Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fC40faGBczuBBhxE9hhN0mXtyjE.roa
File:                     fC40faGBczuBBhxE9hhN0mXtyjE.roa (raw, json)
Hash identifier:          rL7PTdyMKGWK+jrLh/ITOQHZECdyEx727t2ic7zbfho=
Subject key identifier:   7C:2E:34:7D:A1:81:73:3B:81:06:1C:44:F6:18:4D:D2:65:ED:CA:31
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0321
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fC40faGBczuBBhxE9hhN0mXtyjE.roa
Signing time:             Sun 31 Mar 2024 01:40:34 +0000
ROA not before:           Sun 31 Mar 2024 01:40:34 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:34 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=7C2E347DA181733B81061C44F6184DD265EDCA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:91:1b:40:b8:a9:9e:67:cb:41:2c:23:02:
                    c4:ac:5d:4d:93:b9:ec:8a:e0:53:4d:e4:37:16:e3:
                    68:4e:52:25:dc:ef:45:aa:a9:55:9a:2b:d3:af:7b:
                    25:48:9a:d8:78:9a:52:46:4f:fc:30:2f:43:a2:e8:
                    75:59:b8:39:28:f9:fe:c6:65:9f:51:8e:ee:21:3b:
                    c9:7d:f0:fc:bb:91:0c:31:c1:26:78:ac:52:e4:2e:
                    50:f8:37:ec:d0:42:19:63:f0:62:a0:18:4b:02:2f:
                    b8:2a:04:78:2d:df:3b:7b:3f:3b:20:58:3f:62:09:
                    96:df:58:0b:ec:f1:46:98:a6:be:4e:18:5b:5e:b0:
                    1c:20:4e:10:12:86:fd:4a:56:6e:08:20:35:36:74:
                    e5:49:dd:d8:68:5f:a7:d0:c4:f4:d2:a0:2f:64:93:
                    db:4b:b1:a6:89:88:31:bc:90:5d:1b:4b:22:bd:e7:
                    63:03:d7:67:5c:98:7f:af:3a:5e:d3:ea:e6:91:22:
                    78:74:27:58:7a:d7:97:cc:c5:cb:73:22:a6:fc:8f:
                    8d:15:3b:27:f7:2c:98:bf:6b:f2:c9:87:11:2b:37:
                    df:85:f4:a7:7b:24:e9:ee:09:d6:8d:c6:a2:64:14:
                    36:54:c2:95:64:16:c7:7e:cc:3d:81:8a:95:d8:52:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2E:34:7D:A1:81:73:3B:81:06:1C:44:F6:18:4D:D2:65:ED:CA:31
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fC40faGBczuBBhxE9hhN0mXtyjE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:e7:a3:7a:cf:9a:40:85:e6:ba:70:23:f1:92:10:b6:09:
         01:ae:ec:60:22:9d:c1:c8:9b:24:b2:0b:a7:3e:7b:40:41:f6:
         25:5d:41:f3:73:a8:cc:52:a4:7b:cd:df:94:bd:bb:3e:38:2c:
         47:e0:06:c6:44:17:01:77:da:fb:99:9f:94:c0:e2:c7:66:9c:
         f6:3a:4a:a4:95:b3:7b:4c:73:51:78:84:fb:39:77:49:23:cc:
         b1:cd:8d:9b:cb:76:82:27:b7:e6:b1:15:80:54:d7:db:6e:98:
         30:13:b2:2d:65:36:5e:92:4b:58:5e:85:fe:6a:f9:3b:0f:73:
         62:62:42:87:b3:b8:53:fd:90:9f:cd:1e:17:16:10:72:d9:81:
         8f:93:95:7f:67:ed:0e:7a:64:b3:a2:ed:8a:cb:71:c7:ad:6f:
         8c:84:c6:54:c8:53:99:ba:7a:92:e7:62:fa:a1:be:27:3d:e0:
         60:c1:e3:84:fb:af:0f:fa:6c:2d:a0:97:e6:7a:2a:12:79:c2:
         9f:03:48:6b:1a:c6:aa:60:97:6d:25:fc:73:8f:99:ed:79:5f:
         9c:13:c2:93:cd:04:94:40:b5:58:4c:ac:c0:73:5a:15:4c:21:
         dd:33:66:c8:b3:72:f2:88:cb:4b:8c:43:47:41:6e:55:cc:21:
         d3:43:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org