Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Tn7ZK4ipMq4IjHJg-HDrVWtplU8.roa
File:                     Tn7ZK4ipMq4IjHJg-HDrVWtplU8.roa (raw, json)
Hash identifier:          QRxlM8YuSixmu8gONQPgfVNHxL1Wq1QzUY33hrDIlRY=
Subject key identifier:   4E:7E:D9:2B:88:A9:32:AE:08:8C:72:60:F8:70:EB:55:6B:69:95:4F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0312
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Tn7ZK4ipMq4IjHJg-HDrVWtplU8.roa
Signing time:             Sun 31 Mar 2024 01:38:41 +0000
ROA not before:           Sun 31 Mar 2024 01:38:41 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        111.236.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:38:41 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=4E7ED92B88A932AE088C7260F870EB556B69954F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:a2:28:31:3a:1f:35:d6:22:30:bc:53:93:
                    f9:76:c5:1d:da:4c:1f:16:b0:46:cc:bf:b5:60:63:
                    99:5e:20:99:c3:26:b6:73:a1:13:b6:b9:59:75:fe:
                    11:b8:79:45:83:db:6f:4f:a9:04:52:3e:bb:64:f5:
                    48:fe:cb:45:0e:88:dc:10:d3:31:bd:a3:09:4c:59:
                    fe:bb:ce:e7:0b:33:84:8a:36:e6:70:78:3e:77:03:
                    6a:72:a0:f4:77:50:70:a7:b9:ce:0e:cc:87:21:15:
                    16:5d:e9:bd:f6:59:17:9c:a8:09:7c:56:65:e3:cb:
                    77:bb:63:5b:fe:8b:35:98:b7:25:66:25:8d:ce:ec:
                    85:6c:4f:fa:33:3b:98:64:3d:89:2f:ba:a3:ac:ab:
                    02:98:64:24:a1:2d:87:f4:fd:ea:c3:62:e8:23:0b:
                    33:8d:96:90:3c:ec:b5:d6:22:25:b8:f2:68:74:72:
                    5a:9f:63:9e:00:e0:ca:2b:db:25:3f:76:60:70:5c:
                    b8:7b:69:a9:84:f4:66:50:ed:17:d3:45:c4:e4:ee:
                    d8:a3:cb:64:7c:59:6d:ba:6b:04:45:62:3d:fa:45:
                    00:f4:c3:3c:31:48:09:66:df:c7:e2:87:fa:45:90:
                    df:f5:49:74:dd:2b:fb:2e:69:f2:e3:21:37:21:58:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7E:D9:2B:88:A9:32:AE:08:8C:72:60:F8:70:EB:55:6B:69:95:4F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Tn7ZK4ipMq4IjHJg-HDrVWtplU8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.236.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:5c:ab:2e:28:67:c3:c5:9f:7e:e7:8b:95:02:b5:6a:18:
         6f:c4:42:ee:9f:e8:3a:7e:e8:16:5c:24:0d:82:9b:c8:cf:48:
         21:82:94:8c:73:a6:c2:03:b9:76:a2:c6:4b:00:48:6c:f8:45:
         ab:29:4a:eb:7c:63:d8:dc:a4:64:54:9c:6e:39:0a:62:c8:e8:
         31:2a:65:d6:e5:f7:ce:32:31:37:da:71:01:ab:d7:6c:62:e9:
         59:92:06:29:e2:84:79:a3:b8:9f:0f:f7:fb:a5:67:09:38:99:
         e7:31:99:d5:d0:a8:a6:b6:f5:c9:9a:2f:c2:fe:d5:f6:2a:94:
         b4:8b:1e:b9:1d:c4:45:db:d0:ba:cd:aa:ec:aa:6c:fd:a8:3a:
         28:11:47:36:e2:12:84:60:be:db:d9:d9:2d:37:ab:b0:15:3b:
         aa:47:54:6f:04:a3:a3:14:fa:60:bd:44:9c:c5:26:68:08:b8:
         7a:00:10:d6:96:fe:6d:b4:f0:e8:e5:32:6e:a2:12:b7:60:f3:
         34:67:3f:fa:05:f1:28:67:e1:19:51:19:86:2b:de:3b:ec:78:
         5e:67:23:47:7f:0b:2e:3b:f7:19:75:54:20:0f:67:96:6d:19:
         86:c8:90:9f:1f:24:f1:1f:2d:87:1f:96:da:72:a6:9f:9e:c9:
         71:e7:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org