Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PmM9ebtimXrH9nKcMp75I3Mu7Dg.roa
File:                     PmM9ebtimXrH9nKcMp75I3Mu7Dg.roa (raw, json)
Hash identifier:          RONonhigjzs3R44eMdh4pWOs1HNuD7PUQfKT6i2H1DM=
Subject key identifier:   3E:63:3D:79:BB:62:99:7A:C7:F6:72:9C:32:9E:F9:23:73:2E:EC:38
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02BA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PmM9ebtimXrH9nKcMp75I3Mu7Dg.roa
Signing time:             Sun 31 Mar 2024 01:33:17 +0000
ROA not before:           Sun 31 Mar 2024 01:33:17 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        59.137.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:17 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=3E633D79BB62997AC7F6729C329EF923732EEC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:dc:6b:1a:e8:72:ed:ae:37:fb:9e:ad:b6:
                    0d:5d:b1:0c:c7:1b:41:34:4f:dd:06:00:9e:dc:79:
                    c0:ef:47:6c:70:de:de:2b:ad:37:3b:c7:94:dc:2f:
                    48:60:0e:db:31:14:84:a6:be:f2:91:dd:57:b9:0a:
                    eb:b4:1c:54:ab:eb:6e:02:4b:6c:aa:59:bd:af:9c:
                    4a:83:37:2e:cc:e6:25:92:04:e3:db:a6:f4:81:0f:
                    84:27:f2:ab:99:86:55:a5:88:c6:b7:4b:a0:a4:c4:
                    5f:08:72:93:3a:f3:f8:ad:e9:b9:c5:7c:10:dc:af:
                    bd:f0:19:8c:be:22:8b:01:eb:2f:6b:e3:88:65:04:
                    df:08:54:5f:39:2f:70:ef:a2:fa:ec:94:f7:0d:e4:
                    1b:45:97:df:5a:33:68:96:70:b1:1e:9a:26:c5:c3:
                    00:3d:dc:11:59:0d:8f:99:84:a7:7e:28:57:be:55:
                    e5:ed:03:da:1b:4f:ed:0d:81:9b:b7:13:5b:3f:27:
                    39:da:b2:19:fe:57:e6:24:fa:4c:af:d3:80:2a:40:
                    a0:03:b4:1e:02:e9:b4:87:70:c6:c5:f0:7f:a4:05:
                    1b:41:85:66:bd:02:3e:3a:67:37:4f:94:1e:b3:e7:
                    a5:72:5a:fa:b5:38:8d:d0:25:f5:da:b0:a9:93:05:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:63:3D:79:BB:62:99:7A:C7:F6:72:9C:32:9E:F9:23:73:2E:EC:38
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PmM9ebtimXrH9nKcMp75I3Mu7Dg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b3:2d:d9:13:d5:a3:44:5f:dd:32:33:86:a7:a7:01:8c:47:ef:
         87:50:37:3b:63:73:00:35:51:c7:f1:9b:cb:02:e2:00:d9:79:
         e3:70:03:7f:6e:4b:ab:c1:c1:54:20:73:12:d3:99:25:b3:2d:
         90:ae:3a:a1:71:fb:dd:65:57:2f:14:a2:93:e1:04:1a:19:11:
         09:4b:fc:1b:70:5c:37:7f:f1:6a:0b:90:da:d6:00:05:55:3f:
         5e:2b:64:70:66:69:11:71:8c:60:bf:7f:f5:ca:73:27:f7:a5:
         8e:b2:36:c9:31:57:51:00:f0:ed:ff:00:47:4f:7f:c8:8f:8f:
         26:cd:67:51:1d:08:51:79:a4:a4:97:0e:bf:e9:25:02:a7:4d:
         30:15:b1:8d:de:f7:2b:8d:0a:15:66:a8:f1:d0:8b:f9:cc:4e:
         40:a6:9f:47:80:74:ad:ec:55:b4:fb:bf:52:61:ec:66:d8:44:
         17:ac:bf:52:2c:05:35:cb:d8:78:17:d2:92:89:a0:b5:25:59:
         bb:04:f3:b1:62:91:d9:b5:8a:0b:45:ff:ab:60:b6:fa:3a:d0:
         c0:94:2a:5a:d0:af:89:3a:20:61:0f:c4:7d:15:23:a1:88:f3:
         82:af:36:cb:e6:06:c0:90:99:b8:43:46:b2:02:22:a8:df:e9:
         35:1e:e4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org