Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa
File:                     b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa (raw, json)
Hash identifier:          9tjIIWp0ZS0vq0rKq8ZtSkmmcRMzb4GKKnF7pW28zac=
Subject key identifier:   6F:8B:9C:A0:C7:5B:AC:36:0D:49:0B:A7:40:9E:D2:F9:96:47:C5:99
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02D6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa
Signing time:             Sun 31 Mar 2024 01:33:27 +0000
ROA not before:           Sun 31 Mar 2024 01:33:27 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.172.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726 (0x2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:27 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=6F8B9CA0C75BAC360D490BA7409ED2F99647C599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:4b:48:9f:1e:fb:76:3c:0c:57:d8:b8:59:
                    f0:b8:7a:28:64:cc:29:f3:50:78:6f:b2:d6:52:1b:
                    fa:1d:82:3a:41:d0:cd:4b:6a:7e:2f:12:1c:29:a2:
                    5c:8b:a2:26:78:33:67:3f:11:b5:d9:0e:50:66:4d:
                    68:9f:9b:f9:ac:4a:1b:11:07:00:38:93:19:ad:51:
                    2b:90:de:4c:d2:f0:38:f2:7e:52:95:0f:9a:5f:92:
                    d6:29:ca:f4:98:51:5f:3a:d4:c6:69:71:72:b2:09:
                    8e:7b:09:75:b6:3a:89:4e:9b:05:9e:97:e1:8d:32:
                    df:7b:0d:31:e4:7c:9f:48:96:25:72:8d:e9:84:b7:
                    d6:64:4e:95:2a:2d:bd:b8:d0:73:d5:97:67:a2:32:
                    fe:62:b4:02:00:d1:ac:39:8c:ee:55:5f:c4:40:38:
                    03:4c:22:75:fa:9d:fe:7c:26:67:71:1d:48:3d:c1:
                    23:97:df:0a:be:22:b2:94:4d:d6:7e:7f:ce:3c:c2:
                    76:6f:e8:38:82:1f:4f:c1:4a:dd:88:cd:1f:bd:05:
                    75:01:b1:67:44:61:88:b7:89:09:cf:0a:6a:a3:15:
                    26:3b:3c:f2:a6:67:c5:0a:1e:f3:fb:f3:f7:60:a6:
                    72:38:e4:2a:29:4e:25:3c:fb:e4:e3:c5:b0:83:36:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8B:9C:A0:C7:5B:AC:36:0D:49:0B:A7:40:9E:D2:F9:96:47:C5:99
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b4ucoMdbrDYNSQunQJ7S-ZZHxZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:47:8c:04:64:74:e5:b4:81:ac:2c:b5:94:c0:7e:6d:63:d6:
         95:3c:49:52:ef:29:79:88:2d:e0:d1:f9:7f:a6:71:33:e4:af:
         89:df:d1:9b:2b:8a:2b:6c:b6:a3:5f:5d:a2:dc:ab:af:97:31:
         68:d8:b8:3c:30:95:fb:dc:a8:33:02:86:ac:03:15:44:6f:ec:
         5f:24:9e:9c:53:83:15:54:31:fd:23:d0:06:7f:53:69:f1:d3:
         03:8d:25:2a:3f:75:40:26:82:3f:29:54:c1:06:b1:cf:1c:62:
         2c:7e:36:19:0a:9b:63:c5:97:e5:27:db:96:06:dd:75:76:91:
         ea:cd:24:39:26:50:b5:57:60:cf:17:c8:49:80:2c:92:0a:6f:
         a2:a4:f3:2a:58:4e:5d:d8:67:4b:0b:b0:af:99:5c:29:4b:6e:
         e7:7f:d7:56:97:44:aa:29:bc:86:91:bf:1d:85:2d:7b:d4:8e:
         d7:7b:ff:44:a5:d2:70:35:f1:1f:4f:fb:c4:ed:8e:a2:6e:bb:
         4b:63:18:da:9b:de:52:8a:b9:d9:a7:47:35:57:30:89:54:de:
         10:9c:5c:dd:af:0e:84:d8:d3:be:1e:08:94:a3:d0:66:4c:25:
         67:13:45:bd:75:b8:8a:fa:31:e1:8d:e8:a7:a7:14:04:dc:1d:
         65:dd:d1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org