Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MRw9PRGUs_U0sZmyMGdWRADVvV8.roa
File:                     MRw9PRGUs_U0sZmyMGdWRADVvV8.roa (raw, json)
Hash identifier:          z3L9SV+lomN5VXOCOT4rzpHyZHWw72mRoDLaoy08QVI=
Subject key identifier:   31:1C:3D:3D:11:94:B3:F5:34:B1:99:B2:30:67:56:44:00:D5:BD:5F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       037E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MRw9PRGUs_U0sZmyMGdWRADVvV8.roa
Signing time:             Sat 31 Aug 2024 01:29:46 +0000
ROA not before:           Sat 31 Aug 2024 01:29:46 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        219.125.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894 (0x37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:46 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=311C3D3D1194B3F534B199B23067564400D5BD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:74:8d:87:94:40:e2:15:10:6c:1a:04:6b:
                    00:4c:d6:75:06:de:2a:6c:33:b9:92:a2:35:f6:a9:
                    dd:fb:d2:5e:45:16:f2:2e:a2:d6:1c:1c:c6:bc:c5:
                    03:c9:cd:fb:91:82:ce:29:2a:73:53:ff:76:78:61:
                    b6:ef:d3:94:2c:7a:03:37:86:45:4a:14:90:d1:05:
                    7c:2a:67:a5:8e:8c:05:5c:8f:d1:ca:8a:97:61:97:
                    e6:4f:53:89:9e:2e:48:74:3a:b6:cd:c4:c9:60:8e:
                    8d:22:fd:b5:e7:20:79:1c:40:7f:40:73:9f:42:e4:
                    f9:7a:63:6c:50:9d:04:87:86:86:14:aa:8e:52:e6:
                    08:10:70:20:0f:22:d6:38:d0:12:a2:9d:88:29:0d:
                    df:73:4e:7e:d7:e7:26:32:5b:a9:52:35:e0:8a:45:
                    3a:5d:e5:9e:f4:78:66:23:44:5d:91:3a:00:1b:b6:
                    df:3f:d3:32:35:f1:f9:ef:a0:3f:39:45:aa:0a:3e:
                    fe:ed:f7:c5:3a:f7:b4:8b:95:1c:6b:76:3c:c2:ca:
                    cd:bd:b3:00:b3:f7:9e:87:3b:31:62:02:d5:6e:86:
                    99:80:0f:e0:3f:86:41:e8:f6:62:86:cf:ca:73:79:
                    42:dc:ca:61:54:53:4f:8b:74:83:8e:50:a3:40:3d:
                    78:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1C:3D:3D:11:94:B3:F5:34:B1:99:B2:30:67:56:44:00:D5:BD:5F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MRw9PRGUs_U0sZmyMGdWRADVvV8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:72:66:cf:4a:73:86:0c:b0:b9:c9:82:42:66:82:73:42:
         88:3b:00:e5:79:15:96:63:64:24:6f:db:54:ee:0d:e8:36:5a:
         ba:01:f5:1e:cf:6b:2b:2d:1f:35:a0:bb:b3:5f:8e:bf:3c:7c:
         be:fb:6a:84:d7:dc:0e:ce:e7:3d:09:98:3e:0d:cb:f8:36:4c:
         82:9a:10:33:14:20:7d:83:7f:90:d3:2d:0d:ef:b1:b7:1d:ca:
         98:a3:25:24:61:dc:72:f2:07:25:ac:f2:e5:99:3d:51:18:47:
         4a:93:46:3e:58:75:5a:a7:d3:13:0b:09:e0:b7:e6:fb:4b:3b:
         76:cb:e9:ef:8b:fb:cd:16:d5:ef:b5:d9:fa:5e:c8:d4:89:5c:
         51:47:66:38:a9:36:f2:13:05:19:cc:c4:9f:19:4c:cb:10:f4:
         fb:c0:9b:0b:30:c8:45:0a:06:1a:72:32:68:84:59:90:b8:6a:
         e0:38:94:c1:ea:f9:53:22:c6:83:9f:03:8b:27:2c:25:39:d6:
         d9:33:f9:7d:6b:bc:c4:ef:bf:53:1d:d1:63:82:c2:6d:95:71:
         38:c9:e8:9f:64:55:87:b2:5a:ff:e1:4a:bd:e8:99:42:03:a2:
         27:ee:9a:9c:fa:7c:e6:48:cb:b5:7f:3e:fe:ed:3f:db:3f:02:
         65:98:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:26 2024 by rpki-client on console-ams.rpki-client.org