Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/f6yq_U9oRLyqfzvJVN_UIwyOThY.roa
File:                     f6yq_U9oRLyqfzvJVN_UIwyOThY.roa (raw, json)
Hash identifier:          UTlU/fNv5WrUGCzvfWJjH+q8gU2+jAk24dx4gjYiHWU=
Subject key identifier:   7F:AC:AA:FD:4F:68:44:BC:AA:7F:3B:C9:54:DF:D4:23:0C:8E:4E:16
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0395
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/f6yq_U9oRLyqfzvJVN_UIwyOThY.roa
Signing time:             Sat 31 Aug 2024 01:29:55 +0000
ROA not before:           Sat 31 Aug 2024 01:29:55 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:55 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7FACAAFD4F6844BCAA7F3BC954DFD4230C8E4E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:d2:70:0e:93:b7:52:82:4a:57:01:ee:f1:
                    5b:a9:12:ce:5e:37:1d:27:cc:17:15:e5:c2:35:16:
                    d8:f8:b0:ea:51:f5:d8:1d:24:c1:4b:e0:6c:57:78:
                    42:2c:12:58:fa:43:71:e8:fe:e6:a8:ef:34:0e:f3:
                    c8:5c:c0:1b:00:2d:8a:d5:fb:12:e3:1e:35:40:c1:
                    6c:37:68:92:28:83:63:2c:d3:09:b6:8f:72:d2:ee:
                    cc:c2:a8:61:1e:67:03:16:8b:ec:3a:32:f9:18:2e:
                    02:41:8e:d1:4a:5a:bf:8f:d2:3f:c3:48:29:35:29:
                    43:f8:9c:01:0d:b1:9a:98:08:7e:7e:2f:f2:7f:f3:
                    bc:eb:20:29:3b:bd:d3:45:ea:43:cc:f8:c7:00:f3:
                    ea:a9:3b:d2:e9:eb:85:cf:a6:ca:4b:a4:8b:11:dd:
                    6f:68:05:72:ea:2e:73:cf:d4:d0:bc:f7:84:3e:13:
                    29:d9:82:e6:92:33:a4:9a:f0:42:9b:93:d4:2b:d5:
                    e3:54:8a:f1:f0:6a:ac:aa:25:ed:f3:46:ea:fe:34:
                    ca:ce:5d:d2:09:cb:39:46:3e:ec:87:97:f2:01:0a:
                    3b:c4:48:cd:37:bb:e2:78:32:2d:63:2a:c9:a4:f9:
                    cd:90:ef:79:08:67:98:24:1d:57:5c:d1:c8:16:0d:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AC:AA:FD:4F:68:44:BC:AA:7F:3B:C9:54:DF:D4:23:0C:8E:4E:16
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/f6yq_U9oRLyqfzvJVN_UIwyOThY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:cc:1a:50:22:90:ff:dd:2e:97:25:ac:ea:37:1f:e0:18:
         20:c5:b2:65:bd:a9:c3:fe:be:ec:2a:71:c1:0a:d0:db:b9:51:
         eb:bc:23:71:b1:27:e0:f7:cb:5a:72:d3:69:41:92:13:93:99:
         b1:b8:8a:7d:85:84:0c:76:b9:d1:30:2f:8f:d4:b5:10:01:a7:
         66:cf:3d:bd:8f:10:b1:4c:2d:fb:e5:7a:3a:c0:20:e5:97:5b:
         b0:48:fa:81:13:e5:b1:96:a2:3c:cf:83:c4:f5:a6:96:4b:4f:
         2a:eb:b9:80:97:ff:54:0b:4b:bb:ce:1b:de:7c:f1:d8:0e:49:
         c0:4d:f6:da:83:64:90:be:f6:e4:6b:b3:44:28:73:fb:b3:7d:
         05:1f:d5:c7:e0:ba:fb:f9:d6:91:47:77:26:04:18:bf:ec:98:
         b4:f5:16:85:24:a7:86:f4:09:b7:d6:04:1d:69:1c:a3:f0:26:
         73:2b:a2:6e:6c:7c:7c:88:01:5a:d3:ff:05:22:7e:86:46:92:
         b4:63:2c:bc:b4:39:27:f0:b1:9a:c3:ca:14:26:22:7c:c9:ca:
         6b:cb:b9:6c:f0:f4:a0:52:7b:f3:e0:fc:90:0e:ee:3f:15:81:
         d6:43:a8:a1:9f:d2:fc:d3:2b:c8:13:68:c5:c0:6f:80:2d:f3:
         1d:bb:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:00 2024 by rpki-client on console-ams.rpki-client.org