Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MEeDKl6oTKHRKbylnh5UagWjyec.roa
File:                     MEeDKl6oTKHRKbylnh5UagWjyec.roa (raw, json)
Hash identifier:          5mZWPg4mjl0smwo0OFRZyAxhBRf1u4lJHVpJn06cohE=
Subject key identifier:   30:47:83:2A:5E:A8:4C:A1:D1:29:BC:A5:9E:1E:54:6A:05:A3:C9:E7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02AF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MEeDKl6oTKHRKbylnh5UagWjyec.roa
Signing time:             Sun 31 Mar 2024 01:29:46 +0000
ROA not before:           Sun 31 Mar 2024 01:29:46 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        59.129.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:29:46 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=3047832A5EA84CA1D129BCA59E1E546A05A3C9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:a8:d0:bc:5f:40:3f:7b:07:c2:f9:7f:da:
                    9b:48:4d:9f:5a:a2:41:92:1a:5a:10:17:e9:e0:32:
                    07:de:46:81:78:eb:3c:3f:74:59:fa:c7:63:5f:f6:
                    e7:f2:90:80:b8:cc:d4:47:c1:13:3f:2a:f4:3c:b8:
                    06:fc:13:d7:4e:85:dd:a4:fd:70:07:9b:1a:e0:ac:
                    9f:b5:e2:82:1d:17:fb:e7:26:f4:50:dc:9a:62:a6:
                    92:b1:d3:d9:c6:98:d4:e0:ee:8c:20:69:7e:42:41:
                    a7:7f:26:a4:1e:36:b5:eb:8c:f7:2b:e1:8f:00:0d:
                    16:d3:b2:28:9e:62:4a:15:89:91:48:a8:91:65:3a:
                    6a:15:15:12:79:1d:f5:8a:5d:2e:93:40:f1:8b:2d:
                    3d:0a:d1:ba:e2:2c:68:d0:a1:0a:f9:af:24:a3:40:
                    41:8c:84:9a:fb:4e:ff:f3:79:47:e0:c5:b5:cf:64:
                    fa:dd:38:bb:e7:84:0c:43:0a:3f:6e:79:4a:78:2e:
                    df:05:92:19:ae:a0:e2:b9:45:f5:9c:5c:e8:10:df:
                    d1:5c:53:f0:a7:24:5c:0b:f2:02:ae:61:5a:fa:e8:
                    44:cf:f2:7d:71:d0:0e:85:b1:19:31:65:a6:c2:70:
                    95:6c:34:95:40:2f:b9:b8:72:83:e6:9f:7b:d8:e3:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:83:2A:5E:A8:4C:A1:D1:29:BC:A5:9E:1E:54:6A:05:A3:C9:E7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MEeDKl6oTKHRKbylnh5UagWjyec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:13:c0:eb:2e:ba:17:0a:14:23:29:29:f5:06:f5:fd:6d:d5:
         6c:7d:65:90:e6:a1:26:51:b5:ab:4e:dd:47:79:b2:b9:a4:8b:
         4b:94:60:f9:de:9f:0a:8a:e6:c3:68:9e:53:cb:e5:d1:61:15:
         eb:96:41:d1:8f:fb:40:68:94:4a:f3:fc:7e:c2:ad:bb:5f:47:
         a4:b9:37:59:64:78:51:5c:fb:63:b6:61:b8:7c:a6:63:55:9c:
         14:18:c6:97:71:48:54:f7:88:b2:6f:72:df:2e:53:3d:91:f3:
         58:a4:59:d8:d8:e2:76:94:dc:9c:f3:5a:6b:93:0b:c0:8d:5d:
         50:08:c0:f4:0c:4e:b5:d4:f7:44:9c:21:14:e5:ae:f0:e9:08:
         d3:59:b2:3b:25:e0:7e:9a:17:64:bd:aa:50:3c:94:c4:77:ca:
         dc:a0:c4:03:a0:57:d2:d2:ff:0d:4e:9d:89:31:3d:67:b0:9a:
         fa:60:24:ba:4a:1e:39:28:06:8f:38:08:3b:60:08:bf:8e:90:
         3a:d9:de:32:54:28:2b:59:91:ab:db:dc:a5:76:27:5a:d6:b7:
         06:eb:7b:f7:28:2f:87:f8:6f:f6:9f:4a:ed:b6:87:a3:0c:67:
         0c:6d:16:8b:c1:7f:f6:b9:4f:c9:50:15:89:9f:4f:1f:0f:38:
         c0:ad:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org