:66:93:40:e1:c3:5b:83:b1:d2:94:14:
                    91:0d:93:a8:8c:5f:68:8d:be:5c:ea:fc:60:95:98:
                    52:a2:6f:aa:1e:dc:16:f3:51:2c:85:db:89:4e:82:
                    4e:5a:88:f2:27:e2:ed:32:c0:16:31:d0:5b:d7:b9:
                    9d:95:fb:ba:a5:13:ce:18:8a:8b:3b:2b:8f:a4:33:
                    13:18:4b:8b:c0:a9:66:bb:27:cd:7c:17:ad:c0:74:
                    a1:0e:16:05:ea:f3:5e:72:a9:7e:02:7b:2a:f0:47:
                    7f:d0:40:bd:8a:4d:92:f8:a9:2a:8c:db:c4:04:b9:
                    fb:56:22:32:8a:44:a0:14:6b:b0:ce:86:ce:0d:96:
                    7c:9b:87:6d:c2:f4:c6:5e:bb:e7:2a:e8:ef:8d:3c:
                    ed:c5:b7:b0:f2:36:1b:0e:3a:d0:24:1e:3d:84:82:
                    b3:82:fb:42:03:40:2b:ef:93:aa:6c:94:75:8d:18:
                    20:db:ea:bb:dc:f7:23:6e:11:e6:11:73:13:5c:c3:
                    10:ac:fb:ba:be:07:67:49:17:be:87:bc:e3:28:b7:
                    cd:0d:68:36:8f:9d:58:45:c9:5e:21:ad:6f:75:6d:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DC:77:85:26:9F:E5:4C:BC:AD:15:C9:40:99:F8:A8:C1:51:F1:4C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/G9x3hSaf5Uy8rRXJQJn4qMFR8Uw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.234.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:dc:5f:55:72:8b:50:e5:c6:6f:86:75:b0:32:16:5b:1f:
         1c:f2:92:68:cf:d9:8e:23:4f:87:8f:40:7a:ec:92:75:28:59:
         6a:97:63:e3:eb:2d:95:ae:a4:e1:88:76:13:5e:2f:50:64:fe:
         4a:ed:6e:af:c9:19:6b:32:c1:cc:3e:8b:91:08:d2:30:f7:3d:
         de:10:c2:82:fc:5d:a1:4b:1b:dd:e0:3f:6a:47:f5:93:8c:e8:
         6f:3e:d9:3f:05:10:4c:17:8c:ee:cc:dd:fd:51:9e:87:f8:c9:
         62:87:75:05:05:4c:ba:ff:d4:de:ee:20:2a:c3:dd:2f:db:b0:
         c9:38:bd:1f:d8:0f:10:3c:a6:bc:5b:53:84:70:bd:d4:8a:d2:
         2c:f2:cb:6d:1b:e9:f3:35:35:91:d4:31:b8:c1:2f:69:d3:29:
         99:46:12:c1:28:e9:22:f0:44:ed:f0:91:32:fe:81:5e:70:20:
         c7:d2:b7:b3:3e:e1:f6:5d:88:7e:d5:50:17:45:3f:b9:95:5f:
         92:ec:c7:fb:fa:26:32:06:a2:fc:1b:e5:d0:28:7c:1c:a9:bc:
         f2:d8:0a:ee:5f:f3:ea:c3:ea:30:5d:69:31:4d:3e:c6:92:db:
         02:dd:92:c6:e5:c1:9c:f8:42:64:0b:ef:09:d0:0c:be:7c:d7:
         2d:9c:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org