Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Om6eG4BXHoyQkJod2xdeioiRzkw.roa
File:                     Om6eG4BXHoyQkJod2xdeioiRzkw.roa (raw, json)
Hash identifier:          264B4dkgbdFBCBYyArA+7C/ZRDiQIhey8XU0Y8mZTPE=
Subject key identifier:   3A:6E:9E:1B:80:57:1E:8C:90:90:9A:1D:DB:17:5E:8A:88:91:CE:4C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02C0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Om6eG4BXHoyQkJod2xdeioiRzkw.roa
Signing time:             Sun 31 Mar 2024 01:33:19 +0000
ROA not before:           Sun 31 Mar 2024 01:33:19 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:19 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=3A6E9E1B80571E8C90909A1DDB175E8A8891CE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:c0:f9:83:35:2e:66:03:0f:2e:fd:64:6d:
                    33:31:70:79:c7:dd:b4:bf:3c:24:0e:f9:d2:8c:ca:
                    31:14:fe:cb:ad:3b:47:0e:be:ae:83:20:02:a0:98:
                    7c:e7:30:72:62:4a:3f:84:90:2e:7f:6a:48:02:9b:
                    1b:e1:b3:e0:68:06:e5:2d:d7:64:44:0a:8a:d9:43:
                    9f:d7:c7:92:fc:c6:7a:24:85:1e:f6:4c:76:f2:b7:
                    ee:af:06:89:e6:28:d0:0a:33:b5:a4:84:32:fa:44:
                    c7:02:26:7f:19:3b:57:25:aa:fe:b1:89:32:47:69:
                    6f:0f:f5:aa:ec:25:a7:f1:7a:c9:a1:70:22:d3:b1:
                    b1:5a:1a:19:bf:fa:c6:cb:c0:10:27:c5:80:4b:bb:
                    6b:b5:bc:e8:9d:7f:eb:5d:05:a1:5e:c3:38:21:3e:
                    bc:60:d0:ce:bc:60:9c:df:6a:b9:02:c1:42:77:e9:
                    9e:6c:06:50:61:ee:2b:4d:8e:bd:73:5b:1b:ba:cf:
                    95:97:20:1a:5f:61:7f:3f:cc:76:82:55:11:39:4c:
                    13:fb:93:b9:0f:26:fb:67:43:ba:03:ba:1e:98:d1:
                    65:3c:e3:53:46:c6:82:ab:5d:4a:f0:1d:1e:41:1e:
                    6b:2d:0d:05:1c:bf:52:a1:c8:9f:d1:f1:9b:89:c4:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6E:9E:1B:80:57:1E:8C:90:90:9A:1D:DB:17:5E:8A:88:91:CE:4C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Om6eG4BXHoyQkJod2xdeioiRzkw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:0d:c8:7d:d5:fd:53:ee:46:99:23:3b:50:85:9b:49:b1:
         1e:59:1c:eb:51:35:68:7c:cb:d4:f2:97:ea:1c:32:ff:bb:76:
         d2:0c:d6:cf:42:84:ce:14:5b:bc:9f:ec:77:ae:2a:6b:1a:bd:
         e5:93:52:b6:f8:78:dc:70:8d:2a:84:3b:ff:3a:3b:cd:7d:ae:
         16:85:50:07:d3:68:f1:40:cb:3a:46:98:d3:a3:33:72:ff:f2:
         96:03:e8:6b:1e:c0:66:3a:c1:54:70:b8:56:60:7d:c7:dd:92:
         6e:aa:1b:de:0d:04:e5:da:50:36:d7:1c:49:13:17:e2:4c:15:
         c3:4b:be:a4:e8:e8:45:21:db:d3:f5:11:15:fa:0c:56:e4:e6:
         7e:05:5c:dd:12:44:06:bd:4f:99:75:7a:d8:87:9d:68:86:1e:
         a8:76:1c:27:a5:21:2f:86:9a:9a:38:fd:d4:a2:1c:40:51:1a:
         f0:f9:fc:fc:8e:24:22:0b:d5:57:78:40:48:95:af:c7:1e:c4:
         fb:7f:93:65:41:f7:bf:4e:88:33:6f:10:d1:bd:c6:99:47:e8:
         3a:62:49:fe:c2:27:da:98:f7:48:87:8a:9d:30:44:5f:67:48:
         df:63:76:f5:02:4a:b2:d3:58:0d:9a:1d:b4:5f:84:4d:9e:3d:
         62:9a:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org