Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/l-k1HU_S0vdYEE3_UAY_ck739sk.roa
File:                     l-k1HU_S0vdYEE3_UAY_ck739sk.roa (raw, json)
Hash identifier:          IvnBMeASJWrAYU/yFS+OZ+5iPBlxxxHO4fWf+F8RlV0=
Subject key identifier:   97:E9:35:1D:4F:D2:D2:F7:58:10:4D:FF:50:06:3F:72:4E:F7:F6:C9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02EE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/l-k1HU_S0vdYEE3_UAY_ck739sk.roa
Signing time:             Sun 31 Mar 2024 01:35:50 +0000
ROA not before:           Sun 31 Mar 2024 01:35:50 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        175.133.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:50 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=97E9351D4FD2D2F758104DFF50063F724EF7F6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:5c:52:73:fd:b6:4b:6a:c1:6a:3a:6b:e2:
                    31:69:82:ba:5b:e4:ac:6f:6a:42:fa:f8:ac:e1:ae:
                    ef:87:16:b7:35:34:10:bc:d5:72:0f:ef:ee:92:ed:
                    96:7f:50:94:f3:36:fa:44:2c:8f:6e:0b:88:63:7c:
                    ed:8e:7b:70:9b:dc:3b:d4:e4:55:b3:38:cd:1b:1a:
                    ce:bb:9b:9b:75:b7:06:9f:7c:15:87:14:35:2b:ea:
                    a9:a9:84:76:61:31:06:08:4f:06:19:5c:9c:a7:e6:
                    92:57:a5:f2:c5:de:67:6a:0a:8a:f9:45:cd:34:cb:
                    e6:0c:07:4e:c6:9e:29:8b:49:1f:62:19:60:07:49:
                    1f:08:58:2d:f5:40:0f:fe:ec:37:0a:7a:43:df:2b:
                    bb:99:8a:46:0a:6a:b5:42:5c:42:01:c6:a4:61:6a:
                    6f:85:34:5d:15:f4:fc:fc:08:88:93:48:4f:6f:cf:
                    a4:90:53:be:a9:cc:87:0b:a7:9c:36:6b:c6:83:36:
                    d7:ad:3f:87:9a:13:f5:fe:59:e1:a3:74:cc:2e:04:
                    a7:c6:09:b5:f0:03:52:45:0c:c8:37:96:04:a4:9a:
                    6f:49:d6:76:78:a7:bc:b7:3d:b6:e4:b0:09:11:36:
                    1c:08:8a:da:75:11:d5:0d:60:38:48:8c:38:e3:b0:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E9:35:1D:4F:D2:D2:F7:58:10:4D:FF:50:06:3F:72:4E:F7:F6:C9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/l-k1HU_S0vdYEE3_UAY_ck739sk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.133.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:23:ee:ae:57:cf:07:12:b1:24:56:43:65:e2:9a:92:3a:
         50:bf:4f:e5:5e:a0:39:b8:0d:63:0d:9e:90:21:a7:05:c2:2d:
         11:6a:44:b1:54:7c:65:10:59:7c:71:7f:0f:87:f4:dc:54:ab:
         9b:e3:33:f0:f5:d7:0b:30:1a:f5:2e:03:8a:cb:61:9c:7e:09:
         a0:f5:b1:a0:6f:49:0d:14:b8:52:88:93:7b:c9:8c:c5:f8:88:
         2d:d6:9b:86:4f:05:b2:fd:e5:5c:02:47:39:01:b4:b1:4d:74:
         5b:9c:a0:2a:13:13:ed:7d:cc:2c:af:f4:d6:46:50:19:0a:be:
         fe:7f:9f:3b:dc:79:a2:42:a8:83:a7:1b:02:f8:1d:09:f0:8d:
         0a:5d:34:36:6f:45:4c:3a:00:29:81:77:03:1b:55:22:ee:5c:
         7e:76:f8:23:58:ee:00:67:a7:e9:32:85:62:69:8c:3c:e4:f5:
         71:9c:8e:95:8b:df:72:ac:31:60:fc:c5:7e:72:ac:a7:94:56:
         57:a9:76:85:65:95:70:80:a5:e0:57:6c:a3:99:01:54:59:08:
         34:e8:e9:3e:3a:85:e9:87:83:9a:34:f8:23:89:b4:21:4b:ab:
         55:24:73:19:9b:d0:53:3f:0e:44:92:fb:06:b7:2f:ac:a4:1d:
         b6:8e:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org