Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/W18HFyvYZ2lQHRwPMxBL3jhv0tw.roa
File:                     W18HFyvYZ2lQHRwPMxBL3jhv0tw.roa (raw, json)
Hash identifier:          EWH/g4B0FSdszvyYRuloN1If+p1bSYrSa2wGlhjr8dk=
Subject key identifier:   5B:5F:07:17:2B:D8:67:69:50:1D:1C:0F:33:10:4B:DE:38:6F:D2:DC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02D2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/W18HFyvYZ2lQHRwPMxBL3jhv0tw.roa
Signing time:             Sun 31 Mar 2024 01:33:26 +0000
ROA not before:           Sun 31 Mar 2024 01:33:26 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.168.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:26 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=5B5F07172BD86769501D1C0F33104BDE386FD2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:eb:a0:64:3c:47:cf:a2:01:18:56:b8:92:
                    8a:0d:b1:b6:19:e8:02:c0:82:c9:6e:44:90:11:3d:
                    2e:5b:5f:08:71:82:bc:ae:47:94:02:07:5c:20:6e:
                    41:a2:5d:2e:17:ef:31:1b:36:07:9e:1e:01:14:ae:
                    60:7d:f1:e8:2d:e8:ff:9b:f1:c3:5b:b6:61:46:74:
                    10:d7:3b:81:58:ab:4e:e8:fe:b8:8b:21:d4:e1:6f:
                    81:9f:15:cf:2b:f5:bd:6f:91:bc:94:c1:97:c2:f8:
                    89:ac:87:88:70:87:87:16:16:27:78:0b:24:bd:12:
                    68:3e:05:4f:6e:f5:e3:55:bf:25:9a:e8:56:7c:81:
                    85:51:af:7f:9e:5f:3a:84:7b:ad:7c:26:61:f9:fb:
                    78:d8:7a:42:29:ae:2c:df:dd:a4:63:3d:57:d6:38:
                    9b:7c:f2:44:06:20:28:b6:1c:d5:13:d6:70:16:a4:
                    2e:2c:d9:13:30:16:f4:58:c1:f2:70:03:4d:99:fe:
                    87:a6:cc:c0:3e:27:6f:8b:27:35:69:67:51:82:6b:
                    96:2a:58:7b:d8:52:ed:63:d7:21:12:a6:ae:e8:88:
                    77:2c:ea:e3:ab:0a:30:ed:22:1d:95:10:cc:35:8e:
                    6d:d2:db:0c:f0:56:37:43:7f:7f:77:cf:74:d0:bd:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:07:17:2B:D8:67:69:50:1D:1C:0F:33:10:4B:DE:38:6F:D2:DC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/W18HFyvYZ2lQHRwPMxBL3jhv0tw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:fa:fa:2d:33:0a:2b:51:9e:a7:06:c1:ca:c0:36:c4:88:e4:
         30:d5:71:1d:76:90:77:96:75:af:69:8d:a7:48:27:aa:57:6f:
         a8:09:18:81:6b:3e:a3:1d:dc:41:b7:7b:6f:3a:b7:49:65:0f:
         d5:f3:0c:20:16:3d:02:cb:b5:79:31:33:fa:9f:ef:95:e4:23:
         23:16:22:86:83:eb:db:d2:2c:3a:6f:63:11:1b:5c:ad:bd:b9:
         69:7b:2d:86:07:5c:58:30:d5:54:83:76:7a:46:c1:f1:b0:26:
         86:4a:16:b4:60:94:7b:4b:91:a8:72:71:74:b0:67:31:70:03:
         7f:99:f8:d2:2c:28:4b:5d:5b:cc:9c:c3:62:e3:7f:ed:fa:9a:
         62:de:b8:61:2d:ba:c3:3a:42:22:56:58:fa:66:ef:bb:b8:6c:
         b3:da:aa:7c:55:88:16:95:29:91:66:7d:bb:da:95:39:22:a4:
         57:44:3e:38:93:73:41:65:49:f0:26:d9:c9:dd:8e:5e:38:30:
         a0:5e:be:4e:e3:ac:cf:6b:d8:6b:f2:d8:ec:26:8a:34:a1:e3:
         ce:15:71:ee:78:b9:6f:be:9d:88:32:64:14:36:91:b7:d3:95:
         cf:cd:9e:84:39:18:8f:5f:60:54:cd:75:00:5a:4b:4b:a6:1a:
         f1:05:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:37 2024 by rpki-client on console-fra.rpki-client.org