Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/K07cNZrONaWmPUwCqZlnpJeaIJc.roa
File:                     K07cNZrONaWmPUwCqZlnpJeaIJc.roa (raw, json)
Hash identifier:          9JIuXY/4bWCiBkNOdWlbsFmN2abOW2J0rH4AGoDEhCw=
Subject key identifier:   2B:4E:DC:35:9A:CE:35:A5:A6:3D:4C:02:A9:99:67:A4:97:9A:20:97
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       032F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K07cNZrONaWmPUwCqZlnpJeaIJc.roa
Signing time:             Sun 31 Mar 2024 01:40:41 +0000
ROA not before:           Sun 31 Mar 2024 01:40:41 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815 (0x32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:41 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=2B4EDC359ACE35A5A63D4C02A99967A4979A2097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:7f:76:32:bc:4d:38:a4:f6:cb:f2:5d:4b:
                    57:3e:e5:c4:32:81:ed:51:87:05:5a:71:e8:ed:54:
                    10:97:bd:5b:3b:f2:ea:43:15:fa:c0:38:95:25:25:
                    3b:b2:de:80:db:45:1b:a0:68:82:be:a4:b6:11:6c:
                    70:8c:ef:5e:2e:0f:9a:80:1e:d1:94:f0:ba:fb:21:
                    47:57:e7:65:82:11:9b:ec:ba:27:68:82:ea:e6:4d:
                    9e:e1:82:bb:45:94:2b:57:3d:8a:11:a9:3d:b3:e3:
                    d3:f9:24:67:92:3b:74:95:8e:55:11:07:80:07:f2:
                    58:06:9f:14:e3:67:78:c7:ee:d0:bb:0f:e0:bb:6f:
                    a8:81:b7:c4:d2:1a:e2:a7:b2:df:77:d4:6c:0f:b2:
                    d5:62:f3:3f:07:3c:12:23:e1:85:fa:43:aa:45:43:
                    61:34:ba:e5:a1:dd:1f:a7:71:91:6d:eb:cb:10:d3:
                    66:c4:f9:d1:54:5e:1d:2c:b3:c6:e2:80:d8:e0:62:
                    75:e7:cf:9d:6a:3a:ce:81:5f:74:19:b3:74:e1:92:
                    1a:fe:d5:a0:bc:f6:3b:4d:65:09:f9:e1:41:69:97:
                    0d:94:c6:38:5e:6d:63:d1:f8:56:79:2b:a0:4a:a1:
                    85:b2:1b:2f:ec:5d:97:f9:b8:45:9c:d4:33:d9:e7:
                    9f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:DC:35:9A:CE:35:A5:A6:3D:4C:02:A9:99:67:A4:97:9A:20:97
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K07cNZrONaWmPUwCqZlnpJeaIJc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:91:8e:99:9a:1e:9b:07:35:e4:a9:61:55:f8:eb:9d:60:
         ef:27:1b:39:d4:80:b7:58:5b:47:8b:5a:16:f7:4f:a6:65:3e:
         b7:d0:63:35:86:9b:9b:e1:94:2a:da:6b:bf:f0:ad:df:ad:db:
         38:53:98:2c:e7:5a:ed:99:a6:40:75:d5:e7:86:90:9e:6c:34:
         23:ca:6b:90:0f:ad:59:88:7a:1c:40:ec:5e:9b:4f:21:ba:0f:
         12:e5:12:47:e5:fc:4c:94:0b:cf:07:2b:30:88:1e:e2:a1:fd:
         f6:a9:9d:16:84:47:b0:32:eb:a0:9a:26:4e:87:48:84:5e:13:
         f2:4f:fd:54:b6:f9:07:81:29:19:02:cf:15:0a:fc:89:2a:79:
         9f:30:c3:65:e4:ca:23:98:f9:c2:87:cf:68:27:07:e9:bc:3c:
         d9:29:a1:49:22:67:1d:24:c2:ef:9d:b1:03:95:40:c8:18:a7:
         49:7e:8a:ae:e2:1a:0d:3e:7a:b9:6c:a1:20:1c:bc:29:a7:4a:
         5e:99:a4:f0:9b:06:e2:d6:a1:a5:7c:ae:d9:52:e5:af:74:5d:
         5e:1b:f7:77:08:ba:e4:92:f4:64:a2:bf:4a:55:06:43:34:c8:
         c8:ca:95:77:53:ce:55:ad:23:45:f5:b4:84:e2:e0:4f:64:37:
         be:1e:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org