Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_WCn_R8co2B-gWpgr7KLueOCb0A.roa
File:                     _WCn_R8co2B-gWpgr7KLueOCb0A.roa (raw, json)
Hash identifier:          9vtpXOBjrClDlsfOf9QAShMwy3EiayDeRHHfxSUEkdk=
Subject key identifier:   FD:60:A7:FD:1F:1C:A3:60:7E:81:6A:60:AF:B2:8B:B9:E3:82:6F:40
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       031F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_WCn_R8co2B-gWpgr7KLueOCb0A.roa
Signing time:             Sun 31 Mar 2024 01:38:47 +0000
ROA not before:           Sun 31 Mar 2024 01:38:47 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        124.211.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:38:47 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=FD60A7FD1F1CA3607E816A60AFB28BB9E3826F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:52:85:7f:16:0b:a6:cf:0c:97:2a:15:c6:
                    47:fd:c7:c2:8f:94:d6:ec:5e:9e:f8:b6:ee:48:81:
                    42:93:fc:d1:da:99:cb:c8:15:31:dc:22:66:f8:00:
                    c1:d9:68:40:5a:b5:d6:9c:57:1e:45:8c:ed:33:fe:
                    c2:59:2e:91:3f:fe:ff:37:f8:a7:61:03:0b:5a:43:
                    f7:3f:21:13:98:ab:0e:f5:81:d9:50:8c:b5:64:4f:
                    53:e4:d5:15:02:e5:40:9a:6c:e5:b1:48:3d:2a:18:
                    df:c1:cb:e6:45:48:24:5c:80:a9:41:c7:cc:45:0f:
                    f5:e5:bd:2f:e9:09:3d:a0:23:ac:19:a5:a7:bc:d6:
                    16:3d:36:5b:06:7b:de:bc:f2:79:83:23:dd:8c:3f:
                    dd:d9:29:26:4a:44:95:00:dd:d4:a6:08:73:16:87:
                    95:21:0a:00:1f:fc:14:9c:94:66:97:15:4b:7c:b7:
                    44:cd:f2:49:dd:6e:31:f6:13:38:98:9e:d5:2a:95:
                    b4:72:f2:09:e8:88:67:59:8b:65:4b:51:73:85:9e:
                    2f:9a:96:b1:83:90:f5:c2:06:77:09:9d:f2:85:c8:
                    b1:70:6a:b3:1e:df:25:3b:48:1c:92:8a:7d:bb:a2:
                    c3:fd:50:9d:7b:98:6b:12:1f:e1:36:dc:b3:3b:1e:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:A7:FD:1F:1C:A3:60:7E:81:6A:60:AF:B2:8B:B9:E3:82:6F:40
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_WCn_R8co2B-gWpgr7KLueOCb0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:39:d2:e1:4f:de:bd:96:7a:52:fb:b6:ff:dc:b7:b8:3d:
         50:59:86:6e:2a:2a:bf:84:1f:59:6d:a7:11:55:96:af:f2:b1:
         a8:e1:b7:77:c6:99:dc:06:23:78:76:06:f5:de:07:87:3b:3d:
         3e:91:d7:2d:e4:de:e3:6f:6b:c2:0c:8a:63:bc:4d:54:7e:c0:
         f4:6e:1f:64:63:df:8f:c3:af:11:79:52:ef:98:46:1b:ec:3d:
         d0:4d:0b:fa:d9:6b:1b:0d:5f:ef:89:18:f6:95:ca:97:38:a5:
         39:90:73:db:90:80:fc:f7:19:6e:c8:0e:c1:13:5f:92:df:20:
         04:ad:6f:a5:7b:84:53:7c:af:54:cc:3a:6d:98:ed:bd:56:fc:
         49:f9:2e:e2:ae:50:34:0d:b6:16:3f:45:a8:0e:d5:32:e9:42:
         70:fc:d8:90:67:1a:d4:5a:64:5f:c9:c4:45:2a:67:a6:03:80:
         2c:ed:0d:05:54:23:18:8c:29:8c:be:8e:23:a2:68:f9:4c:88:
         b5:36:47:42:39:97:4f:58:65:57:bd:6b:87:c4:69:ce:8c:d6:
         ef:47:31:30:1a:d8:80:34:b8:5a:bd:f8:f0:39:21:09:54:f4:
         09:fe:c4:7b:d0:da:da:e0:f3:3a:13:21:d8:fa:69:43:8d:c2:
         50:2a:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org