Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_LrCm_ePNfRwRQqNftzS9-WsiJE.roa
File:                     _LrCm_ePNfRwRQqNftzS9-WsiJE.roa (raw, json)
Hash identifier:          F5YgrCBv/NMCKPUYDQdyeobN3wfgvXE4ijezhsSuif0=
Subject key identifier:   FC:BA:C2:9B:F7:8F:35:F4:70:45:0A:8D:7E:DC:D2:F7:E5:AC:88:91
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0306
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_LrCm_ePNfRwRQqNftzS9-WsiJE.roa
Signing time:             Sun 31 Mar 2024 01:38:35 +0000
ROA not before:           Sun 31 Mar 2024 01:38:35 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        222.226.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:38:35 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=FCBAC29BF78F35F470450A8D7EDCD2F7E5AC8891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:81:02:4f:8c:0b:86:f3:77:b9:01:1c:dc:
                    a2:9d:ae:fc:1d:6f:14:d8:3f:86:1a:ce:23:e0:91:
                    d3:ac:b8:38:e1:95:d7:a5:0a:97:74:73:02:18:5f:
                    56:31:78:19:c8:11:08:36:43:b7:33:a4:ac:b9:a9:
                    dd:53:eb:2a:3a:01:82:8c:c2:f8:b4:f6:03:ee:af:
                    68:d8:3d:88:e9:65:f8:70:87:30:fe:09:80:dd:d5:
                    85:77:c9:14:26:a5:3d:17:10:a7:ec:74:32:29:e1:
                    25:6f:d5:9b:ef:1f:e3:94:99:c7:92:a5:a2:eb:2c:
                    22:1e:d3:17:e7:f6:03:8d:8f:ae:73:b5:53:de:21:
                    1a:08:5c:27:f8:ef:ef:de:50:1f:50:67:df:32:05:
                    a1:bd:d6:69:27:be:d4:88:e5:80:61:a1:0c:2e:bd:
                    91:b6:96:5a:10:6c:41:c0:64:81:ff:1a:dd:7b:5d:
                    64:96:aa:6b:03:be:94:eb:ed:d3:41:99:4b:28:3d:
                    b2:9e:65:3f:4a:47:4a:10:4d:f6:0f:2c:da:43:21:
                    a8:77:be:e4:7b:78:12:2b:07:65:b3:6d:1e:cc:fe:
                    6a:83:ce:70:df:e5:b6:9f:aa:7a:ba:f5:ae:a2:39:
                    56:15:70:2f:9a:94:83:fd:bd:d9:a7:b6:b9:87:0c:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BA:C2:9B:F7:8F:35:F4:70:45:0A:8D:7E:DC:D2:F7:E5:AC:88:91
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_LrCm_ePNfRwRQqNftzS9-WsiJE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:77:77:58:39:23:91:a0:10:9a:e3:6c:de:3e:78:7c:86:48:
         79:08:5b:7e:40:3d:2e:0c:80:39:ea:c7:cc:c5:db:bf:db:c1:
         ba:e6:20:d5:ec:64:18:06:1d:94:18:57:0a:2a:90:26:50:58:
         b4:96:cf:66:be:87:34:2d:de:8c:b0:73:21:0e:3c:f3:ca:1f:
         b4:75:47:35:e8:34:c8:e5:c8:1b:95:7b:55:fe:c7:c0:5c:5b:
         f5:42:66:3f:22:05:17:72:ec:62:b7:27:3f:49:82:14:f4:a8:
         be:25:16:45:85:e2:14:8a:4c:30:e4:57:31:3a:74:85:c5:d8:
         7d:af:ba:5f:41:c5:4d:ef:28:ef:bc:52:4c:dc:fd:88:71:5b:
         bf:88:59:f8:65:d4:d4:29:6c:7f:18:55:fd:9f:44:57:0b:55:
         43:8c:d2:fc:26:f7:59:53:55:a3:50:e7:48:79:a4:50:b5:11:
         a4:b2:2f:7f:59:e4:69:c1:02:28:75:a7:05:94:d4:97:c8:80:
         db:a9:8f:df:7b:bc:a4:25:9e:62:12:35:35:a1:fa:90:ba:31:
         85:f6:b4:08:81:7d:06:7a:c8:85:9f:23:f8:85:4f:44:a2:00:
         32:3d:8d:b0:67:1b:ff:5e:ad:44:64:ae:02:5d:f2:1b:83:95:
         3f:bc:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org