Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/J5DWWwS5gLdJ4WuRVGTh9YgA4O8.roa
File:                     J5DWWwS5gLdJ4WuRVGTh9YgA4O8.roa (raw, json)
Hash identifier:          H6sRBKttI/AEFQE0/bACybWOlWS1TOFyLYSKq6rSKY4=
Subject key identifier:   27:90:D6:5B:04:B9:80:B7:49:E1:6B:91:54:64:E1:F5:88:00:E0:EF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0358
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/J5DWWwS5gLdJ4WuRVGTh9YgA4O8.roa
Signing time:             Sun 31 Mar 2024 01:42:47 +0000
ROA not before:           Sun 31 Mar 2024 01:42:47 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.230.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:47 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=2790D65B04B980B749E16B915464E1F58800E0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:e6:c5:5c:04:72:5b:93:6a:36:2c:b3:ef:
                    29:f7:ba:12:61:c2:f2:6d:5e:3f:f4:28:9e:41:de:
                    d3:58:13:c0:23:23:21:45:ff:5b:48:5b:98:fb:bf:
                    88:a7:d4:ec:af:20:48:14:f6:de:87:47:66:93:ef:
                    d7:37:3c:4d:60:c1:62:bd:d1:73:1d:1b:76:89:3b:
                    6d:03:48:a2:fe:16:e1:a5:5b:07:05:3b:f3:1d:c3:
                    54:e9:16:86:64:80:1e:7d:dd:d4:e0:3a:04:3b:a1:
                    09:f3:11:72:7a:32:d8:72:9b:50:32:4a:14:c9:bb:
                    30:9d:6c:b6:67:5f:e4:99:af:98:b0:7c:7d:3a:81:
                    2d:ea:bd:f5:f2:24:be:7f:81:66:75:0e:4a:85:10:
                    83:1d:6b:47:e1:28:24:22:84:0f:d8:c7:7e:6c:1d:
                    f0:d7:61:6b:db:2b:0c:41:ad:5d:4b:ef:17:36:cb:
                    52:72:10:90:77:9b:8d:df:0d:da:3d:b9:2c:03:d9:
                    cd:f9:e7:c0:9e:55:71:e2:41:a8:91:a5:37:ca:6e:
                    aa:11:ff:b9:12:fc:c5:2d:4e:4c:7d:b3:83:50:e7:
                    af:9b:5c:a9:3a:10:79:32:64:b3:53:1a:0d:ad:fb:
                    bb:c3:0b:84:f5:49:bf:78:55:1e:26:b2:62:a2:af:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:90:D6:5B:04:B9:80:B7:49:E1:6B:91:54:64:E1:F5:88:00:E0:EF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/J5DWWwS5gLdJ4WuRVGTh9YgA4O8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.230.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         22:37:6f:2e:a0:23:3f:2e:c9:09:66:fe:43:64:33:3d:0b:dd:
         b2:13:64:b9:b5:40:85:59:5e:24:d4:da:04:61:0c:92:35:ad:
         0f:b3:cc:61:6d:25:97:4f:d8:94:65:2c:59:4f:b1:f0:af:8f:
         e7:78:d0:61:7f:88:f1:22:e6:8f:ed:13:9c:79:74:be:b9:42:
         0e:21:d2:c8:72:fd:c6:8f:92:e1:ab:b7:f2:b1:40:45:92:d0:
         44:7f:a0:c2:c3:30:e7:b8:dc:98:e7:f2:e0:2e:e4:c6:a3:3e:
         c0:1c:32:81:ad:99:e5:85:34:be:3d:fe:0e:50:30:01:89:5f:
         d2:50:78:f7:1a:80:28:8f:11:f0:76:19:4a:0c:4d:fb:d0:be:
         ba:6e:d2:51:74:8a:c8:ac:f6:00:db:f2:bc:92:62:c7:30:b0:
         c5:03:bf:8c:a6:2e:c1:34:d4:36:01:d5:66:f5:04:73:e0:cb:
         1f:4f:ce:bd:aa:ca:4d:9e:b4:b4:09:79:28:a6:87:f9:27:42:
         84:76:b5:2e:d9:6a:12:08:c8:18:b4:07:b0:65:7b:ba:75:79:
         98:00:27:4f:27:ee:c1:71:46:54:5e:44:61:a0:e8:64:9b:73:
         80:2f:c4:65:23:8c:a9:51:c9:c5:cc:3f:bd:11:d7:db:6a:65:
         c1:a9:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org