Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gcOE0pgF598OXKfBKntqdcKmmVI.roa
File:                     gcOE0pgF598OXKfBKntqdcKmmVI.roa (raw, json)
Hash identifier:          RF2f7F16PXlYh3jBQh4yX07Ad1JkE+WhnxCOABp54DE=
Subject key identifier:   81:C3:84:D2:98:05:E7:DF:0E:5C:A7:C1:2A:7B:6A:75:C2:A6:99:52
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0314
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gcOE0pgF598OXKfBKntqdcKmmVI.roa
Signing time:             Sun 31 Mar 2024 01:38:42 +0000
ROA not before:           Sun 31 Mar 2024 01:38:42 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        211.4.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:38:42 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=81C384D29805E7DF0E5CA7C12A7B6A75C2A69952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:44:9d:d6:d6:ce:17:b7:02:46:69:dc:7c:
                    f2:cd:a5:67:70:d9:8a:2b:83:de:77:58:80:38:7f:
                    3f:f5:47:b4:32:5c:69:3e:0a:54:bf:24:67:d0:e4:
                    ad:4e:db:09:6c:03:48:86:71:28:2f:58:ea:36:d9:
                    b7:20:c6:84:7f:43:af:96:b2:c8:b3:cb:25:23:1c:
                    47:9f:21:3f:6b:0e:d1:22:3d:7a:5b:13:b7:8e:0c:
                    3e:c2:52:34:cf:a2:ca:8a:12:dd:69:ad:16:e7:62:
                    5d:f5:90:c4:a0:f1:ce:e6:b7:9e:1f:8d:7e:40:1b:
                    db:11:f6:58:24:f8:5a:29:a7:11:0b:ef:51:55:fd:
                    48:14:63:b2:b3:e0:e8:ef:4d:76:af:f2:96:b9:2a:
                    53:2e:17:45:e9:84:59:d8:3e:b5:3e:3e:88:79:d6:
                    86:be:57:c8:02:b5:43:38:ab:81:d6:e2:6f:80:63:
                    99:c3:85:83:92:df:2a:f2:c6:d8:ef:83:c6:fd:08:
                    c4:0d:36:ed:6d:a4:85:40:52:c2:8b:99:6b:e3:7e:
                    ea:ab:9b:d5:0b:8a:63:b0:0a:34:8c:15:19:aa:c6:
                    41:94:4d:33:30:59:1a:2b:74:c8:91:92:2a:b8:97:
                    6e:2f:a4:44:d4:66:a0:26:d6:c3:a7:9a:72:68:8e:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C3:84:D2:98:05:E7:DF:0E:5C:A7:C1:2A:7B:6A:75:C2:A6:99:52
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gcOE0pgF598OXKfBKntqdcKmmVI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:56:11:9f:a9:6b:24:74:52:57:fe:14:4d:d8:3a:65:e4:
         b1:ed:42:75:0f:85:08:50:ed:69:85:4b:a6:e9:2d:f3:87:40:
         3f:27:f6:de:a2:33:61:78:c0:ab:4f:36:d1:95:a2:5f:dc:6b:
         6a:ff:50:e2:e6:15:d4:70:25:7e:7d:af:f8:41:a5:81:48:09:
         8b:45:d2:11:9b:6b:f1:d4:60:1c:76:f9:8c:aa:8d:5f:2f:06:
         ba:87:65:58:7e:55:e5:b4:8c:e4:ff:82:95:91:50:98:bf:29:
         1c:e0:ba:ee:59:79:cb:3c:1d:81:7e:14:6f:49:d7:50:66:eb:
         40:1f:6c:45:eb:b7:64:23:7a:bb:08:8f:99:f3:18:e8:05:f6:
         1b:e2:b0:10:b1:5e:67:29:d8:9f:94:6e:0d:7a:92:48:ea:69:
         a3:3e:3c:c0:1d:48:b4:51:ea:06:b8:7b:c0:f8:a6:3c:73:ec:
         4b:34:d4:d4:09:ca:0c:d7:4e:27:5a:66:43:1a:ec:dd:b0:62:
         30:ce:bf:74:5a:49:65:33:cd:5b:9c:c4:96:5d:90:d2:41:f2:
         71:22:ff:dc:42:fb:45:dd:a6:41:1e:4d:b6:8a:ed:ae:cc:41:
         68:08:84:8f:0b:d4:3c:04:ea:86:ed:1d:fc:3f:a9:eb:c0:e4:
         18:72:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org