Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/V4OXTrGpMtpedy_1QFBaaaWmPuE.roa
File:                     V4OXTrGpMtpedy_1QFBaaaWmPuE.roa (raw, json)
Hash identifier:          Vqwwa38SsSdHQOk4s/2fFi3265/kuo4UFSHRGaZukgo=
Subject key identifier:   57:83:97:4E:B1:A9:32:DA:5E:77:2F:F5:40:50:5A:69:A5:A6:3E:E1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       035D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/V4OXTrGpMtpedy_1QFBaaaWmPuE.roa
Signing time:             Sun 31 Mar 2024 01:42:50 +0000
ROA not before:           Sun 31 Mar 2024 01:42:50 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.186.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:50 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=5783974EB1A932DA5E772FF540505A69A5A63EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:ad:c9:44:f8:f7:2a:b8:34:86:62:93:8d:
                    ec:bf:c7:6d:af:34:d6:ab:42:61:5b:d7:7f:b1:44:
                    3f:42:5f:0d:8d:83:1a:87:15:d6:60:43:34:8d:91:
                    40:6a:c4:54:ef:48:71:4c:17:cc:bc:1e:08:09:1e:
                    41:72:1f:dc:2d:0a:9c:20:b5:d0:e5:19:fa:7d:a1:
                    cb:31:49:2f:5f:b7:24:b7:62:6a:0e:01:2b:9f:3e:
                    14:54:53:8e:cf:05:fb:6e:32:7e:57:30:3c:06:20:
                    2f:21:81:25:33:6c:18:eb:9b:b1:1c:10:62:d4:2b:
                    90:5b:ca:1d:c0:7b:f5:62:a1:9d:da:f5:ce:56:25:
                    87:52:b9:a5:2e:9b:6d:1b:da:cb:67:8c:12:60:db:
                    7a:1f:16:f7:68:d6:db:f4:d4:a4:99:e9:e0:a2:1d:
                    57:85:d8:1a:bf:75:a9:8d:47:21:4b:0d:b0:fb:22:
                    4f:31:ff:9d:3a:7e:8f:50:00:62:b7:97:fd:9e:5d:
                    86:3f:9d:f1:cd:55:cf:1a:c9:a7:79:17:89:ee:fc:
                    f4:61:17:a0:72:ff:fc:06:80:12:10:d4:74:01:da:
                    63:73:79:e2:41:46:88:c3:db:55:85:24:e7:85:ea:
                    ee:2d:c1:63:11:78:5f:33:2e:7e:af:c1:83:be:4d:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:97:4E:B1:A9:32:DA:5E:77:2F:F5:40:50:5A:69:A5:A6:3E:E1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/V4OXTrGpMtpedy_1QFBaaaWmPuE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:c2:96:31:76:10:71:64:11:41:e8:d1:0a:eb:79:01:67:
         84:36:d4:37:d7:e8:92:28:69:5b:f5:b6:66:84:da:3c:b5:73:
         b6:ab:03:11:f1:fd:6a:9b:ae:54:61:63:8a:f6:d4:49:6e:d7:
         59:12:14:b0:54:15:b7:b8:2c:19:f9:0b:57:90:dc:1a:03:3f:
         1e:c1:9c:97:ff:fa:92:3d:9c:ed:b8:31:14:64:75:28:f3:17:
         10:7c:5f:21:8e:43:0e:f0:d2:99:e9:53:8c:6b:6c:80:00:5d:
         73:6e:0a:ab:6b:7b:48:8e:28:db:bc:11:d8:55:cf:fc:94:6f:
         eb:7a:0b:47:f7:28:63:3c:ab:27:c9:7e:7e:25:6d:5b:40:37:
         55:f4:20:04:f5:02:24:e2:ae:db:55:0b:a6:1b:11:66:f5:e9:
         44:ed:54:fc:84:ed:2c:42:60:3a:72:00:45:fb:6e:b7:b9:37:
         f5:6e:8a:02:c0:b7:dd:10:35:19:5c:66:3e:6f:67:15:5a:e2:
         0f:86:89:9f:20:10:52:0c:87:63:6d:be:ca:72:c7:89:b6:07:
         25:86:4c:9d:42:29:5e:80:0e:ca:96:a3:e7:5c:bd:83:87:9c:
         1e:00:86:57:e7:6c:15:3b:b9:0b:26:f8:81:5e:d0:83:8f:b8:
         51:37:6d:57
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA10wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTQyNTBaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU3ODM5NzRFQjFBOTMy
REE1RTc3MkZGNTQwNTA1QTY5QTVBNjNFRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXmq3JRPj3Krg0hmKTjey/x22vNNarQmFb13+xRD9CXw2NgxqH
FdZgQzSNkUBqxFTvSHFMF8y8HggJHkFyH9wtCpwgtdDlGfp9ocsxSS9ftyS3YmoO
ASufPhRUU47PBftuMn5XMDwGIC8hgSUzbBjrm7EcEGLUK5Bbyh3Ae/VioZ3a9c5W
JYdSuaUum20b2stnjBJg23ofFvdo1tv01KSZ6eCiHVeF2Bq/damNRyFLDbD7Ik8x
/506fo9QAGK3l/2eXYY/nfHNVc8ayad5F4nu/PRhF6By//wGgBIQ1HQB2mNzeeJB
RojD21WFJOeF6u4twWMReF8zLn6vwYO+TSHRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUV4OXTrGpMtpedy/1QFBaaaWmPuEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1Y0T1hUckdwTXRwZWR5XzFRRkJhYWFXbVB1RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVquuAwDQYJKoZIhvcNAQELBQADggEBAJbHwpYxdhBxZBFB6NEK63kBZ4Q2
1DfX6JIoaVv1tmaE2jy1c7arAxHx/WqbrlRhY4r21Elu11kSFLBUFbe4LBn5C1eQ
3BoDPx7BnJf/+pI9nO24MRRkdSjzFxB8XyGOQw7w0pnpU4xrbIAAXXNuCqtre0iO
KNu8EdhVz/yUb+t6C0f3KGM8qyfJfn4lbVtAN1X0IAT1AiTirttVC6YbEWb16UTt
VPyE7SxCYDpyAEX7bre5N/VuigLAt90QNRlcZj5vZxVa4g+GiZ8gEFIMh2Ntvspy
x4m2ByWGTJ1CKV6ADsqWo+dcvYOHnB4AhlfnbBU7uQsm+IFe0IOPuFE3bVc=
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:37 2024 by rpki-client on console-fra.rpki-client.org