Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZAzasfBLj2Ajqxx7S-rVlwPuhAw.roa
File:                     ZAzasfBLj2Ajqxx7S-rVlwPuhAw.roa (raw, json)
Hash identifier:          qKGV6Ds1JHcnhxk6oS4QORdxZkeYmLKLc9ousTzjOwY=
Subject key identifier:   64:0C:DA:B1:F0:4B:8F:60:23:AB:1C:7B:4B:EA:D5:97:03:EE:84:0C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0331
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZAzasfBLj2Ajqxx7S-rVlwPuhAw.roa
Signing time:             Sun 31 Mar 2024 01:40:43 +0000
ROA not before:           Sun 31 Mar 2024 01:40:43 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        182.250.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:43 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=640CDAB1F04B8F6023AB1C7B4BEAD59703EE840C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:26:b8:a4:fc:29:f9:a5:51:ec:15:f9:f1:
                    b2:e5:8c:87:b6:c5:bf:cc:fd:12:86:0a:09:df:d7:
                    a5:76:2d:09:4f:3d:57:e0:2a:3f:8e:be:29:12:da:
                    88:0d:c2:a9:0d:05:22:5f:d3:3d:79:82:93:e4:8d:
                    05:e1:21:0d:0c:a8:ce:48:10:d6:03:bb:e9:d3:8c:
                    5b:65:40:81:ba:6a:8d:6a:31:95:08:4d:cf:fb:90:
                    4e:bd:89:67:44:81:b2:78:4d:fc:8c:90:d7:d4:e8:
                    67:f6:a6:3c:ad:53:ad:b5:5c:b4:7a:d3:af:56:64:
                    5b:e1:ef:68:56:70:87:bb:5e:8d:f0:2e:46:d6:2d:
                    b8:c8:2d:5a:5b:63:f9:e0:2e:00:c1:32:d5:bb:47:
                    26:35:3a:16:45:22:c8:b2:0d:d1:ba:91:0d:41:02:
                    fb:19:bd:fd:81:3b:1b:b1:19:ff:55:f0:5f:9f:ba:
                    b4:f4:68:d1:f6:88:58:95:28:1d:74:67:99:75:7c:
                    11:97:0c:25:9b:8e:70:51:2d:23:cb:81:ef:58:be:
                    e2:76:a5:f5:c7:86:99:25:d5:c8:44:8f:01:b8:86:
                    fc:b5:d4:62:ad:3f:ab:02:88:03:e7:a5:99:f5:f6:
                    14:f7:e1:16:de:8b:5d:92:ce:d1:42:12:ac:7f:c2:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0C:DA:B1:F0:4B:8F:60:23:AB:1C:7B:4B:EA:D5:97:03:EE:84:0C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZAzasfBLj2Ajqxx7S-rVlwPuhAw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:4c:46:32:cb:b1:3d:06:bd:3e:78:8a:ca:ba:9c:2f:e5:26:
         42:83:b7:b1:9a:1c:2b:ef:b3:cd:e1:e4:c7:20:9f:07:86:f1:
         d7:4b:fc:8c:e5:af:7c:46:c4:e6:82:37:82:44:8a:27:02:52:
         44:bb:46:db:6f:45:b0:b2:9b:18:5a:83:d7:97:f9:61:2b:ea:
         e5:5d:e9:8c:be:96:9e:e9:7f:ed:87:69:0f:a5:ea:1f:ad:81:
         c1:f6:ed:39:cc:37:94:7e:23:d7:f8:99:a6:9b:12:1d:a1:a4:
         5b:ec:8b:cf:a8:6b:c6:85:97:27:87:a6:f4:de:32:c4:40:0f:
         ca:26:8d:a6:bf:f3:3e:f6:f3:cf:6b:5f:e6:7d:cb:44:53:07:
         eb:be:38:d7:cd:8a:bd:09:dd:d5:f5:15:6d:22:51:1e:94:e3:
         9a:63:80:e5:41:82:94:f8:3e:bc:1b:58:2b:2a:af:57:f5:a3:
         75:35:6f:e4:67:3b:0f:39:16:c2:de:4c:04:88:53:0c:58:f3:
         5d:09:0b:c7:a3:bb:ff:3d:b8:7c:e9:3b:ff:a6:3c:21:df:f4:
         1b:65:12:99:5e:95:32:e2:86:f1:2b:28:ca:43:70:dc:ef:0d:
         85:09:41:72:58:11:5e:fe:61:41:ab:c6:f9:90:7e:f2:e6:4e:
         45:b2:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org