Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/abp6jQFYEld0otQap3D_IMqFA4k.roa
File:                     abp6jQFYEld0otQap3D_IMqFA4k.roa (raw, json)
Hash identifier:          8buQXMXWex4JM7MuLvINSMI1tY5nqYAyoozUJOTjC3w=
Subject key identifier:   69:BA:7A:8D:01:58:12:57:74:A2:D4:1A:A7:70:FF:20:CA:85:03:89
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0359
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/abp6jQFYEld0otQap3D_IMqFA4k.roa
Signing time:             Sun 31 Mar 2024 01:42:48 +0000
ROA not before:           Sun 31 Mar 2024 01:42:48 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:48 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=69BA7A8D0158125774A2D41AA770FF20CA850389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:95:3b:bf:ae:c7:09:57:e2:7c:2d:52:5a:
                    5d:b7:b5:17:17:ba:05:28:90:66:c5:24:fd:dc:e3:
                    39:5e:e9:ab:e0:9f:d1:2d:f7:aa:3f:85:ae:bb:ab:
                    f1:ca:a4:85:ff:63:0b:f7:26:c0:9c:ba:37:18:be:
                    d6:8e:6c:54:b2:e2:0e:d0:7a:e8:1d:81:76:14:37:
                    1c:68:c1:e5:d3:50:50:3c:5a:7e:ca:a6:97:8a:ee:
                    5f:36:d1:42:89:8a:8e:d0:e0:f1:0d:43:21:01:cc:
                    6f:68:29:f8:9b:6f:a7:f6:55:59:51:6e:16:18:7b:
                    a0:af:c4:90:d4:16:70:6d:c6:bf:60:91:df:26:86:
                    82:f3:49:6b:cc:7b:82:3d:a0:b5:4b:9e:37:9d:db:
                    ad:94:b3:5e:de:de:f5:43:c1:15:e7:0c:f2:50:9f:
                    c3:71:61:6b:92:81:86:d8:30:15:68:c8:a4:62:0c:
                    3b:67:7f:61:15:a4:0c:6b:dd:2d:bb:5b:3a:91:90:
                    cb:91:07:80:e1:5a:56:f7:c5:a4:a1:9a:2c:9b:00:
                    e0:fc:ce:4a:0e:8f:91:85:f9:80:e4:3a:83:12:04:
                    84:ea:9c:07:eb:05:05:33:e2:57:66:9f:7b:80:16:
                    df:f3:5e:d3:99:ef:a0:ac:de:47:46:73:a8:4a:38:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:7A:8D:01:58:12:57:74:A2:D4:1A:A7:70:FF:20:CA:85:03:89
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/abp6jQFYEld0otQap3D_IMqFA4k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:7b:42:55:8c:ec:b6:f8:90:d1:9a:e8:6a:0d:c0:9c:71:
         d0:48:c2:eb:ec:32:86:04:a3:56:97:bb:47:32:c7:34:c1:fa:
         91:41:0e:72:37:c5:51:95:d5:1b:85:e5:cd:87:be:f2:e7:17:
         b5:cd:11:06:4c:49:74:68:d3:3c:1a:99:62:d4:a7:53:f2:23:
         28:e8:1f:ea:55:a2:f8:75:e6:5d:29:2d:a0:af:07:11:91:38:
         45:ac:b9:6f:0a:60:28:98:b3:0d:9c:43:b4:5d:9b:1d:42:82:
         34:7a:3d:c7:28:df:4a:05:e5:7b:e5:98:0d:ac:59:41:ac:5f:
         eb:e8:78:8e:a9:5e:99:da:20:89:06:c4:b9:32:30:14:99:64:
         0c:26:7c:9b:26:8e:4b:14:f7:f8:18:e9:74:af:76:66:71:94:
         04:2d:14:6e:dd:2c:c0:41:10:83:4f:ce:66:c0:65:70:d1:b1:
         29:d0:26:e1:51:6e:56:d2:a1:80:94:39:f3:bf:67:e6:c1:8a:
         04:dd:73:32:ca:a6:49:ef:f0:59:2e:d2:1a:8c:93:28:41:65:
         42:34:ac:1e:14:01:21:fd:81:21:0b:dc:11:c1:74:ef:52:c7:
         cd:12:57:c6:1d:2a:71:c0:26:2b:ad:bb:1f:69:76:f5:47:66:
         a2:18:9e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org