Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JX7-OT99-PPCdxP76QnYsPzz_AM.roa
File:                     JX7-OT99-PPCdxP76QnYsPzz_AM.roa (raw, json)
Hash identifier:          t5iLd/l+bJelPQpAFzJQtm2zw+ydb7DBVuklrVbY8v4=
Subject key identifier:   25:7E:FE:39:3F:7D:F8:F3:C2:77:13:FB:E9:09:D8:B0:FC:F3:FC:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02CC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JX7-OT99-PPCdxP76QnYsPzz_AM.roa
Signing time:             Sun 31 Mar 2024 01:33:24 +0000
ROA not before:           Sun 31 Mar 2024 01:33:24 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        121.109.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:24 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=257EFE393F7DF8F3C27713FBE909D8B0FCF3FC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:aa:02:11:b4:11:90:e7:b1:43:8f:fc:19:
                    ce:f8:c9:1a:25:09:11:d2:b8:c2:52:54:6c:28:ac:
                    2f:e9:34:4f:9c:94:fc:31:f6:90:2b:1f:5a:1a:97:
                    d2:e2:b4:20:7b:83:25:68:4a:c7:ab:8a:a6:1d:a9:
                    fc:40:3f:d0:b4:2b:f9:8e:60:81:42:ca:2d:8f:fb:
                    d6:e6:ec:59:da:70:a5:2c:e1:1c:74:9d:08:72:12:
                    83:66:2f:2d:f0:a7:c6:75:6e:2d:4d:bc:40:a6:17:
                    1d:63:14:f7:39:57:e6:a1:78:50:51:f9:26:35:0d:
                    96:af:e7:10:95:36:1a:6e:bc:3b:51:f2:f6:b9:9d:
                    1d:82:dd:36:85:f9:32:b5:0e:1a:17:34:c1:d5:78:
                    5d:3b:b1:fe:80:1a:cc:34:78:d1:05:8e:ba:c8:6e:
                    54:66:ac:95:8e:f9:1e:37:eb:74:f1:b4:05:c9:15:
                    0a:2d:82:96:16:f3:e0:6b:6a:00:c9:88:0e:d9:53:
                    29:cb:0f:4d:37:7b:8d:f7:d0:b3:58:04:4a:31:62:
                    64:78:95:8a:a6:af:ee:7d:d9:11:76:f4:a4:be:6f:
                    3b:62:e8:f4:cb:77:6a:83:21:c9:fb:b0:7a:53:84:
                    61:d4:78:df:89:38:3d:07:2b:94:00:90:a4:5e:d3:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7E:FE:39:3F:7D:F8:F3:C2:77:13:FB:E9:09:D8:B0:FC:F3:FC:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JX7-OT99-PPCdxP76QnYsPzz_AM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:44:9b:a8:f8:8d:05:2c:07:89:e9:6e:6a:05:c0:1a:b7:6f:
         9d:1c:09:7c:1a:4e:1f:72:db:98:41:6a:49:a6:1a:0b:a5:78:
         ed:88:ec:48:ec:6b:4f:45:6e:fc:0b:e2:2c:37:1d:67:74:b9:
         81:4f:85:6f:61:d1:39:ca:af:6b:af:ba:ca:fc:d6:00:16:9e:
         57:22:3e:cb:0c:59:71:f4:47:34:28:91:78:70:25:b8:1f:31:
         23:71:ed:0b:9e:7d:dc:3b:41:d5:96:b5:2f:72:33:8d:14:09:
         e0:c5:5c:17:cc:47:cb:26:62:87:c8:69:97:ca:3d:97:69:19:
         37:82:38:65:14:ee:47:49:a1:e8:e0:0c:36:e6:f7:b8:cd:40:
         6c:69:a8:ac:ee:58:9d:db:3d:33:b7:44:79:cf:ac:7e:3c:47:
         8f:a9:51:31:e1:3a:77:1f:27:ee:05:83:f2:e4:3c:1b:22:c0:
         a3:0f:01:a4:d9:88:e7:f0:0f:1b:05:14:00:5c:db:d4:9a:73:
         3d:44:27:4b:96:ac:51:c1:d2:42:66:f7:08:b1:5f:8f:32:51:
         25:cf:cf:20:95:60:80:22:b8:f6:ee:21:94:1e:15:cd:31:02:
         13:4e:cc:f2:64:68:f8:7e:2c:9e:c0:07:a7:dc:28:7d:87:42:
         d7:3e:57:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org