Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MmB886UL_-soKtV3QNstnG1Pd80.roa
File:                     MmB886UL_-soKtV3QNstnG1Pd80.roa (raw, json)
Hash identifier:          TIo5ewOzD07aAmg3UfJDV6f29B1Pgf+4xZxb9b7OXiQ=
Subject key identifier:   32:60:7C:F3:A5:0B:FF:EB:28:2A:D5:77:40:DB:2D:9C:6D:4F:77:CD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       030D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MmB886UL_-soKtV3QNstnG1Pd80.roa
Signing time:             Sun 31 Mar 2024 01:38:38 +0000
ROA not before:           Sun 31 Mar 2024 01:38:38 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.190.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:38:38 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=32607CF3A50BFFEB282AD57740DB2D9C6D4F77CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:5c:cb:0d:e5:cc:ff:e9:14:f7:d7:b5:35:
                    8e:99:d7:90:48:a5:4d:7c:aa:fc:2e:d6:9f:48:73:
                    8c:bf:dc:b0:16:86:99:8f:17:a3:e6:a5:d5:66:ee:
                    44:98:24:4e:2b:3c:f7:88:bf:b7:9c:9f:4d:f8:46:
                    de:53:cb:6a:f9:0b:d4:7e:da:a9:a2:05:99:91:3d:
                    c4:1c:10:17:57:ab:d7:1e:40:e3:fc:20:38:c7:6a:
                    33:46:f3:0b:dc:03:a0:ed:eb:ec:80:fb:fa:ff:25:
                    7c:43:c1:d6:f7:78:6c:96:73:7c:c3:e5:77:a1:66:
                    84:99:1e:c3:44:e3:4e:e4:03:fb:7e:9b:c0:6c:2a:
                    35:ac:0b:bb:87:47:af:82:ef:e3:ae:a8:ab:da:5e:
                    45:f5:b1:60:07:d8:5d:5c:cb:2a:f9:a6:2d:22:28:
                    5b:b6:85:ce:4b:0d:36:a5:f0:2c:20:10:65:27:56:
                    39:1e:a3:a4:74:1c:2e:27:cf:d7:30:f5:f9:ed:3e:
                    b9:2b:73:c2:3b:aa:2e:d9:8f:96:c8:a8:50:b0:88:
                    ca:dc:fb:f0:57:94:b4:b5:0a:ff:90:20:49:a7:fb:
                    33:cb:f7:06:0e:18:5d:17:08:d0:79:33:7b:ad:e6:
                    af:e6:30:ff:91:72:74:d0:df:d5:fc:3b:f1:fc:ac:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:7C:F3:A5:0B:FF:EB:28:2A:D5:77:40:DB:2D:9C:6D:4F:77:CD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MmB886UL_-soKtV3QNstnG1Pd80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.190.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:45:b9:c5:25:9f:c3:b2:98:36:ed:5a:d4:82:8e:ba:db:
         b4:0d:11:db:79:27:3c:b2:4d:f4:15:4d:78:91:be:78:33:62:
         04:01:44:24:66:70:61:76:b3:41:c4:8d:6a:aa:d0:bd:df:61:
         52:17:04:92:b0:59:53:7f:42:18:f1:73:ee:4f:e3:8a:97:05:
         bf:09:57:e8:2e:34:70:a5:1d:d7:ab:76:ed:87:c1:7a:14:54:
         dd:47:d3:ad:60:93:96:dc:0e:a3:53:af:6d:1e:0d:11:04:c7:
         79:b6:3f:3e:0d:24:84:96:ea:e1:3d:84:9c:23:0c:f7:be:18:
         4e:53:b4:9f:7e:50:01:b4:c8:d5:f6:27:16:9c:d5:3d:05:1c:
         bd:a7:2e:17:cd:76:b2:f5:b3:c8:5d:41:19:10:81:98:a1:b4:
         f4:9d:64:27:b6:fd:94:93:70:26:43:fe:5e:bf:b8:9b:8c:9e:
         64:24:9a:95:cc:b6:c3:dd:44:69:d4:43:94:88:e7:b6:d8:f0:
         92:7d:c0:49:be:ba:a4:53:6c:58:70:81:fe:d4:9a:f4:e5:f1:
         ee:d1:a8:04:d2:2d:5b:9b:e4:c9:dc:08:2d:b4:fb:40:e7:fa:
         d0:cd:1a:e1:96:97:20:7f:38:3d:6f:80:a2:12:99:77:4f:ba:
         79:98:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:02 2024 by rpki-client on console-fra.rpki-client.org