Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OeN7eDfmtFyFmBI4wy5AmP3bIS8.roa
File:                     OeN7eDfmtFyFmBI4wy5AmP3bIS8.roa (raw, json)
Hash identifier:          7loJEfcfLBFOIF28KdRv7iLftx1be/3cw9N5GTi/FpA=
Subject key identifier:   39:E3:7B:78:37:E6:B4:5C:85:98:12:38:C3:2E:40:98:FD:DB:21:2F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       027A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OeN7eDfmtFyFmBI4wy5AmP3bIS8.roa
Signing time:             Sun 01 Oct 2023 01:32:31 +0000
ROA not before:           Sun 01 Oct 2023 01:32:31 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        125.48.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:31 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=39E37B7837E6B45C85981238C32E4098FDDB212F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:6d:ad:7a:6b:ca:7d:47:d1:fc:c6:cc:6a:
                    fe:b4:75:dd:cf:30:e6:fc:ea:f6:48:3f:a4:5b:2d:
                    98:9a:fd:b1:69:e2:e1:d9:cc:7e:a6:a8:c5:30:26:
                    e8:84:83:89:78:95:e3:0f:58:e9:2c:39:0b:7a:21:
                    52:a3:1f:d9:4b:cc:d0:fd:40:ca:bc:49:fa:4f:10:
                    8a:da:e4:19:14:f7:e5:88:ce:3f:f5:90:0f:e3:73:
                    9c:70:0b:c4:f1:f6:f1:f8:68:7b:c3:ac:76:24:a9:
                    2e:1d:16:04:1c:34:02:7c:ce:37:26:78:c0:b3:31:
                    52:f1:15:ff:4a:03:dc:e4:1d:d4:27:30:7e:d9:46:
                    2d:97:5c:7a:0c:db:63:10:c8:14:28:a0:a6:ed:28:
                    5b:b7:33:05:56:26:98:6b:88:a0:5f:ea:83:f1:f6:
                    c7:66:cd:08:5e:10:23:2e:06:7d:ac:b9:aa:f5:d0:
                    c4:44:ef:0c:79:33:78:65:0b:0b:da:06:70:d5:ca:
                    64:94:cb:28:99:3b:08:27:6a:8c:cc:32:ad:f8:b5:
                    4f:bb:ee:0d:85:de:16:b5:a8:b4:2c:c7:2c:dd:99:
                    8f:57:77:c9:03:5a:c3:59:5a:9d:36:02:04:40:a6:
                    f8:e5:38:50:85:c7:ec:38:6a:92:e5:7d:ad:ac:24:
                    60:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E3:7B:78:37:E6:B4:5C:85:98:12:38:C3:2E:40:98:FD:DB:21:2F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OeN7eDfmtFyFmBI4wy5AmP3bIS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:c9:9a:04:1e:d1:93:5f:f5:e2:47:e7:e0:53:8c:32:f3:
         ae:b5:11:23:52:06:d5:13:85:49:a9:4d:84:fa:38:b2:81:69:
         86:e7:14:0b:8a:5c:9a:42:c1:60:5d:8d:90:4f:02:9b:3f:92:
         33:fd:cf:ba:e6:5c:03:ad:a9:5a:35:70:30:e9:8d:06:85:7b:
         80:a5:34:d2:10:11:d7:8e:83:00:05:ee:c9:c8:de:81:66:83:
         cc:fe:48:2a:cc:b0:e2:f8:1f:6f:42:c3:11:0e:a7:31:d2:4a:
         ea:c5:03:20:5f:d6:d5:b1:62:84:94:2c:81:d6:0c:fd:6a:0d:
         10:e1:a6:7f:b5:fc:13:a7:19:7c:a7:9c:9c:2b:70:a0:3d:34:
         45:a7:0f:7d:13:a2:07:26:cd:e8:3b:2b:2e:b3:f9:d8:45:9d:
         36:d7:e5:3f:b7:70:32:aa:85:c4:3a:f4:16:f9:41:53:57:27:
         1f:8b:b4:4a:c6:47:65:9b:23:d6:78:9f:d7:00:c2:2d:44:f6:
         d7:76:7c:7e:92:df:6e:df:f4:f7:6b:54:84:6f:43:94:a3:28:
         b9:3c:02:ae:8c:05:3b:90:37:9a:62:cd:d9:ab:03:87:e8:c4:
         fe:4c:c6:2f:4a:58:34:40:71:5c:20:ad:17:09:47:c0:be:25:
         7f:6c:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org