Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UgOyJmxgx9gGnHNAGmQI4b3Y-sE.roa
File:                     UgOyJmxgx9gGnHNAGmQI4b3Y-sE.roa (raw, json)
Hash identifier:          NiPaRi6dCH8t4+4tF1IcdLEZ+K17djtr2ycFI0jiJcI=
Subject key identifier:   52:03:B2:26:6C:60:C7:D8:06:9C:73:40:1A:64:08:E1:BD:D8:FA:C1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02FB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UgOyJmxgx9gGnHNAGmQI4b3Y-sE.roa
Signing time:             Sun 31 Mar 2024 01:35:55 +0000
ROA not before:           Sun 31 Mar 2024 01:35:55 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        111.106.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:55 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=5203B2266C60C7D8069C73401A6408E1BDD8FAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:bb:5a:59:ed:7d:3f:7c:64:e3:dd:36:46:
                    94:f7:13:f3:57:ee:d1:d4:f6:b1:65:1f:c8:74:12:
                    69:91:4c:49:a5:0b:b8:7d:34:d6:5e:4f:b7:77:60:
                    5e:3e:db:d8:4f:1e:a6:c7:f8:50:2e:22:f7:42:a3:
                    92:66:c8:bf:df:28:48:18:81:9b:65:b0:d3:8a:e4:
                    2d:ac:b2:47:de:4d:50:aa:0f:77:6c:f5:8d:da:fd:
                    7d:5e:9b:70:b8:70:2e:4f:e3:92:aa:6d:30:02:86:
                    e1:ea:d4:2c:01:c8:07:71:bc:21:23:75:68:32:04:
                    00:6d:9b:5e:11:38:15:f5:a0:ad:5c:84:a5:35:46:
                    c5:60:12:fe:5a:50:d2:33:0c:a2:db:61:e8:72:11:
                    3b:59:24:cf:8c:21:6d:6a:af:d6:a1:27:d4:99:c4:
                    61:3e:6a:08:79:5d:bb:58:16:89:4d:fa:eb:9b:7c:
                    b7:5f:fa:40:d4:f5:d9:9a:a1:73:37:b4:59:2e:32:
                    0a:d6:ab:22:f3:53:5c:57:f6:b9:19:a1:8f:d6:3f:
                    46:92:23:9a:e8:9a:db:67:04:64:87:b8:88:b7:01:
                    be:b3:6d:34:02:18:fd:a5:0c:d0:34:d9:a9:88:ba:
                    53:4b:4c:a5:18:6b:f2:b8:26:57:98:0f:31:33:13:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:03:B2:26:6C:60:C7:D8:06:9C:73:40:1A:64:08:E1:BD:D8:FA:C1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UgOyJmxgx9gGnHNAGmQI4b3Y-sE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:4c:e7:90:5f:73:a9:87:7b:90:37:5d:19:3c:ef:7e:30:
         23:9f:08:12:38:bf:cb:62:bb:4f:cd:0b:8a:73:83:72:6b:bd:
         a2:31:d4:72:5d:ea:1c:e5:f8:ab:9f:53:4c:2a:da:52:65:8f:
         84:1a:4f:d1:6e:f8:89:7b:5f:8d:79:be:44:dd:79:b1:38:de:
         fb:1a:4d:07:1e:05:90:4f:29:9c:33:ba:b1:09:ec:b0:a1:ef:
         84:13:37:3f:5a:82:70:c1:69:c4:bc:43:49:2c:42:90:11:47:
         99:bb:6e:ba:ec:c6:2f:12:53:82:53:31:d5:60:16:a7:5d:50:
         b6:59:1d:af:b8:14:11:f6:01:c6:14:9a:2d:83:1e:f2:3a:da:
         93:98:a5:b5:66:9c:c8:72:e3:8e:98:07:75:b8:c1:17:05:90:
         5e:a0:32:48:b8:42:35:6c:c0:64:68:95:0e:db:ee:9c:e7:89:
         d4:87:aa:77:43:cd:24:8d:2c:9e:23:e9:93:bf:1e:a6:8f:45:
         70:9b:5e:1f:d2:ae:31:ac:5e:6b:84:51:05:36:41:d9:12:50:
         ea:c8:e6:d2:35:72:cd:3b:7e:a3:42:62:9e:5d:34:16:ed:89:
         b6:a8:fa:9c:4f:82:bc:3a:37:c6:b7:67:95:13:18:ab:ca:50:
         6d:a7:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org