Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jAL7H-l-sMWhvdMgA_whYGE09kk.roa
File:                     jAL7H-l-sMWhvdMgA_whYGE09kk.roa (raw, json)
Hash identifier:          3MhRs6oR8M+27UDtM7A+6BfdXfF9Lqh12bAqTJICXH8=
Subject key identifier:   8C:02:FB:1F:E9:7E:B0:C5:A1:BD:D3:20:03:FC:21:60:61:34:F6:49
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       032A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jAL7H-l-sMWhvdMgA_whYGE09kk.roa
Signing time:             Sun 31 Mar 2024 01:40:39 +0000
ROA not before:           Sun 31 Mar 2024 01:40:39 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:39 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=8C02FB1FE97EB0C5A1BDD32003FC21606134F649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f5:9d:84:18:39:90:c5:aa:17:61:fe:37:19:
                    d5:55:39:14:b9:a1:15:18:28:8c:e8:55:4f:59:ba:
                    6f:3b:94:7a:e1:99:da:ba:92:4e:28:c2:da:b2:6c:
                    7f:8c:4e:5c:fc:b9:63:b7:3c:53:72:ed:d8:47:ab:
                    ae:5b:f5:2d:58:4c:c9:e9:19:2e:42:e4:e3:5d:de:
                    50:02:9e:f8:6b:17:00:98:ca:d8:09:6b:56:c7:10:
                    c3:47:cb:45:f8:1d:5a:bf:75:dc:66:92:45:99:22:
                    c0:34:7e:b6:1e:d1:f1:c2:98:a7:14:f2:cf:76:5f:
                    7e:07:fe:53:20:1c:25:3e:ea:ef:f3:1b:f0:0d:81:
                    ab:c9:f5:5d:b4:fa:91:6d:c5:35:b7:ed:91:ee:28:
                    92:80:70:58:2c:d9:5c:9f:83:0a:28:e2:85:84:21:
                    91:9f:b8:32:b5:dd:50:eb:1b:a0:19:72:5b:1f:11:
                    42:6d:3b:09:f2:b6:fe:ce:0e:9e:38:68:7b:9f:e1:
                    9b:80:b0:8d:18:af:96:1d:02:80:3e:13:94:0a:fc:
                    88:e1:65:1a:d7:2d:9c:a8:d4:c2:9b:ef:48:6c:15:
                    f4:ec:29:a8:ab:6a:36:ea:d0:c5:34:3f:e2:0c:62:
                    0f:53:a4:34:3e:71:31:b2:ad:fa:7a:81:cd:54:76:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:02:FB:1F:E9:7E:B0:C5:A1:BD:D3:20:03:FC:21:60:61:34:F6:49
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jAL7H-l-sMWhvdMgA_whYGE09kk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:40:bc:08:72:5f:34:08:33:08:ff:7b:e1:0e:cb:52:39:
         5d:56:e4:c8:64:b9:d1:8a:8b:30:7f:48:02:1b:8b:b8:56:6a:
         fe:68:0e:3d:d4:3e:22:b0:c1:6a:a6:2b:e6:aa:79:13:fe:18:
         01:8e:a9:ca:bc:e8:ed:fc:31:ef:0e:35:62:f9:90:51:80:2c:
         34:5b:bf:b0:61:61:bf:d3:85:31:a6:7c:3b:be:90:d4:43:24:
         46:a7:83:e8:f4:40:38:6b:fd:bf:d4:62:5f:c2:c6:17:df:f1:
         5e:45:bc:86:1b:7c:c8:61:84:0b:8f:49:ab:28:e3:78:33:84:
         0b:85:19:e1:06:9f:2c:26:5e:7c:8a:e6:52:43:85:3a:4c:ce:
         51:18:60:fd:33:f0:10:de:73:03:1f:c3:b3:56:7b:e1:0a:3f:
         4a:71:60:dd:ec:5e:c2:e6:91:8e:9b:12:f4:9f:bf:19:4e:f6:
         55:76:0f:be:6c:fc:88:62:57:11:8c:c2:cb:d7:9a:db:62:bf:
         28:9c:94:56:4a:ed:bc:1e:52:fd:ba:2f:dd:95:15:68:a5:b0:
         34:36:18:c0:9c:e5:b3:b8:03:42:eb:6a:1c:b9:57:a6:a1:09:
         78:d5:90:97:98:42:f3:0d:78:99:f6:c5:88:a7:2f:09:13:9e:
         4e:e7:d4:d3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTQwMzlaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhDMDJGQjFGRTk3RUIw
QzVBMUJERDMyMDAzRkMyMTYwNjEzNEY2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDm9Z2EGDmQxaoXYf43GdVVORS5oRUYKIzoVU9Zum87lHrhmdq6
kk4owtqybH+MTlz8uWO3PFNy7dhHq65b9S1YTMnpGS5C5ONd3lACnvhrFwCYytgJ
a1bHEMNHy0X4HVq/ddxmkkWZIsA0frYe0fHCmKcU8s92X34H/lMgHCU+6u/zG/AN
gavJ9V20+pFtxTW37ZHuKJKAcFgs2Vyfgwoo4oWEIZGfuDK13VDrG6AZclsfEUJt
Ownytv7ODp44aHuf4ZuAsI0Yr5YdAoA+E5QK/IjhZRrXLZyo1MKb70hsFfTsKair
ajbq0MU0P+IMYg9TpDQ+cTGyrfp6gc1Udn/hAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUjAL7H+l+sMWhvdMgA/whYGE09kkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2pBTDdILWwtc01XaHZkTWdBX3doWUdFMDlray5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVxmCAwDQYJKoZIhvcNAQELBQADggEBAJFPQLwIcl80CDMI/3vhDstSOV1W
5MhkudGKizB/SAIbi7hWav5oDj3UPiKwwWqmK+aqeRP+GAGOqcq86O38Me8ONWL5
kFGALDRbv7BhYb/ThTGmfDu+kNRDJEang+j0QDhr/b/UYl/Cxhff8V5FvIYbfMhh
hAuPSaso43gzhAuFGeEGnywmXnyK5lJDhTpMzlEYYP0z8BDecwMfw7NWe+EKP0px
YN3sXsLmkY6bEvSfvxlO9lV2D75s/IhiVxGMwsvXmttivyiclFZK7bweUv26L92V
FWilsDQ2GMCc5bO4A0Lrahy5V6ahCXjVkJeYQvMNeJn2xYinLwkTnk7n1NM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:16 2024 by rpki-client on console-ams.rpki-client.org