Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/X46SmOZM6JJgbHmtiXlKIR2TUsQ.roa
File:                     X46SmOZM6JJgbHmtiXlKIR2TUsQ.roa (raw, json)
Hash identifier:          p/CnRRNd7fU8ZEkQGOsMDxwSAr9Q5aumHymYFu6IMng=
Subject key identifier:   5F:8E:92:98:E6:4C:E8:92:60:6C:79:AD:89:79:4A:21:1D:93:52:C4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02F9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/X46SmOZM6JJgbHmtiXlKIR2TUsQ.roa
Signing time:             Sun 31 Mar 2024 01:35:54 +0000
ROA not before:           Sun 31 Mar 2024 01:35:54 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        111.105.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:54 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=5F8E9298E64CE892606C79AD89794A211D9352C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bb:bf:cb:fe:a6:fd:ee:2f:b1:bd:71:7d:54:
                    ed:4e:15:ab:dc:68:cd:b5:43:47:30:c6:ec:54:3b:
                    22:a8:31:4f:71:93:eb:d5:69:ea:98:d2:ac:ef:51:
                    18:55:cc:cb:b8:f8:f0:42:47:35:5e:d3:1c:ef:60:
                    3c:30:5b:31:94:50:8f:1b:4c:37:6a:78:55:de:28:
                    c1:e5:1f:9d:55:4b:20:a1:2e:e0:a0:31:26:77:44:
                    6b:85:82:5c:2d:67:f4:8c:3a:69:25:37:80:67:ce:
                    c3:fa:b7:c4:74:f8:2a:aa:bb:3e:a2:a4:b3:a8:71:
                    17:0a:09:ba:55:6c:ed:51:b7:05:f7:ee:76:b8:76:
                    80:40:ff:0c:c6:02:02:5c:e5:7a:55:33:dd:86:4f:
                    d9:6b:39:fe:3a:1d:7d:ea:df:0f:07:c1:69:0e:66:
                    80:9a:82:03:f0:f7:8c:6c:01:82:32:4a:33:24:e4:
                    18:45:2a:06:a9:df:2e:f6:ca:91:4d:b7:d9:f7:80:
                    76:0d:1e:0f:c4:5d:1c:24:17:b9:ac:31:32:2f:52:
                    a2:ac:45:98:d4:f9:9c:11:42:09:6b:67:12:39:3d:
                    33:91:c3:97:55:43:a3:cf:59:ed:bd:7b:3f:e3:0c:
                    fc:fb:6d:c5:27:fe:f8:5a:18:31:43:41:86:7d:4e:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8E:92:98:E6:4C:E8:92:60:6C:79:AD:89:79:4A:21:1D:93:52:C4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/X46SmOZM6JJgbHmtiXlKIR2TUsQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:47:08:09:bf:a9:eb:77:81:56:7c:16:45:04:0f:3f:4d:d3:
         74:fc:2b:62:a0:f8:32:a3:a1:19:da:1a:a4:f7:88:6d:dd:cc:
         80:7e:8a:73:0c:f0:36:d6:25:e9:d8:e1:51:ee:3b:c6:73:4b:
         e0:47:4b:1c:13:68:cd:d8:b1:92:68:09:21:87:cf:7e:05:85:
         8d:76:bb:68:04:bb:0a:c9:14:5d:3f:01:58:da:41:00:dd:73:
         53:fb:94:2e:ef:aa:7b:1c:93:d5:58:d7:51:a4:af:97:38:d5:
         a7:01:56:b1:1e:11:e2:1d:99:99:be:88:c3:01:f0:a6:34:f4:
         0b:68:4c:d9:e4:c7:25:e1:ab:6a:da:36:74:dd:54:3b:09:b3:
         91:9e:42:04:71:ab:76:df:4d:d0:3d:a0:c5:aa:c7:0b:53:2d:
         de:d0:ac:eb:d3:04:bd:b6:dd:20:a8:82:9e:23:50:15:56:ce:
         3b:91:c2:20:d9:11:4a:f1:c2:e5:ea:44:62:1b:4f:b1:b8:1c:
         49:71:a4:fe:e1:17:cd:2e:e3:fe:8c:c4:9d:bd:5f:78:9e:eb:
         dd:98:b6:14:b9:bc:41:de:b4:7b:1a:53:fc:cd:bc:c5:09:73:
         29:17:e6:66:1a:83:34:14:c9:b8:0b:e2:b6:8c:5a:24:8d:c7:
         df:0b:1a:2b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTM1NTRaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVGOEU5Mjk4RTY0Q0U4
OTI2MDZDNzlBRDg5Nzk0QTIxMUQ5MzUyQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnu7/L/qb97i+xvXF9VO1OFavcaM21Q0cwxuxUOyKoMU9xk+vV
aeqY0qzvURhVzMu4+PBCRzVe0xzvYDwwWzGUUI8bTDdqeFXeKMHlH51VSyChLuCg
MSZ3RGuFglwtZ/SMOmklN4BnzsP6t8R0+Cqquz6ipLOocRcKCbpVbO1RtwX37na4
doBA/wzGAgJc5XpVM92GT9lrOf46HX3q3w8HwWkOZoCaggPw94xsAYIySjMk5BhF
Kgap3y72ypFNt9n3gHYNHg/EXRwkF7msMTIvUqKsRZjU+ZwRQglrZxI5PTORw5dV
Q6PPWe29ez/jDPz7bcUn/vhaGDFDQYZ9TshzAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUX46SmOZM6JJgbHmtiXlKIR2TUsQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1g0NlNtT1pNNkpKZ2JIbXRpWGxLSVIyVFVzUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBvaTANBgkqhkiG9w0BAQsFAAOCAQEAL0cICb+p63eBVnwWRQQPP03TdPwr
YqD4MqOhGdoapPeIbd3MgH6KcwzwNtYl6djhUe47xnNL4EdLHBNozdixkmgJIYfP
fgWFjXa7aAS7CskUXT8BWNpBAN1zU/uULu+qexyT1VjXUaSvlzjVpwFWsR4R4h2Z
mb6IwwHwpjT0C2hM2eTHJeGrato2dN1UOwmzkZ5CBHGrdt9N0D2gxarHC1Mt3tCs
69MEvbbdIKiCniNQFVbOO5HCINkRSvHC5epEYhtPsbgcSXGk/uEXzS7j/ozEnb1f
eJ7r3Zi2FLm8Qd60expT/M28xQlzKRfmZhqDNBTJuAvitoxaJI3H3wsaKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org