Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/N3g4UeiOq8AGcNscsT0VjsqfJ30.roa
File:                     N3g4UeiOq8AGcNscsT0VjsqfJ30.roa (raw, json)
Hash identifier:          4ojHwYt3xMSIhN7ehGrrNC8ENKK9uml60K+a+ijlxa0=
Subject key identifier:   37:78:38:51:E8:8E:AB:C0:06:70:DB:1C:B1:3D:15:8E:CA:9F:27:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       026F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N3g4UeiOq8AGcNscsT0VjsqfJ30.roa
Signing time:             Sun 01 Oct 2023 01:29:27 +0000
ROA not before:           Sun 01 Oct 2023 01:29:27 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        106.187.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:27 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=37783851E88EABC00670DB1CB13D158ECA9F277D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:8d:9f:da:cf:56:cc:ce:f4:02:0f:eb:3b:
                    a1:5d:d3:4f:e4:38:5a:a8:34:22:00:ca:59:13:cc:
                    39:97:dd:00:19:59:72:a5:a7:54:c7:73:b4:66:99:
                    fc:98:3e:5e:c0:56:13:60:b1:da:2a:45:00:64:8f:
                    68:3e:91:65:5d:01:73:47:39:01:3f:4f:26:62:f8:
                    8a:27:b1:83:11:18:4c:cb:de:70:67:5f:e4:fb:b3:
                    e3:e7:ad:85:20:a8:45:02:6e:76:02:8a:84:a4:e3:
                    43:49:bd:72:a2:8f:70:fc:53:0a:db:ba:9b:7c:86:
                    84:02:c3:bb:0f:8d:6b:0a:ab:fb:96:fe:48:db:37:
                    29:22:b3:eb:78:26:be:dd:97:b3:c4:ed:80:5c:15:
                    c9:c7:73:c3:82:bc:ba:4d:d8:06:d3:1b:4d:54:4d:
                    e2:a0:57:cf:e0:ac:62:c7:9b:b7:25:3a:d2:2b:4c:
                    f6:31:30:e6:61:b9:36:20:4b:e0:c4:95:1e:6d:11:
                    1b:db:a1:0b:01:b6:7e:3e:2c:7a:1b:ef:fd:e9:a7:
                    2d:43:8f:24:19:50:e7:57:ad:55:ce:52:93:ed:1f:
                    ee:03:3d:47:18:b1:a6:96:e0:1c:f3:e7:40:b2:4a:
                    88:e2:dd:f2:9a:a5:c5:bb:32:e5:c3:4f:4f:6d:83:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:78:38:51:E8:8E:AB:C0:06:70:DB:1C:B1:3D:15:8E:CA:9F:27:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N3g4UeiOq8AGcNscsT0VjsqfJ30.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.187.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:dc:78:32:2a:4a:27:33:ee:e3:fd:a7:c5:f4:4e:b1:d1:
         eb:7b:50:25:17:9b:91:29:ff:3c:f5:8b:2f:66:fc:3f:75:8f:
         31:b3:7e:ef:0b:fb:c8:49:ad:8c:05:d2:21:20:e6:a7:81:92:
         06:aa:17:70:93:13:86:eb:ca:ba:a3:87:36:13:78:5a:9e:b1:
         50:a5:da:f7:2b:6d:86:ac:89:1a:d9:7d:aa:27:ca:24:e8:66:
         f1:7d:bf:55:c4:e9:23:ff:f3:3d:16:91:40:33:b4:31:50:b5:
         dd:d8:15:b3:96:d1:6e:41:ab:d8:15:6c:81:65:59:e7:60:c7:
         ae:20:17:20:d4:6b:79:1a:2f:f3:97:47:ce:ce:80:35:99:f2:
         fb:89:a0:2b:0c:11:a4:dc:04:a0:08:61:97:7f:03:c5:d0:2a:
         a4:e2:e3:0f:51:67:4b:08:5d:05:2f:f7:e7:ae:f9:7a:c5:4c:
         b7:ea:9f:24:8a:ac:de:f7:78:eb:76:5f:0e:25:de:92:5a:14:
         38:a4:32:d4:4c:28:c6:5b:d7:2d:a2:4a:7f:5d:d3:0d:ed:e9:
         48:07:9e:f2:a9:bb:77:d1:8d:f7:f8:43:31:40:0a:54:48:3d:
         5c:25:d1:72:0d:69:9e:d8:a4:79:60:10:7e:8f:de:a8:ac:91:
         2f:be:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org