Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dz6iJzMt2jHuCzTnvmxtF8pj0l8.roa
File:                     dz6iJzMt2jHuCzTnvmxtF8pj0l8.roa (raw, json)
Hash identifier:          7P2s9ZZ8pYumz1o+qZtmj8hF6svPlRtXiPIKiS4cWu0=
Subject key identifier:   77:3E:A2:27:33:2D:DA:31:EE:0B:34:E7:BE:6C:6D:17:CA:63:D2:5F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       038E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dz6iJzMt2jHuCzTnvmxtF8pj0l8.roa
Signing time:             Sat 31 Aug 2024 01:29:51 +0000
ROA not before:           Sat 31 Aug 2024 01:29:51 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.162.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:51 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=773EA227332DDA31EE0B34E7BE6C6D17CA63D25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:72:00:65:11:0c:59:49:14:b2:ef:62:30:
                    7d:f3:b3:51:25:f0:f2:4d:43:de:15:b2:cf:74:76:
                    29:6f:4a:d0:6a:0f:84:37:5b:e2:80:bf:33:32:4e:
                    5d:25:5b:e9:89:cc:1a:26:98:48:58:9f:16:cc:1a:
                    68:a3:df:8e:0b:31:ee:79:06:b2:17:b9:df:42:71:
                    84:48:6f:e1:bb:2f:45:49:47:78:94:2b:cf:12:d8:
                    d5:c6:f7:cc:8b:2b:31:b9:6c:6f:f0:ee:55:2d:7d:
                    3e:94:3b:5a:e6:16:0e:51:ec:0d:4d:17:9e:50:41:
                    1a:cd:c6:c1:b9:45:aa:38:5f:5c:d0:7d:af:a6:09:
                    1c:91:8a:ac:18:2d:01:af:12:91:73:5a:a1:1a:97:
                    f0:a8:5c:dd:b2:d0:02:9a:55:f0:f4:02:06:b9:a1:
                    47:33:f3:1a:dd:61:87:ac:1a:12:5c:27:d8:31:50:
                    ae:98:87:d4:b5:fa:75:d3:42:1a:05:77:b1:5b:c5:
                    6c:2e:8b:a2:bf:61:3d:a3:42:1b:24:cd:a9:ce:5a:
                    91:ee:0c:a6:b7:13:ea:27:b1:58:8f:99:78:2e:0c:
                    19:41:d4:d5:eb:a1:83:7e:ed:00:47:18:4e:d7:fe:
                    4c:3c:08:ca:bb:14:9d:3a:e4:f1:29:cc:a4:91:17:
                    5e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3E:A2:27:33:2D:DA:31:EE:0B:34:E7:BE:6C:6D:17:CA:63:D2:5F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dz6iJzMt2jHuCzTnvmxtF8pj0l8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.162.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:ce:55:ca:94:f2:5f:6b:9b:a8:2b:07:22:7c:d1:bd:a5:
         55:67:eb:e9:57:5a:90:37:57:12:60:f0:5c:75:a2:e3:e6:b0:
         c7:d7:e6:c5:e1:6d:28:a5:d7:9d:cd:c7:d7:58:f9:d2:e8:bc:
         00:1c:e2:9a:c3:0e:56:7c:03:49:48:8a:5d:55:9f:3d:0a:f0:
         37:58:78:fc:c1:6f:7f:34:ad:aa:7f:d8:92:fe:ad:fd:d1:06:
         05:71:c4:da:c9:c2:94:0a:db:03:9c:3a:30:e1:ee:3e:1e:05:
         ad:db:eb:7f:a0:da:6e:cc:e0:19:c8:7a:28:e5:f3:1b:46:39:
         a5:da:97:10:37:92:59:79:8b:ef:c0:7b:da:ac:c6:1a:b2:7c:
         74:58:f7:89:20:38:d4:1b:b4:86:82:1e:71:34:e9:e8:3d:b6:
         87:89:bd:5f:35:d6:df:ec:83:93:12:10:78:1e:c6:59:17:ad:
         07:12:e5:83:d2:71:dd:f8:70:a8:81:9e:3d:41:94:d1:68:e6:
         73:a6:67:aa:b2:6a:59:de:7c:ed:05:34:6d:6a:9d:ba:df:22:
         c6:41:89:24:4a:b5:52:2b:ec:ba:a8:e9:9d:33:8a:53:12:28:
         20:57:93:2e:e5:dd:81:18:90:5d:64:7d:86:87:b2:da:83:19:
         c2:aa:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:03 2024 by rpki-client on console-fra.rpki-client.org