Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mj-YB17XaiopiHR10cgkPGqc6eQ.roa
File:                     Mj-YB17XaiopiHR10cgkPGqc6eQ.roa (raw, json)
Hash identifier:          DMItPUqYIJH5JBou3i1kcTZnSvZ2/jSl/L10pgxXNDo=
Subject key identifier:   32:3F:98:07:5E:D7:6A:2A:29:88:74:75:D1:C8:24:3C:6A:9C:E9:E4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0274
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mj-YB17XaiopiHR10cgkPGqc6eQ.roa
Signing time:             Sun 01 Oct 2023 01:32:29 +0000
ROA not before:           Sun 01 Oct 2023 01:32:29 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        113.152.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:29 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=323F98075ED76A2A29887475D1C8243C6A9CE9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:ee:bd:a7:e2:91:ac:c5:be:4b:20:e7:54:
                    33:89:a7:d2:f5:d6:ff:c0:4f:82:90:b9:92:9d:9f:
                    a8:bc:af:75:af:18:23:c3:58:fa:53:66:68:6a:8c:
                    ca:3d:c9:af:89:6a:db:9c:ec:09:4e:64:1d:35:ad:
                    d3:a8:32:20:36:f9:e2:30:f3:ec:c5:ee:d0:26:b3:
                    cd:ab:89:4c:10:da:7b:dc:17:5b:88:fd:5b:49:10:
                    7f:e4:01:bc:3f:f1:80:21:a4:03:52:05:2c:15:f7:
                    da:63:d8:c9:36:0c:3b:28:65:7a:cf:0c:61:8b:20:
                    91:99:de:bb:8e:5f:c3:aa:7b:41:a6:de:30:a0:99:
                    24:dd:ba:34:66:ae:58:df:3d:d0:4e:e7:d6:09:0e:
                    f7:b7:f4:6b:26:56:89:02:72:1c:d5:43:79:cc:67:
                    2e:f6:a4:c5:6b:eb:93:e0:50:30:8f:b8:79:47:14:
                    96:31:cc:d1:c9:0a:1b:a7:42:8e:6f:36:52:27:6b:
                    14:5b:6d:8d:9f:62:e4:f5:ae:d1:5c:7c:4d:db:40:
                    5d:cc:3a:fe:42:5a:8c:ea:32:6d:ba:7a:32:81:47:
                    ce:70:2a:9b:9a:ac:aa:0f:7a:fa:c6:d5:31:31:8a:
                    39:1e:28:51:50:c8:a5:aa:37:37:90:00:1e:b4:1c:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3F:98:07:5E:D7:6A:2A:29:88:74:75:D1:C8:24:3C:6A:9C:E9:E4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mj-YB17XaiopiHR10cgkPGqc6eQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2b:2f:ea:6e:54:86:f9:f4:25:da:ed:02:d6:c7:67:31:78:59:
         2b:b1:6d:c0:8d:1b:27:c7:83:b1:98:d8:e7:c7:59:49:73:95:
         35:31:01:84:16:8e:02:16:9b:a6:f7:67:88:10:32:35:9d:25:
         3c:d4:49:80:74:90:24:0c:56:ed:e8:6c:bb:62:7b:59:a1:3b:
         02:44:04:db:e5:15:d8:99:1d:06:ab:5a:7e:bb:02:f6:67:cf:
         5b:58:83:2c:88:68:f0:d1:93:b3:c6:c9:c4:36:43:1e:b0:f1:
         cc:aa:65:c2:1a:72:c9:91:35:fd:63:00:ac:61:04:6b:d8:38:
         7c:9b:f3:28:16:45:bf:f6:a0:32:08:79:86:bc:83:67:ce:38:
         9e:2d:c2:67:30:ee:ec:d1:10:3f:63:f6:f2:0b:b8:ff:62:c9:
         0c:15:52:e0:f8:d8:63:d0:8f:24:19:3a:22:4c:6a:1a:de:91:
         52:0d:72:af:b0:a5:86:ec:4d:2e:3b:50:35:56:be:7a:6e:85:
         b2:5a:5b:07:27:26:86:bf:ef:4a:93:63:76:d0:79:87:85:5b:
         6c:c7:c7:e9:97:83:42:97:78:9d:cd:27:b9:14:4f:33:cd:f3:
         c5:c6:f5:3e:eb:bf:52:7e:bf:2d:ca:38:8e:22:0e:65:4a:60:
         4c:0f:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org