Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/R2-wCikPS9TfhCaQ0eITkB_Hb74.roa
File:                     R2-wCikPS9TfhCaQ0eITkB_Hb74.roa (raw, json)
Hash identifier:          LftNNubgvxds74z579lBZ4yXodJRoHGYjMCn7jw4thQ=
Subject key identifier:   47:6F:B0:0A:29:0F:4B:D4:DF:84:26:90:D1:E2:13:90:1F:C7:6F:BE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0363
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R2-wCikPS9TfhCaQ0eITkB_Hb74.roa
Signing time:             Sun 31 Mar 2024 01:44:34 +0000
ROA not before:           Sun 31 Mar 2024 01:44:34 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:44:34 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=476FB00A290F4BD4DF842690D1E213901FC76FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:5d:25:bd:e3:30:21:36:e3:15:78:a0:a2:
                    a8:31:39:cd:36:f6:68:26:93:9e:6f:e0:cf:98:0b:
                    66:bd:2f:d8:bc:0b:20:3b:e1:78:d4:98:06:18:76:
                    5b:39:db:f8:d1:b5:7d:91:5c:09:d6:36:ad:63:cc:
                    aa:a3:bb:b4:15:a4:51:46:83:8a:34:77:5a:2a:06:
                    11:8a:b9:35:15:aa:2c:bd:9a:bd:94:0c:bc:b5:fd:
                    28:93:79:76:71:ae:1c:6b:9f:e6:8c:7c:9b:a0:29:
                    c4:33:58:60:9a:09:30:1d:c4:2b:e1:01:31:c7:ab:
                    68:33:39:9f:2c:c2:bb:45:24:31:28:79:ae:03:0a:
                    8f:13:46:83:40:0f:08:33:38:2a:62:0b:0d:36:75:
                    4b:fb:b6:ec:f3:a9:e2:0a:57:f8:d0:ef:8f:e1:17:
                    43:fd:c3:b3:80:51:1d:f4:e6:9e:98:0d:4c:07:d9:
                    49:bd:b4:35:93:8c:bf:8c:93:d7:3d:f2:f8:03:8c:
                    36:a1:68:31:2e:82:e3:54:4b:fd:dd:d8:d5:35:eb:
                    4d:08:5f:26:75:3a:a2:1c:3e:d6:b0:2a:59:cf:10:
                    c5:b3:fa:d9:11:6a:e6:a3:47:73:50:db:c4:bd:78:
                    d9:7c:77:59:05:f4:28:cf:67:37:d9:78:36:33:ba:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6F:B0:0A:29:0F:4B:D4:DF:84:26:90:D1:E2:13:90:1F:C7:6F:BE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R2-wCikPS9TfhCaQ0eITkB_Hb74.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:4c:fd:b7:53:19:93:fa:80:be:66:30:a3:09:5d:f5:f1:
         51:b8:46:bb:1c:36:b4:7a:5e:26:71:69:21:e7:cf:2d:88:2b:
         73:3d:fd:62:ff:e1:73:7a:11:80:30:32:a7:1e:2f:0d:84:9d:
         0a:a1:97:c3:6e:d7:6c:63:89:78:2f:4b:f4:1c:9d:dd:11:59:
         8f:43:0c:82:a2:d8:ea:ea:f0:1e:80:41:1a:ac:78:02:81:9b:
         72:6e:26:65:9a:cf:3a:e5:8e:45:e2:90:c4:ed:80:ea:bf:f3:
         3d:88:e9:7b:bc:77:9e:2f:3d:4f:2f:e6:23:62:e6:55:27:99:
         62:33:a8:17:a8:18:f9:02:f9:17:16:f4:0b:7d:90:4c:c0:4e:
         20:f5:4f:32:88:a6:a1:9d:ff:85:fb:00:eb:d2:5c:e5:0e:0b:
         c5:3c:50:74:48:77:4f:66:eb:b0:99:92:7c:19:9e:32:b9:73:
         07:77:21:5b:35:e7:d8:cf:01:c5:53:a5:a1:ac:65:68:05:57:
         20:8d:eb:64:5a:18:f1:f0:b2:0c:20:40:58:22:c3:0d:a1:0f:
         9e:cc:da:3d:93:72:28:78:f8:34:98:bb:52:e1:1d:a3:fd:e2:
         83:c0:b3:4c:46:73:64:b3:c8:71:9e:4b:e5:e7:2e:b5:94:8e:
         9e:7c:9d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org