Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/mJJjq3d3u2uUgu3-O8_gQLexGJw.roa
File:                     mJJjq3d3u2uUgu3-O8_gQLexGJw.roa (raw, json)
Hash identifier:          4AymsBNfETlsU1Gio7/ZfoVn3NWvwlZCkgEjz3jhGeY=
Subject key identifier:   98:92:63:AB:77:77:BB:6B:94:82:ED:FE:3B:CF:E0:40:B7:B1:18:9C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02CF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mJJjq3d3u2uUgu3-O8_gQLexGJw.roa
Signing time:             Sun 31 Mar 2024 01:33:25 +0000
ROA not before:           Sun 31 Mar 2024 01:33:25 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        121.111.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:25 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=989263AB7777BB6B9482EDFE3BCFE040B7B1189C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:f8:22:5b:ff:b8:fe:d2:fb:4e:51:db:fc:
                    7c:b6:9d:c4:cd:be:40:7f:56:ca:18:e2:ca:0c:de:
                    07:af:88:a8:61:0f:5a:13:4a:40:79:e9:b3:ca:40:
                    ae:35:c5:4f:26:49:6c:d2:92:f0:14:49:3b:55:42:
                    14:6e:cb:6d:e2:c2:4d:3f:0e:98:6c:fe:9d:d0:38:
                    2c:97:15:97:11:0e:61:15:ff:bf:6e:f4:7b:2c:1a:
                    e8:5c:0a:76:4c:5f:bd:0d:31:1e:db:1f:4b:90:05:
                    df:05:48:c0:64:99:a8:70:d3:2f:27:04:23:6b:13:
                    cb:2d:d1:a8:de:74:44:22:4e:5a:36:f8:13:72:bd:
                    06:ea:cf:c9:02:7d:ad:97:6d:bf:a8:cd:d0:c8:23:
                    ce:64:79:7f:c1:2c:7f:eb:80:4a:36:d9:80:d4:ec:
                    74:95:75:98:7b:9e:b8:b3:0a:4e:00:a1:87:cd:60:
                    18:11:9e:5d:cf:5d:d1:f4:22:2d:3c:43:79:b7:95:
                    6b:14:6e:68:8f:de:e3:56:d0:2c:36:24:d0:b5:f6:
                    6a:10:33:9e:70:50:a2:3c:8d:85:be:cb:79:1a:60:
                    12:d5:fe:18:08:d7:94:41:97:f2:a4:23:e8:da:b0:
                    81:32:aa:cb:65:62:13:64:11:12:65:c9:ed:5e:e5:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:92:63:AB:77:77:BB:6B:94:82:ED:FE:3B:CF:E0:40:B7:B1:18:9C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mJJjq3d3u2uUgu3-O8_gQLexGJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b8:7c:53:91:05:e7:51:9e:93:05:9f:91:65:b7:d5:53:2a:8b:
         94:fd:12:9a:3a:d0:fb:b5:2b:a3:29:50:ce:bc:9d:fe:33:49:
         e8:62:38:0f:d6:a0:77:c2:f7:c4:77:e0:da:76:b3:f1:b2:42:
         ed:25:d4:2b:d1:46:62:17:d5:65:e9:8e:ec:90:5b:0c:c0:c6:
         83:86:29:38:e2:4a:4b:63:a8:70:62:e1:e0:d6:f6:e8:71:f1:
         2e:32:14:0a:98:f3:cb:9f:02:6f:2e:e3:57:c8:7e:e1:a1:c5:
         6a:78:83:1b:62:76:ce:74:83:c0:16:68:90:19:2a:5b:7d:38:
         a2:4c:88:9a:6c:e4:33:40:ca:fc:69:b2:4e:c4:51:c9:b1:6c:
         cd:da:2b:5b:5d:74:fa:c0:a4:e0:22:9f:bb:43:2f:b4:c1:06:
         90:3e:2e:01:c1:9f:fd:0a:06:c3:ce:f6:bb:7a:de:af:14:90:
         e6:be:98:8d:2a:32:0d:4a:22:23:f6:5f:ae:bc:b1:76:1c:79:
         ce:96:af:bf:0c:31:b1:19:ef:12:08:f6:6a:ca:2e:bb:e5:be:
         bd:81:a0:77:9e:92:53:9c:3d:35:12:23:14:c3:aa:83:24:40:
         97:b9:d4:d5:e0:1f:20:81:38:b5:f6:33:4c:ee:b0:30:da:32:
         45:71:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:48 2024 by rpki-client on console-ams.rpki-client.org