Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/h5hfjNXgkImplnZIL-NdzfARV2s.roa
File:                     h5hfjNXgkImplnZIL-NdzfARV2s.roa (raw, json)
Hash identifier:          rJOY7CtUh2OXesJPEmxGFUOnTGm9Xq5TudX7GxqEs+A=
Subject key identifier:   87:98:5F:8C:D5:E0:90:89:A9:96:76:48:2F:E3:5D:CD:F0:11:57:6B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0275
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/h5hfjNXgkImplnZIL-NdzfARV2s.roa
Signing time:             Sun 01 Oct 2023 01:32:29 +0000
ROA not before:           Sun 01 Oct 2023 01:32:29 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        118.159.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:29 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=87985F8CD5E09089A99676482FE35DCDF011576B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:2b:46:b4:ae:80:16:41:a3:b5:33:70:aa:
                    0d:7f:8e:28:79:8a:a5:af:69:9a:6f:12:ba:7a:f2:
                    e8:c5:c9:31:9e:53:d2:9d:95:e1:d8:8b:0a:49:80:
                    3f:31:05:99:cb:e6:22:e7:80:1c:56:f2:7f:c9:6d:
                    f3:c4:47:47:28:96:37:97:60:1a:42:25:88:d9:a4:
                    04:91:73:53:38:f3:d8:5c:6c:09:67:59:eb:52:e2:
                    de:2e:3a:4e:4e:70:66:3f:65:f8:2b:07:71:95:39:
                    ce:4a:1a:3d:5c:52:28:8d:1b:68:45:d8:85:2f:3b:
                    a7:00:0a:d4:8f:7e:88:cb:b8:bd:1f:3d:75:2c:96:
                    e2:5c:91:b6:a9:42:e3:c9:c3:b8:60:a0:ee:20:15:
                    f0:8c:9c:42:42:c5:9d:24:7d:09:72:fa:34:37:62:
                    97:40:17:bf:58:f4:1c:41:c3:01:fa:99:bf:5b:79:
                    9d:bb:61:e1:a3:bb:ca:ed:4a:a4:8c:ec:ce:79:0c:
                    0d:8d:5c:bf:2b:b7:97:f0:7a:59:38:aa:aa:47:37:
                    20:89:32:54:bf:f7:a8:0e:60:52:be:63:b0:81:13:
                    46:93:aa:73:29:67:e5:3b:00:3b:7e:e4:ed:14:e5:
                    3e:b0:22:f5:19:97:0d:9e:c3:cf:39:91:26:cc:16:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:5F:8C:D5:E0:90:89:A9:96:76:48:2F:E3:5D:CD:F0:11:57:6B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/h5hfjNXgkImplnZIL-NdzfARV2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         39:dd:9c:93:c5:e4:4a:ad:44:1d:9f:56:10:0d:69:de:f0:e2:
         d4:d9:90:86:9e:d0:17:64:d8:22:8f:07:06:49:5d:c7:8d:e1:
         0b:c2:54:4c:31:be:d9:1e:12:c7:85:67:7c:b8:c8:3e:d7:3d:
         d4:f5:75:59:81:5a:dc:aa:6d:58:ae:32:72:bf:05:ce:23:7f:
         7e:dd:be:95:e6:d6:f7:04:55:79:f9:ff:ef:12:3e:77:aa:e4:
         1a:a4:03:36:5d:b2:46:c7:35:d7:cf:80:82:3d:82:3a:3b:2e:
         ee:d8:b7:b4:30:26:6e:a1:fa:41:25:ea:a1:3b:ba:dd:56:88:
         3f:20:fe:a4:cc:cb:5b:61:75:1a:20:8b:2d:0a:db:48:97:71:
         1c:a5:44:20:08:af:42:ca:e2:5b:cb:57:88:d8:c8:8f:fc:48:
         fa:a1:5c:c4:95:96:b9:b3:d1:af:a4:4f:6f:a1:5b:84:cb:49:
         f8:e0:a8:94:34:65:ad:3f:d3:70:1c:3d:58:1e:93:b0:fc:6c:
         0d:28:3c:51:7e:a2:35:d7:c4:2e:23:e4:d9:f7:04:a2:22:e6:
         ec:fd:22:81:05:a3:53:ca:79:cf:de:1c:3a:8a:56:b0:b5:4e:
         7f:c3:db:80:6b:a9:ad:ac:1b:1b:cc:61:a3:41:d9:a7:72:ca:
         1c:20:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org