Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QVZq3xWkhOAWQCO5_Z-DT5iZlu8.roa
File:                     QVZq3xWkhOAWQCO5_Z-DT5iZlu8.roa (raw, json)
Hash identifier:          k/PN09BzzS7BHlRMDNnmkWUCxAAOpqw0Upcf0ZhGOZw=
Subject key identifier:   41:56:6A:DF:15:A4:84:E0:16:40:23:B9:FD:9F:83:4F:98:99:96:EF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02D9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QVZq3xWkhOAWQCO5_Z-DT5iZlu8.roa
Signing time:             Sun 31 Mar 2024 01:33:29 +0000
ROA not before:           Sun 31 Mar 2024 01:33:29 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        124.210.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:29 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=41566ADF15A484E0164023B9FD9F834F989996EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:41:34:68:fc:cd:50:2e:47:58:f4:9d:84:
                    b6:e6:ea:9b:97:9f:6b:12:34:f4:56:3b:8d:78:76:
                    e7:a0:e7:ea:5c:f1:ab:6e:65:f4:b3:e8:f5:e4:e8:
                    41:05:54:20:cc:cd:d3:9b:95:de:ad:3e:f1:36:34:
                    16:00:3c:69:14:9d:6d:bf:6d:35:b8:23:c1:56:ae:
                    84:b1:21:75:7b:7f:22:01:15:c0:64:f1:a5:37:50:
                    94:df:6a:63:a9:ba:aa:6a:b4:73:2d:ac:63:e0:d4:
                    81:70:22:13:3c:77:33:45:a4:c1:46:cf:92:88:34:
                    ee:58:1a:65:21:fa:58:f8:6d:59:9d:ea:ba:2c:94:
                    dd:2d:ca:6e:b6:d7:7f:d0:85:69:c3:a8:90:5f:d7:
                    38:a2:5a:6a:0f:ae:96:bd:47:d6:e1:88:16:6a:99:
                    1b:4e:cc:97:1a:70:86:52:b3:d1:94:9b:c1:0a:6d:
                    ef:6d:24:25:70:ac:e8:ef:0c:18:d1:34:0f:38:ac:
                    75:19:9c:53:da:7b:e9:2f:8f:dc:c9:78:32:7a:9b:
                    47:eb:28:0d:7f:24:c5:5a:4e:69:09:7e:c8:43:9b:
                    91:71:4c:fd:6d:58:58:1c:04:e8:d4:af:20:53:55:
                    58:8e:c0:6d:cd:cd:81:44:cd:a7:cf:eb:4f:8b:c7:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:56:6A:DF:15:A4:84:E0:16:40:23:B9:FD:9F:83:4F:98:99:96:EF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QVZq3xWkhOAWQCO5_Z-DT5iZlu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:3f:2d:80:0f:86:a3:8b:9d:c9:ca:76:36:23:16:e8:70:
         76:f7:41:bd:41:d4:02:17:dd:ca:08:fd:68:8d:fb:20:d8:3c:
         b2:cd:57:4e:7a:9f:f2:d2:75:dd:c4:ba:f8:18:96:c4:08:7a:
         bc:59:51:95:13:05:3a:b7:ae:9c:14:ae:a0:88:dc:84:7f:02:
         76:44:7c:37:76:aa:e0:31:f0:43:01:be:88:1b:f8:96:f8:19:
         0d:d4:4b:07:7a:ed:5a:8d:16:e0:c4:66:4a:b1:ba:4d:83:34:
         75:d8:13:70:a1:c8:ee:c0:d2:30:b2:79:fc:20:4a:7f:6f:fa:
         c5:b9:7e:d2:76:50:8d:e0:cf:b0:2c:6b:2b:34:d8:af:a5:31:
         94:8e:92:29:7a:7d:62:0c:f9:d3:eb:8f:0b:8f:bb:01:3a:0e:
         9a:63:66:7a:4f:ed:06:28:bf:fa:59:1c:d4:75:25:3c:96:33:
         f6:89:f2:fa:70:20:b3:b4:df:2f:dd:93:1c:f7:66:76:66:36:
         10:38:e8:d7:b1:35:b8:9c:6e:45:34:9e:71:4b:64:27:e3:7f:
         53:2f:96:2b:e1:0f:1a:67:18:38:5b:4f:83:29:0f:83:c9:2f:
         00:75:77:72:96:81:39:5a:7e:48:1d:7a:08:d1:63:eb:dc:8a:
         b3:8b:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org