Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WDhHeMsav5Kin2mce93uvxGz0ss.roa
File:                     WDhHeMsav5Kin2mce93uvxGz0ss.roa (raw, json)
Hash identifier:          e0Oz/KdTaS73ChCHYtdg1kJNpPDt015Mlf3QmeGd79o=
Subject key identifier:   58:38:47:78:CB:1A:BF:92:A2:9F:69:9C:7B:DD:EE:BF:11:B3:D2:CB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0318
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WDhHeMsav5Kin2mce93uvxGz0ss.roa
Signing time:             Sun 31 Mar 2024 01:38:43 +0000
ROA not before:           Sun 31 Mar 2024 01:38:43 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        124.209.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:38:43 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=58384778CB1ABF92A29F699C7BDDEEBF11B3D2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:ba:c2:6d:4d:90:96:41:9f:cc:84:b9:5d:
                    4e:e0:23:31:17:70:53:ae:79:ec:d7:67:24:f3:99:
                    b9:42:1a:52:44:95:d9:fc:5d:c0:b6:3a:02:52:96:
                    b8:aa:70:19:90:5a:2a:82:0a:60:e4:a8:1c:2f:96:
                    7f:0f:10:7c:d9:88:68:73:bb:cb:a2:d7:6f:8e:f0:
                    e1:a7:8a:81:b2:cf:b8:98:fa:1f:ab:46:86:08:81:
                    16:c5:04:4a:bd:3d:43:a3:5a:d0:65:ba:25:be:2d:
                    60:48:33:cb:d5:86:14:31:26:9c:e0:3b:12:6b:3d:
                    4c:18:00:02:c5:7a:a1:58:b7:34:b1:80:a4:dc:ec:
                    56:52:fc:3f:4d:15:41:51:c6:cc:20:2b:22:ef:c2:
                    fd:0b:91:34:39:c1:5e:33:70:e4:f5:00:c4:af:df:
                    88:28:c2:3d:1b:04:9b:6b:24:d2:09:ef:49:c3:1e:
                    6f:57:6d:e0:d3:5e:aa:dd:21:76:31:18:04:6f:94:
                    05:86:3e:b1:e4:64:13:e8:ac:e6:19:f1:a8:72:eb:
                    e2:05:8d:53:e1:a9:01:fe:e6:26:07:6e:cd:8f:41:
                    8d:8b:23:a0:02:a1:3f:54:31:73:5b:3a:5b:f3:c2:
                    56:83:9f:07:d6:ee:22:45:95:d8:24:09:15:5a:b3:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:38:47:78:CB:1A:BF:92:A2:9F:69:9C:7B:DD:EE:BF:11:B3:D2:CB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WDhHeMsav5Kin2mce93uvxGz0ss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:55:0e:0c:83:9d:00:cc:ee:65:47:52:87:f8:a3:8e:4b:
         f7:d5:cd:ed:34:3e:5f:93:f2:ec:83:b2:c6:e1:6f:5d:ae:64:
         c8:73:63:09:40:17:02:a4:e2:72:74:65:5d:59:58:89:37:ee:
         63:6f:d4:d4:e0:e7:4a:33:53:98:61:b7:aa:b0:39:3b:35:16:
         5f:71:ae:47:22:e2:24:f8:bc:14:7e:31:03:2b:d6:fb:f8:00:
         c1:79:88:c7:df:bd:e7:5f:de:8a:dc:7f:60:26:14:a5:e7:2a:
         8f:86:92:f8:db:c7:03:22:22:9f:36:4b:3d:bb:7d:a1:7b:10:
         61:5b:ef:6c:cc:ab:54:7a:79:2f:0a:f6:bb:79:4e:c2:9a:ae:
         1e:66:f1:be:4f:09:e3:62:e4:66:69:ef:d9:d9:43:01:1e:1f:
         e6:70:7e:6c:50:f1:23:fa:31:f5:ad:c6:a7:98:94:b8:aa:69:
         05:7d:58:9a:c7:72:e9:6d:f8:4c:22:d8:b4:25:09:fc:69:ac:
         e4:f7:ee:ca:52:b0:f6:eb:a6:8b:cf:bb:e1:00:c8:46:de:65:
         29:1b:b9:8a:a6:b6:75:41:08:29:fa:25:69:7a:c4:b2:41:f7:
         e3:e6:3d:da:5e:27:e4:fd:20:c9:3c:57:f9:6f:28:8f:15:02:
         2d:5f:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org