Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bu_qJvnsxZsCiymXtq5rFhdZgXg.roa
File:                     bu_qJvnsxZsCiymXtq5rFhdZgXg.roa (raw, json)
Hash identifier:          8SddpvDvjC2OxyaYK/JkjCQQfU0vXsFFbLYU5oafapc=
Subject key identifier:   6E:EF:EA:26:F9:EC:C5:9B:02:8B:29:97:B6:AE:6B:16:17:59:81:78
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0277
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bu_qJvnsxZsCiymXtq5rFhdZgXg.roa
Signing time:             Sun 01 Oct 2023 01:32:30 +0000
ROA not before:           Sun 01 Oct 2023 01:32:30 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        121.107.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:30 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6EEFEA26F9ECC59B028B2997B6AE6B1617598178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:0a:ac:5a:6c:f3:7f:ab:d7:f9:5c:75:da:
                    8c:03:90:02:a1:73:09:2f:c6:20:e5:bf:90:38:6c:
                    99:f2:d4:07:f4:09:a4:b5:9f:69:4b:bb:44:8f:f4:
                    88:aa:98:26:be:29:d4:82:d5:ff:83:c4:da:d5:64:
                    8f:d7:02:31:75:90:bb:37:a2:ac:a2:dd:ee:b0:7d:
                    5c:17:01:1c:b3:5e:95:6a:4c:61:00:aa:30:ae:8d:
                    a9:90:f9:11:1d:06:61:7c:08:b6:b8:0d:af:16:a2:
                    54:a9:f8:21:a0:4e:d7:07:d0:96:dc:7c:7a:5f:95:
                    a6:0d:cd:0b:ab:00:fa:15:21:9b:dc:58:fd:1f:3b:
                    6d:69:1b:87:1c:47:ed:ac:3c:cc:82:fb:56:ec:54:
                    f3:f5:49:5f:20:93:78:24:57:3e:37:0e:e7:7a:29:
                    44:13:77:f0:66:b8:a5:95:d9:a8:13:d6:0e:84:19:
                    16:97:10:ab:72:5b:07:8c:7f:2d:8b:8f:55:06:a1:
                    94:fd:c7:89:ec:e2:95:1e:38:16:35:8a:8a:83:f8:
                    c2:f1:5b:84:0c:1f:0d:51:69:b8:fb:10:10:9c:87:
                    dc:d0:09:c0:d3:98:51:af:d2:ba:c9:d0:44:fa:6f:
                    bc:f5:dd:46:d8:07:9b:6e:0f:04:ad:d7:d6:c0:dc:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:EA:26:F9:EC:C5:9B:02:8B:29:97:B6:AE:6B:16:17:59:81:78
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bu_qJvnsxZsCiymXtq5rFhdZgXg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:86:91:c1:d9:55:b7:72:84:a0:d8:9a:8f:e4:fa:53:b1:9d:
         1d:3d:45:33:c2:56:11:52:dc:7c:90:76:d9:3d:1e:7b:7e:60:
         3d:0b:f6:8a:5c:ad:c5:ea:c3:11:ce:d2:a0:43:7f:db:73:46:
         35:5d:da:c7:30:a4:5c:64:0c:55:99:2b:98:26:ef:9e:d3:14:
         3a:39:c0:2e:eb:52:c1:91:e7:42:1f:13:6f:58:77:67:e0:1f:
         01:f6:9b:ed:75:9e:e4:6d:40:5b:3f:c1:a2:62:f2:27:18:59:
         5e:a7:75:1a:8a:53:c5:a0:f7:f5:bf:c6:84:9e:73:af:41:65:
         56:3d:cd:2c:4a:5d:2b:23:61:c3:91:f6:44:3c:ee:c9:d5:5c:
         88:72:8f:94:42:8a:bf:3c:0c:e9:f9:47:70:4c:60:77:61:b6:
         f4:f1:c5:18:cf:fa:e2:09:7d:aa:6d:59:06:db:10:1c:ce:82:
         e3:03:3a:68:8d:b6:b7:d5:6d:cb:0b:21:4d:80:30:82:d1:82:
         f2:ab:90:05:3a:a9:a7:9c:e4:b6:1a:43:4c:2f:1f:12:17:8c:
         a7:c1:dc:fe:f1:bc:39:98:ce:8d:4f:ae:0e:5b:79:0c:91:02:
         8d:f2:57:f2:cf:d9:61:cf:c5:fd:80:8f:ac:0f:22:f0:04:8c:
         61:08:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org