Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HXmuvC1QBNmFCGV5QBPZINW4DSg.roa
File:                     HXmuvC1QBNmFCGV5QBPZINW4DSg.roa (raw, json)
Hash identifier:          CuLfTHp4DWJdjks6SvAUjv6QSZcyRgCldQ1XncieMqg=
Subject key identifier:   1D:79:AE:BC:2D:50:04:D9:85:08:65:79:40:13:D9:20:D5:B8:0D:28
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0295
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HXmuvC1QBNmFCGV5QBPZINW4DSg.roa
Signing time:             Thu 29 Feb 2024 01:31:35 +0000
ROA not before:           Thu 29 Feb 2024 01:31:35 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.50.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Feb 29 01:31:35 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=1D79AEBC2D5004D9850865794013D920D5B80D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:f8:12:7e:11:8f:c0:58:f2:be:23:ad:f4:
                    c6:31:19:6c:cc:7f:a5:fc:5c:4f:d7:c3:5c:76:9c:
                    7e:08:69:60:77:de:54:7e:2e:4c:f9:51:e2:49:6a:
                    89:1a:14:6f:bc:a2:dd:9e:2e:a9:93:b7:70:86:c3:
                    43:76:05:3c:dd:a3:4c:21:02:eb:e9:b3:ba:f6:6d:
                    91:e5:fb:74:46:5f:a5:28:89:d4:10:83:9d:cf:d1:
                    8f:12:3f:52:29:eb:aa:cd:4a:00:ba:1b:2a:fe:4b:
                    66:4c:66:99:d3:fa:77:29:22:4f:f1:18:7c:4f:8d:
                    e3:c5:c4:87:12:f7:61:15:a5:b5:a8:e1:09:1f:f3:
                    c7:52:f8:09:d6:22:88:37:66:10:32:51:f6:0c:53:
                    0c:73:be:be:0d:32:51:3d:fb:31:55:bb:bf:3c:a7:
                    69:db:30:50:bc:4a:50:7b:fb:8b:ad:1e:cf:36:a9:
                    13:b5:33:52:fb:ab:fe:71:8d:20:2c:2d:0a:32:9f:
                    45:c3:e2:e5:eb:9c:f7:f5:37:b0:6b:3f:7a:dd:3d:
                    e7:41:1a:ae:e9:8e:9d:a2:13:8e:53:c0:82:72:5f:
                    a3:ff:5b:af:e5:49:5f:6a:a0:e2:bb:00:5d:b0:8d:
                    36:29:55:f3:1a:8a:3a:86:76:18:5c:0c:67:ff:79:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:79:AE:BC:2D:50:04:D9:85:08:65:79:40:13:D9:20:D5:B8:0D:28
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HXmuvC1QBNmFCGV5QBPZINW4DSg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:be:29:5c:b8:bc:bb:ca:4d:52:0d:0b:bf:9e:8e:59:4a:
         98:ac:51:c2:49:cb:e1:23:cc:f8:57:e7:75:96:51:76:05:95:
         77:e0:aa:f6:7c:b6:cb:94:40:4b:80:e6:38:fd:15:17:b4:1f:
         69:09:b0:84:62:65:e5:1a:26:b8:cf:f9:f7:89:bf:72:78:d7:
         01:1a:29:0c:c1:61:b7:dd:58:99:9f:47:32:c4:5c:92:d3:b8:
         42:f8:99:3d:c3:58:b3:d7:3f:cd:32:09:ad:a8:0a:d0:a5:ac:
         0a:cf:f3:b9:1b:5f:1c:70:93:2b:b6:a3:87:dc:96:f3:52:85:
         50:57:ba:40:9e:8d:4a:5e:e3:c5:89:1e:01:b8:14:ab:0b:e8:
         60:8e:67:ad:41:d2:ec:6c:66:fe:84:7a:d3:e7:1a:2d:0a:58:
         76:b5:b3:ea:12:a1:ea:7a:4f:89:b7:5c:60:45:9f:e8:9b:a6:
         24:34:a1:20:33:fc:b2:03:06:5e:d9:51:c4:fd:85:01:b8:84:
         9c:1e:ef:41:40:88:9f:5e:2d:9f:a2:31:41:91:78:d5:32:29:
         a3:10:a4:ea:e1:f3:fd:65:76:c1:f7:31:30:63:df:ea:9c:ed:
         fd:ab:2d:a7:53:26:1d:ee:b2:c4:5a:41:cc:1a:1e:0e:4e:d3:
         d7:82:3b:66
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICApUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAyMjkw
MTMxMzVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDFENzlBRUJDMkQ1MDA0
RDk4NTA4NjU3OTQwMTNEOTIwRDVCODBEMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzBfgSfhGPwFjyviOt9MYxGWzMf6X8XE/Xw1x2nH4IaWB33lR+
Lkz5UeJJaokaFG+8ot2eLqmTt3CGw0N2BTzdo0whAuvps7r2bZHl+3RGX6UoidQQ
g53P0Y8SP1Ip66rNSgC6Gyr+S2ZMZpnT+ncpIk/xGHxPjePFxIcS92EVpbWo4Qkf
88dS+AnWIog3ZhAyUfYMUwxzvr4NMlE9+zFVu788p2nbMFC8SlB7+4utHs82qRO1
M1L7q/5xjSAsLQoyn0XD4uXrnPf1N7BrP3rdPedBGq7pjp2iE45TwIJyX6P/W6/l
SV9qoOK7AF2wjTYpVfMaijqGdhhcDGf/eeijAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUHXmuvC1QBNmFCGV5QBPZINW4DSgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0hYbXV2QzFRQk5tRkNHVjVRQlBaSU5XNERTZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9MjANBgkqhkiG9w0BAQsFAAOCAQEALcG+KVy4vLvKTVINC7+ejllKmKxR
wknL4SPM+FfndZZRdgWVd+Cq9ny2y5RAS4DmOP0VF7QfaQmwhGJl5RomuM/594m/
cnjXARopDMFht91YmZ9HMsRcktO4QviZPcNYs9c/zTIJragK0KWsCs/zuRtfHHCT
K7ajh9yW81KFUFe6QJ6NSl7jxYkeAbgUqwvoYI5nrUHS7Gxm/oR60+caLQpYdrWz
6hKh6npPibdcYEWf6JumJDShIDP8sgMGXtlRxP2FAbiEnB7vQUCIn14tn6IxQZF4
1TIpoxCk6uHz/WV2wfcxMGPf6pzt/astp1MmHe6yxFpBzBoeDk7T14I7Zg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org