Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa
File:                     Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa (raw, json)
Hash identifier:          1S96c2TRvJTh0gzVTO8B2TiM634dHyNLLy9k6zWjm0E=
Subject key identifier:   5E:FA:FC:05:72:CA:5F:5D:16:0D:6C:6F:6F:90:AF:39:A1:CC:B4:6B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02AA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa
Signing time:             Sun 31 Mar 2024 01:29:44 +0000
ROA not before:           Sun 31 Mar 2024 01:29:44 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        27.94.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:29:44 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=5EFAFC0572CA5F5D160D6C6F6F90AF39A1CCB46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:dd:71:41:0d:4b:33:1d:f7:8d:62:60:a2:
                    1d:42:22:43:b5:a0:15:07:26:93:d2:ee:95:ab:ae:
                    66:ba:b4:20:7a:0b:d1:0f:c5:42:91:0b:b6:5a:59:
                    ec:cb:ae:ef:91:16:7d:7d:1e:25:bc:24:1a:bc:25:
                    b1:18:24:ad:a3:d3:41:de:3a:02:b3:20:7c:a8:b6:
                    bc:f5:62:82:da:17:9d:64:de:aa:10:e1:22:73:09:
                    34:5b:fa:55:37:a9:22:ea:1b:3a:dc:74:9c:6c:5f:
                    c5:ea:7c:c6:29:f8:89:22:d3:cc:52:f5:f3:4c:45:
                    3b:a5:b0:3a:2a:be:7a:17:8f:d8:68:01:4b:a4:64:
                    58:12:2e:64:9c:55:b4:ce:a2:e6:c9:14:62:36:e2:
                    6c:a3:8f:b2:ce:cd:33:aa:22:7f:84:1d:da:26:75:
                    9d:79:d2:02:9b:66:1f:c3:75:2a:21:54:37:e1:e6:
                    3e:f5:d5:a4:77:6c:b1:49:24:0f:ec:2f:07:af:9f:
                    97:0c:62:71:55:89:f6:02:7d:7c:95:78:c5:bd:48:
                    a5:3d:c7:dd:72:6f:ee:f1:8b:35:13:bd:9d:e0:bf:
                    86:43:3b:13:ca:fd:2b:3a:ac:e9:42:49:92:df:5e:
                    c9:c8:bb:1d:dd:c5:e4:a1:3c:45:af:64:de:19:c0:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FA:FC:05:72:CA:5F:5D:16:0D:6C:6F:6F:90:AF:39:A1:CC:B4:6B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xvr8BXLKX10WDWxvb5CvOaHMtGs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:a9:e8:7e:9f:95:9b:4b:8b:49:df:5d:8f:29:99:49:72:
         f4:71:a5:b9:3a:42:49:b1:da:47:c5:80:ef:16:2b:95:aa:25:
         6b:95:ee:50:e9:f7:01:17:e9:10:eb:2a:ad:9b:20:51:2b:a1:
         ab:7e:d7:8e:b7:3f:67:c6:93:10:56:64:12:70:73:4b:97:48:
         fe:9d:55:97:ba:97:f6:67:91:85:65:fc:b2:2b:11:83:ee:a7:
         a9:f9:8f:b0:5d:05:36:34:95:e1:3d:97:35:a0:57:7a:74:c3:
         7c:ad:f4:51:a7:c8:9a:b7:b2:31:3f:70:70:b9:39:f1:ba:30:
         94:12:1a:87:53:34:90:71:26:2c:6a:0c:30:79:6d:ad:78:ea:
         ac:c7:0b:cb:1a:9e:63:e1:64:67:ad:d5:ae:bc:44:7a:9f:18:
         4b:ae:8d:ff:0c:8f:19:cf:07:23:a3:f6:4e:ad:6d:00:44:4e:
         73:ca:14:9b:af:af:38:8d:68:0e:ed:fa:85:27:68:ad:13:85:
         cf:07:97:25:78:ad:04:96:b2:ac:f5:eb:b1:20:bd:09:9b:35:
         39:47:10:3e:bd:4e:a3:13:9c:73:90:5d:e9:23:b0:e7:e1:61:
         18:da:c7:ce:ca:0d:f5:87:92:39:f5:4b:da:22:3c:2b:a4:98:
         e2:3a:73:79
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAqowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTI5NDRaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFRkFGQzA1NzJDQTVG
NUQxNjBENkM2RjZGOTBBRjM5QTFDQ0I0NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd491xQQ1LMx33jWJgoh1CIkO1oBUHJpPS7pWrrma6tCB6C9EP
xUKRC7ZaWezLru+RFn19HiW8JBq8JbEYJK2j00HeOgKzIHyotrz1YoLaF51k3qoQ
4SJzCTRb+lU3qSLqGzrcdJxsX8XqfMYp+Iki08xS9fNMRTulsDoqvnoXj9hoAUuk
ZFgSLmScVbTOoubJFGI24myjj7LOzTOqIn+EHdomdZ150gKbZh/DdSohVDfh5j71
1aR3bLFJJA/sLwevn5cMYnFVifYCfXyVeMW9SKU9x91yb+7xizUTvZ3gv4ZDOxPK
/Ss6rOlCSZLfXsnIux3dxeShPEWvZN4ZwLyzAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUXvr8BXLKX10WDWxvb5CvOaHMtGswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1h2cjhCWExLWDEwV0RXeHZiNUN2T2FITXRHcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAbXjANBgkqhkiG9w0BAQsFAAOCAQEARtyp6H6flZtLi0nfXY8pmUly9HGl
uTpCSbHaR8WA7xYrlaola5XuUOn3ARfpEOsqrZsgUSuhq37Xjrc/Z8aTEFZkEnBz
S5dI/p1Vl7qX9meRhWX8sisRg+6nqfmPsF0FNjSV4T2XNaBXenTDfK30UafImrey
MT9wcLk58bowlBIah1M0kHEmLGoMMHltrXjqrMcLyxqeY+FkZ63VrrxEep8YS66N
/wyPGc8HI6P2Tq1tAEROc8oUm6+vOI1oDu36hSdorROFzweXJXitBJayrPXrsSC9
CZs1OUcQPr1OoxOcc5Bd6SOw5+FhGNrHzsoN9YeSOfVL2iI8K6SY4jpzeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org