Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/iThxNEhmrwgU5o_EXUdPUq15kBU.roa
File:                     iThxNEhmrwgU5o_EXUdPUq15kBU.roa (raw, json)
Hash identifier:          NcjI1e4W+sFw+jMTAOSDXEqVXLu/jJvWTjedBIjL9Fg=
Subject key identifier:   89:38:71:34:48:66:AF:08:14:E6:8F:C4:5D:47:4F:52:AD:79:90:15
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0394
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iThxNEhmrwgU5o_EXUdPUq15kBU.roa
Signing time:             Sat 31 Aug 2024 01:29:55 +0000
ROA not before:           Sat 31 Aug 2024 01:29:55 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916 (0x394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:55 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=893871344866AF0814E68FC45D474F52AD799015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:ac:86:c2:cf:20:02:c6:81:c9:8e:96:d9:
                    a9:92:86:da:08:86:f6:90:4a:f3:85:3e:4d:68:d4:
                    11:96:c4:ca:bf:54:b8:fe:d4:ea:f5:01:07:6d:e8:
                    21:b6:61:d6:bf:f1:d3:2b:ce:79:83:a5:fb:6c:ac:
                    18:92:10:a9:b7:67:e6:5c:da:9b:10:e4:88:8f:97:
                    bf:a1:e3:ce:fe:70:c4:0a:8a:2d:32:c1:49:6b:56:
                    4b:46:47:cc:eb:b7:b3:56:5a:83:7a:2d:53:60:42:
                    ff:04:b6:d7:b3:b5:96:1f:74:b3:28:4e:6d:3d:b4:
                    9e:8e:5b:10:52:25:bd:22:fb:9f:96:4b:e8:2b:02:
                    9e:e1:f8:26:af:db:06:3b:a1:ef:84:a3:4a:50:cd:
                    54:68:42:d9:e6:21:22:15:06:5e:1e:4e:2b:95:a2:
                    84:c1:82:f9:1f:df:26:e0:9e:33:22:cb:d9:fd:2e:
                    bf:3d:7c:62:f6:07:38:1a:6e:91:38:b3:d0:82:52:
                    9b:3f:8d:dd:48:a9:77:db:05:c6:4f:40:06:0b:f5:
                    e0:ee:c0:a5:cc:51:7c:89:74:81:de:99:da:e6:dd:
                    8a:75:88:be:dc:d3:79:40:db:a8:fe:3f:34:19:be:
                    6a:04:5e:64:d3:80:04:47:df:c7:5c:b2:9b:fc:4a:
                    60:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:38:71:34:48:66:AF:08:14:E6:8F:C4:5D:47:4F:52:AD:79:90:15
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/iThxNEhmrwgU5o_EXUdPUq15kBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a7:21:30:4b:ef:3b:04:1b:43:d6:d4:25:8a:6a:22:ab:73:94:
         01:50:23:81:db:33:52:89:ef:e1:d5:a8:df:34:90:e9:89:5f:
         06:48:a4:d3:7c:3c:33:b4:b8:69:f2:e7:0a:47:ee:67:e4:bb:
         c9:f9:2d:3d:18:2d:49:93:72:b2:53:94:ed:24:8a:cc:42:b7:
         cd:00:eb:02:02:dc:ba:34:cb:e8:ba:6b:c7:44:89:83:31:86:
         fa:60:6c:96:ae:22:20:f7:78:c1:60:56:ba:90:19:92:34:a1:
         33:26:05:ad:4a:b8:7a:90:32:85:ef:8b:62:f0:f5:50:15:b3:
         ec:52:93:8f:fa:66:49:7b:4b:3e:da:f5:e2:91:8e:2c:ea:c1:
         b8:2d:75:b0:3f:7e:52:26:86:42:86:bd:e7:06:53:b8:7d:fb:
         4e:c4:75:63:b7:f4:e5:80:2a:52:95:66:c9:a8:40:8c:f2:10:
         a6:1d:d8:56:3c:ec:29:39:37:ac:11:1d:e1:76:83:9b:8d:a8:
         99:46:d3:bc:55:22:8a:af:72:83:a5:b3:2c:31:92:0d:e2:81:
         8c:26:d4:23:32:1e:48:05:05:ac:39:9f:78:7c:e8:86:bf:a4:
         95:b3:49:0b:05:55:40:7c:24:a7:86:f0:6b:a4:55:cf:39:50:
         4b:5b:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org