Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dn3S2FtDypMaSlW_cHL_WAVW14Y.roa
File:                     dn3S2FtDypMaSlW_cHL_WAVW14Y.roa (raw, json)
Hash identifier:          XKQ/a0SePpMt3PvFGemP6/Rrs3ZY0/tqSCXSe8Ws1+w=
Subject key identifier:   76:7D:D2:D8:5B:43:CA:93:1A:4A:55:BF:70:72:FF:58:05:56:D7:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       033F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dn3S2FtDypMaSlW_cHL_WAVW14Y.roa
Signing time:             Sun 31 Mar 2024 01:42:37 +0000
ROA not before:           Sun 31 Mar 2024 01:42:37 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        203.140.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:37 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=767DD2D85B43CA931A4A55BF7072FF580556D786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:3a:91:fc:9c:1a:f1:d5:a0:dc:51:e1:c9:
                    ec:0b:76:54:ef:f7:c2:17:23:ae:4a:78:83:e3:c9:
                    ba:db:80:bb:93:d9:56:0e:27:38:6a:e3:b0:02:d3:
                    6b:aa:4f:bb:3b:e9:47:5f:ff:dc:f7:d2:3f:6a:fc:
                    d8:da:8a:e0:86:02:b9:f4:c3:ad:06:12:36:6c:ec:
                    0c:ff:8c:0f:09:9e:04:59:9f:25:59:29:86:92:24:
                    c6:00:4e:49:27:83:36:ce:64:4a:bb:48:c3:37:e0:
                    8f:1b:87:9d:c8:7c:bf:e3:f3:aa:81:d7:c0:a9:a3:
                    a8:32:ab:7b:a0:2d:68:ee:bc:5b:4f:fd:fb:cc:0f:
                    04:2a:15:47:0b:fa:3f:00:2b:e6:97:33:61:ae:e1:
                    b2:eb:65:ff:1b:b5:79:69:32:67:70:b6:eb:96:20:
                    3b:b3:52:05:0a:7e:9d:1c:f9:9d:68:c9:16:7a:94:
                    14:26:ae:a1:59:12:02:e9:24:3d:b1:48:9b:4b:9d:
                    e8:09:fd:a3:95:43:42:34:43:20:47:54:5d:75:3e:
                    c0:f9:3b:84:31:30:71:91:66:99:80:f6:0a:7c:5d:
                    b4:e1:34:6e:c6:1f:63:03:ce:ab:4d:9b:89:c8:71:
                    ee:86:42:29:e5:4b:5c:d1:e6:47:aa:1b:de:31:67:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7D:D2:D8:5B:43:CA:93:1A:4A:55:BF:70:72:FF:58:05:56:D7:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dn3S2FtDypMaSlW_cHL_WAVW14Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:89:54:0a:7d:fa:f2:45:c3:e1:6a:f8:12:57:aa:1c:fe:ae:
         b2:28:83:59:b7:51:e4:2f:18:46:3d:75:e5:1e:c7:ad:4b:8f:
         8b:99:a4:51:88:f1:cf:71:c8:33:37:cf:a6:50:c3:6d:c0:ab:
         20:7b:06:86:5d:53:ac:4c:c5:e4:84:ce:80:a2:02:81:8d:4a:
         40:39:76:f3:40:f5:20:c3:35:dc:fc:c0:89:a4:fd:d5:cb:0b:
         92:eb:f7:a3:f3:c4:aa:e3:bc:2f:db:29:d3:60:c0:9f:cb:92:
         53:92:bb:c6:e3:6e:83:ba:e7:fc:71:0d:e7:a8:34:b6:65:31:
         d4:d9:3e:53:20:c2:3d:dd:61:a3:bf:47:12:34:ea:62:72:35:
         72:b2:56:f8:2a:37:39:7d:6a:94:cb:5b:b8:9c:38:80:1c:b1:
         d9:28:c2:8a:59:f4:16:e0:64:48:a6:94:d1:e2:1f:7c:e6:58:
         d3:2d:70:e4:07:50:4e:0a:47:8c:d7:f4:a9:5d:c3:cd:29:9c:
         fd:ac:2f:87:a5:b7:46:46:bf:9b:8a:bf:43:a7:e7:e7:79:d4:
         33:24:aa:ad:5f:b2:fa:f5:c1:91:19:b4:ec:57:05:6c:ee:10:
         13:70:37:ee:76:43:fe:f3:f6:46:f0:df:91:6f:20:2c:70:00:
         de:64:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org