Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/b3MCwcV7qq1lnPcpiT-jlfwOahg.roa
File:                     b3MCwcV7qq1lnPcpiT-jlfwOahg.roa (raw, json)
Hash identifier:          AhSvQqkkNNW0kT4TmsQwYPbSS1HKxILjRLd9fjgXt3A=
Subject key identifier:   6F:73:02:C1:C5:7B:AA:AD:65:9C:F7:29:89:3F:A3:95:FC:0E:6A:18
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0324
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b3MCwcV7qq1lnPcpiT-jlfwOahg.roa
Signing time:             Sun 31 Mar 2024 01:40:35 +0000
ROA not before:           Sun 31 Mar 2024 01:40:35 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        175.109.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:35 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=6F7302C1C57BAAAD659CF729893FA395FC0E6A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:a9:85:1a:35:bf:38:b8:cd:eb:4e:c2:23:
                    ec:62:d2:6c:f5:c0:ef:9b:e5:c7:cd:03:9c:87:e2:
                    93:22:1a:62:15:04:da:b6:08:81:fa:9d:52:d9:a0:
                    11:3c:96:f8:ec:a4:80:72:3f:5f:25:53:f0:6a:04:
                    bb:0d:a4:91:87:cd:1f:ea:77:14:55:ef:98:fa:e7:
                    3f:a4:c6:86:85:20:51:3a:43:b0:69:af:c2:0f:38:
                    65:e6:7c:6a:8a:0c:c3:f9:85:b4:45:f3:c4:22:68:
                    06:64:0a:b5:ee:16:63:59:b5:c2:19:37:21:99:02:
                    42:bf:3d:cd:5e:f1:94:04:eb:dd:44:38:f4:1e:34:
                    9c:63:b5:15:94:a7:95:99:21:74:b8:63:eb:64:04:
                    15:6e:01:ab:a8:b7:1d:5b:3b:58:a5:da:cf:67:7c:
                    be:85:18:f5:e6:57:c5:9e:39:30:98:a4:62:4b:e6:
                    e3:10:7f:b0:a9:c4:f1:b8:70:7b:6a:92:8e:5b:76:
                    98:de:7b:6c:5e:23:73:70:65:75:4a:9e:ef:57:80:
                    9d:07:a1:c4:79:c8:9d:d4:da:c9:0e:b0:4a:80:28:
                    da:11:74:00:b2:35:6f:13:0b:14:fb:b5:7a:f3:75:
                    a2:a7:c5:da:c5:23:7f:e8:5b:dc:3a:05:f1:a9:1e:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:73:02:C1:C5:7B:AA:AD:65:9C:F7:29:89:3F:A3:95:FC:0E:6A:18
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b3MCwcV7qq1lnPcpiT-jlfwOahg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:9f:da:2f:db:46:c3:b6:da:d7:a1:21:8a:54:f1:05:93:4f:
         cc:88:0d:a7:ad:be:3d:8c:96:ec:cd:ea:d9:40:fe:de:9b:3a:
         52:4a:75:51:b9:99:93:6a:22:cb:50:11:77:5d:ac:bf:3b:7d:
         a6:80:df:05:c8:5d:7b:6f:87:f7:f2:d3:42:f8:41:f8:73:8f:
         66:29:5b:3e:67:6b:21:5a:02:48:34:58:c8:af:a7:06:8d:f3:
         d0:80:60:cc:c8:bc:82:c9:88:95:8b:d2:a1:86:4e:1d:9e:aa:
         56:25:77:2a:1c:00:15:90:9b:ac:16:f1:2f:a7:c0:93:fd:19:
         62:40:a6:f5:25:20:84:86:be:04:83:1c:92:c6:4a:73:2a:09:
         f6:02:5b:8f:91:42:32:17:f6:08:13:7d:03:05:dc:7a:54:fa:
         bc:d5:ba:14:97:d6:a1:41:53:70:15:e2:c1:c3:6c:63:fc:d3:
         01:c3:55:0e:ad:9b:09:9f:3f:be:b9:bd:e6:84:01:d8:6b:63:
         61:5d:93:1d:87:b8:5f:1f:84:fb:1c:a3:c8:8f:7c:44:59:cc:
         c8:3f:b2:e6:3e:82:f1:64:ff:60:4d:d9:e6:18:28:e7:64:bb:
         bc:09:af:0e:f6:e7:a9:f6:69:08:a7:17:52:d6:ed:c0:e9:e6:
         4e:a3:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org