Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zb6FPTegeo7DRNP21nX1dR5V3xQ.roa
File:                     Zb6FPTegeo7DRNP21nX1dR5V3xQ.roa (raw, json)
Hash identifier:          o6b+/ouwsI8cpjCA4Aa+USUqPSFz1O5rWJyZL5s0i/0=
Subject key identifier:   65:BE:85:3D:37:A0:7A:8E:C3:44:D3:F6:D6:75:F5:75:1E:55:DF:14
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02FC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zb6FPTegeo7DRNP21nX1dR5V3xQ.roa
Signing time:             Sun 31 Mar 2024 01:35:56 +0000
ROA not before:           Sun 31 Mar 2024 01:35:56 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        222.3.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:56 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=65BE853D37A07A8EC344D3F6D675F5751E55DF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:8e:2d:bd:d1:ef:51:84:c4:1a:1f:c4:5e:
                    95:7c:31:0a:b8:44:ea:4f:63:b4:6a:b7:9c:c5:bd:
                    18:cb:06:07:68:cd:61:92:39:ed:31:0d:ff:53:89:
                    17:77:13:b1:59:6e:cb:11:5c:2a:5a:09:d8:58:6b:
                    24:20:b4:bd:8e:56:08:7a:00:59:d1:29:09:ab:9b:
                    60:e7:3f:42:49:4f:c2:ac:3d:3e:1c:04:69:bf:5f:
                    40:05:b5:17:50:1b:82:2d:99:2f:27:b0:77:51:03:
                    a2:01:3c:31:16:c5:c4:37:63:98:a8:ed:55:e7:db:
                    41:1a:bd:bd:6d:a7:94:b7:97:01:e9:54:77:b8:18:
                    2c:06:55:6e:48:b3:3d:72:91:fd:fa:49:d7:7c:f9:
                    97:a5:b3:8b:42:d2:0b:4e:c5:f4:20:04:0f:cc:c0:
                    1d:eb:33:f1:0c:6e:b8:e4:98:24:65:61:fb:04:98:
                    97:4e:2d:56:68:62:11:a0:75:5e:cf:7d:0e:2a:c8:
                    12:50:93:7b:56:a2:a6:e6:7a:50:2a:f8:2b:8a:9c:
                    05:8a:3c:81:73:f6:21:56:61:60:ff:71:65:d6:49:
                    82:ab:95:0e:03:32:bc:2c:e6:22:79:e7:77:f8:7a:
                    46:4f:ae:3e:1c:a6:b3:6e:d1:be:1f:c4:16:ff:fe:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BE:85:3D:37:A0:7A:8E:C3:44:D3:F6:D6:75:F5:75:1E:55:DF:14
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zb6FPTegeo7DRNP21nX1dR5V3xQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:5a:3f:f7:90:9e:8d:17:54:e6:f5:ef:ec:dd:9c:69:fc:
         05:41:37:18:0f:74:e3:5a:0f:a0:5a:32:5f:cc:90:52:24:1d:
         f7:c7:8c:ba:97:06:9e:fb:60:a1:23:5b:fd:9e:7f:31:54:3b:
         43:17:ca:b7:db:c8:9d:80:16:df:0a:0c:7c:e6:10:78:6a:1e:
         8a:74:9d:4c:9f:91:9e:ad:b0:4f:b1:3f:a6:ad:9f:54:53:5a:
         67:04:84:df:4d:c5:53:d3:3e:0e:83:9f:36:18:e7:6a:c5:29:
         d5:57:66:52:4d:a2:cd:1b:ee:e3:fc:e7:a7:1b:2b:9c:b8:ab:
         12:a7:03:41:af:a2:dd:53:56:43:d8:3b:5c:0a:8c:ce:77:a9:
         7b:8a:45:5c:96:9b:9b:8e:5a:a2:10:59:2f:02:d5:1e:b2:39:
         e8:bb:9e:d0:f4:33:38:ae:48:73:f6:8f:b8:6d:55:50:c9:d5:
         cd:92:ca:0b:80:16:56:be:68:d9:14:c7:cc:8a:f3:aa:da:c9:
         3c:85:ec:62:94:5d:5b:14:15:82:e4:95:23:c1:e3:78:fa:8f:
         b7:35:7f:36:e8:c7:b2:4d:30:89:05:d0:eb:6c:d7:2e:f5:90:
         64:74:9e:0c:d1:c7:c9:09:e4:9f:36:75:06:b2:e3:50:79:2d:
         25:2d:1c:39
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTM1NTZaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1QkU4NTNEMzdBMDdB
OEVDMzQ0RDNGNkQ2NzVGNTc1MUU1NURGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCQo4tvdHvUYTEGh/EXpV8MQq4ROpPY7Rqt5zFvRjLBgdozWGS
Oe0xDf9TiRd3E7FZbssRXCpaCdhYayQgtL2OVgh6AFnRKQmrm2DnP0JJT8KsPT4c
BGm/X0AFtRdQG4ItmS8nsHdRA6IBPDEWxcQ3Y5io7VXn20Eavb1tp5S3lwHpVHe4
GCwGVW5Isz1ykf36Sdd8+Zels4tC0gtOxfQgBA/MwB3rM/EMbrjkmCRlYfsEmJdO
LVZoYhGgdV7PfQ4qyBJQk3tWoqbmelAq+CuKnAWKPIFz9iFWYWD/cWXWSYKrlQ4D
Mrws5iJ553f4ekZPrj4cprNu0b4fxBb//tVnAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUZb6FPTegeo7DRNP21nX1dR5V3xQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1piNkZQVGVnZW83RFJOUDIxblgxZFI1VjN4US5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeAzANBgkqhkiG9w0BAQsFAAOCAQEAJh5aP/eQno0XVOb17+zdnGn8BUE3
GA9041oPoFoyX8yQUiQd98eMupcGnvtgoSNb/Z5/MVQ7QxfKt9vInYAW3woMfOYQ
eGoeinSdTJ+Rnq2wT7E/pq2fVFNaZwSE303FU9M+DoOfNhjnasUp1VdmUk2izRvu
4/znpxsrnLirEqcDQa+i3VNWQ9g7XAqMznepe4pFXJabm45aohBZLwLVHrI56Lue
0PQzOK5Ic/aPuG1VUMnVzZLKC4AWVr5o2RTHzIrzqtrJPIXsYpRdWxQVguSVI8Hj
ePqPtzV/NujHsk0wiQXQ62zXLvWQZHSeDNHHyQnknzZ1BrLjUHktJS0cOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org