Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/eRu0_HsGc0wvUM89gg9iX14JSJU.roa
File:                     eRu0_HsGc0wvUM89gg9iX14JSJU.roa (raw, json)
Hash identifier:          R4jZvtCWENaXimxzdnpIYnC24GxdCTSM2Mju5QQFss8=
Subject key identifier:   79:1B:B4:FC:7B:06:73:4C:2F:50:CF:3D:82:0F:62:5F:5E:09:48:95
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02B8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eRu0_HsGc0wvUM89gg9iX14JSJU.roa
Signing time:             Sun 31 Mar 2024 01:29:51 +0000
ROA not before:           Sun 31 Mar 2024 01:29:51 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        59.136.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:29:51 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=791BB4FC7B06734C2F50CF3D820F625F5E094895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:e9:16:3e:62:fe:4d:40:52:3b:45:fe:b7:
                    d1:bc:72:ba:e1:2e:b0:a0:3d:15:af:09:e1:f3:72:
                    dc:90:94:b4:2c:74:9d:6f:7f:aa:32:53:98:e3:5a:
                    85:e1:38:df:9f:53:30:d6:dc:09:05:6b:ce:66:93:
                    fd:25:8a:50:81:c6:65:c3:b4:d4:43:09:a7:3e:18:
                    27:e9:e3:64:3f:46:73:df:76:16:c3:da:10:d0:84:
                    ed:88:1d:fa:25:87:3a:4c:97:a5:97:5f:01:66:2e:
                    b3:b7:c4:33:95:5c:28:c8:3b:65:73:a3:58:0e:5f:
                    12:32:12:6a:fc:86:fa:ee:00:93:85:09:b8:87:52:
                    02:96:63:a3:fa:f2:4c:55:4b:13:8f:c3:5b:ba:b2:
                    0f:b9:d1:bb:72:a2:41:89:27:3f:3d:09:6e:b7:7f:
                    57:68:a7:41:9d:49:1f:54:5c:63:04:65:87:61:28:
                    01:13:cd:98:33:ab:8e:18:74:f5:34:27:1a:a6:f4:
                    a6:11:fb:4f:39:d2:31:03:21:d2:c9:0b:e2:2a:90:
                    16:8c:0d:35:d6:9e:97:71:4c:75:2c:8e:57:55:37:
                    52:ab:3c:3b:2a:07:15:ea:ae:c7:1b:cd:3a:c1:96:
                    ef:f6:4b:43:0f:b2:3a:7b:36:f2:72:63:2f:74:7d:
                    37:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1B:B4:FC:7B:06:73:4C:2F:50:CF:3D:82:0F:62:5F:5E:09:48:95
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eRu0_HsGc0wvUM89gg9iX14JSJU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:05:f2:b5:05:12:de:90:74:30:0d:96:a5:83:d6:93:21:18:
         d2:f5:96:fb:f0:8f:b3:83:ab:d2:28:79:09:3f:70:a2:70:d1:
         90:30:15:7e:3f:fe:fa:4c:9e:65:2a:95:48:64:44:5e:fa:6f:
         88:d3:90:e3:26:0b:11:b0:f9:a1:00:f1:13:95:43:84:91:94:
         be:53:5b:f4:26:30:13:17:4c:03:b7:75:f0:fd:4e:9b:60:08:
         8a:de:10:ab:99:05:e6:c9:d4:ac:1f:76:07:24:4c:0d:56:e1:
         60:7f:0e:b9:25:2f:ba:5c:54:11:da:00:cf:c7:6a:6e:a7:ab:
         c2:da:e3:de:ed:d8:14:6d:74:95:34:ca:3b:e1:18:0d:6c:9e:
         e6:58:d1:17:57:42:40:5b:aa:06:f9:fa:0e:0a:16:d6:8e:74:
         bd:69:00:da:e1:32:85:62:4d:61:e7:f5:dc:31:1b:41:47:b0:
         af:14:c4:21:1f:2d:75:81:a4:40:89:25:57:20:17:d9:dd:7a:
         1a:63:12:74:35:08:d7:b4:ee:31:7c:85:d9:aa:a0:49:bb:69:
         d8:77:9c:06:36:0e:6f:7d:7e:98:27:36:c1:9b:9b:8f:34:a4:
         e9:79:0b:19:7b:01:49:9c:4c:a9:25:c7:63:67:8e:ee:59:dc:
         52:a3:a3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org