Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/W7Al28HAGfgE1RRHv9ZBF851Eao.roa
File:                     W7Al28HAGfgE1RRHv9ZBF851Eao.roa (raw, json)
Hash identifier:          4+8FElCKrz6X5Lx2wkL6r78CUv38cU7LeWzP5t5GvTw=
Subject key identifier:   5B:B0:25:DB:C1:C0:19:F8:04:D5:14:47:BF:D6:41:17:CE:75:11:AA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       025D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/W7Al28HAGfgE1RRHv9ZBF851Eao.roa
Signing time:             Sun 01 Oct 2023 01:29:19 +0000
ROA not before:           Sun 01 Oct 2023 01:29:19 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        218.222.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:19 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=5BB025DBC1C019F804D51447BFD64117CE7511AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:35:83:c4:8f:35:a9:94:df:77:2a:09:4a:
                    4f:ef:02:95:3e:f7:45:dd:57:b1:5e:67:67:26:cb:
                    f2:dc:32:6a:67:a5:fd:d0:75:8f:65:47:ea:22:f3:
                    92:0c:ac:70:e2:45:77:5c:15:4d:08:c2:07:7c:32:
                    65:96:12:77:6d:45:06:d2:2b:6c:a5:f8:7e:8b:fa:
                    87:9e:f0:5e:f5:42:64:1f:ac:a0:84:16:b4:85:cb:
                    38:90:12:dd:07:06:54:67:bc:3f:48:54:18:08:50:
                    44:e1:9c:a9:36:bd:54:54:1f:00:bf:95:19:e8:5b:
                    19:75:2e:b2:fb:68:45:5c:9f:11:40:e1:d1:ac:72:
                    fd:52:56:05:60:ae:b2:1c:5a:71:42:79:cf:4b:6b:
                    ad:39:7a:f3:3b:38:9c:27:4c:43:89:6d:69:9f:50:
                    b5:39:99:8e:e0:4f:2f:17:a3:46:00:d7:72:06:f4:
                    ba:be:e2:43:b7:cb:f6:c6:ab:3f:7d:ba:0a:e9:9b:
                    dc:65:56:50:20:20:87:f9:2f:aa:3c:23:6b:93:0c:
                    aa:cd:c9:e8:5f:de:5b:8a:65:0e:f4:14:6a:25:3d:
                    cb:70:c7:84:db:dd:8c:a8:43:88:9a:41:97:b8:d6:
                    80:86:53:d1:f6:75:d4:86:90:53:6c:01:fa:e0:31:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:25:DB:C1:C0:19:F8:04:D5:14:47:BF:D6:41:17:CE:75:11:AA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/W7Al28HAGfgE1RRHv9ZBF851Eao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.222.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:fe:6b:b5:7f:b2:09:a7:fc:21:fd:ef:5b:fc:29:a3:6c:
         06:3a:ea:5e:69:91:25:5d:50:c7:1c:79:47:db:0c:67:fe:db:
         09:f7:e2:d2:ce:02:9e:f5:bf:bf:ba:3e:6e:a2:08:77:b0:e5:
         5e:22:c8:d3:bd:c7:10:28:73:00:36:a3:cd:24:24:4d:ff:d6:
         f5:ef:9a:37:22:fe:e7:4a:18:11:f9:6a:72:b3:a1:79:4b:a4:
         d7:69:79:91:49:53:26:8a:5b:ed:03:32:1a:97:b1:3a:1e:48:
         5d:47:ed:33:c5:91:96:2c:2a:dd:74:d4:63:47:4f:2e:b5:42:
         a0:20:f6:d5:9d:0f:c3:63:da:25:15:2d:e8:5f:42:c8:c2:4f:
         40:fb:95:cf:3a:c1:5e:b4:46:1c:6a:04:47:54:05:36:52:20:
         de:47:f1:0d:b3:5f:7d:f9:02:4b:e4:26:85:a3:42:e8:25:c8:
         ab:41:bf:01:b1:26:a3:6c:12:e3:ef:bc:47:80:18:90:4f:fb:
         3f:86:86:2a:f0:d5:c5:a8:7a:4f:bd:ff:b7:d9:37:fc:08:7c:
         df:3e:f7:53:3b:4d:a9:67:f3:e1:55:1b:9c:06:96:0f:92:f7:
         b1:48:a9:ee:1f:b7:3b:4c:bc:c3:ff:54:48:fe:7f:e4:e5:44:
         36:9b:8f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org