Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/n1O04nVOzXoPqIy2GGQ3BOeIoYk.roa
File:                     n1O04nVOzXoPqIy2GGQ3BOeIoYk.roa (raw, json)
Hash identifier:          4n9f9uO3pDjbTI237vUkQtzAgR8lEdT63BDPR8qn4ug=
Subject key identifier:   9F:53:B4:E2:75:4E:CD:7A:0F:A8:8C:B6:18:64:37:04:E7:88:A1:89
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0271
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/n1O04nVOzXoPqIy2GGQ3BOeIoYk.roa
Signing time:             Sun 01 Oct 2023 01:29:28 +0000
ROA not before:           Sun 01 Oct 2023 01:29:28 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        111.86.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:28 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9F53B4E2754ECD7A0FA88CB618643704E788A189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:db:96:0d:aa:69:2c:53:66:19:2c:44:c7:
                    2c:4a:24:73:d5:83:fc:69:6a:46:1b:24:4e:fc:d1:
                    e7:8d:3f:42:96:b1:fd:73:27:01:ee:e4:96:ae:f6:
                    cc:14:a1:b1:12:20:2e:3a:6c:1d:41:b7:1e:62:77:
                    e5:27:6a:37:48:9e:83:22:d1:22:7d:ac:8e:dc:8d:
                    98:d2:6f:1f:94:f7:bb:c8:2a:b1:eb:93:a6:c8:a0:
                    d6:54:c6:d8:78:85:a6:3b:bf:8f:9f:27:74:4d:d7:
                    73:89:92:84:56:07:8e:70:b4:63:29:9d:44:fd:0c:
                    dc:02:15:f0:48:20:d7:df:eb:74:19:fd:e8:77:d5:
                    16:cd:40:b6:4d:02:7e:fb:64:9c:ca:18:b2:46:54:
                    dc:31:0e:10:0b:21:53:fa:b7:92:6e:fa:bd:11:b3:
                    67:a6:82:22:2a:c7:4d:c8:d2:0e:6e:6e:c5:7a:1c:
                    ce:b2:53:ad:14:fc:c8:fe:dd:37:a3:9d:2f:a2:f1:
                    7a:94:29:5b:45:e1:de:a3:15:00:ae:60:11:e2:cd:
                    d1:59:d4:cc:f8:92:76:a9:15:42:8f:7c:20:a0:67:
                    37:c2:ac:d3:7f:f1:a3:3d:b2:c6:5a:e7:70:d2:a3:
                    02:30:61:a1:3a:46:71:b4:e6:8d:61:25:6b:27:88:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:53:B4:E2:75:4E:CD:7A:0F:A8:8C:B6:18:64:37:04:E7:88:A1:89
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/n1O04nVOzXoPqIy2GGQ3BOeIoYk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.86.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:b7:29:6e:94:67:58:22:c4:45:72:ad:fe:94:8e:b4:71:88:
         f7:0a:52:d9:2b:9f:c8:1b:1a:dd:1e:71:93:dd:31:76:67:03:
         67:d8:a4:f0:a2:e1:71:60:74:d5:13:47:35:b2:57:b3:0a:6c:
         55:27:fe:c0:39:18:84:34:84:91:aa:7d:64:5b:0b:c1:01:c4:
         4e:c3:0d:3c:b6:43:3d:2c:34:06:ff:7a:99:8a:65:7c:47:e0:
         f5:d8:54:27:9e:df:a2:2d:49:34:0f:9b:65:57:3f:40:33:ac:
         61:be:81:f3:19:22:39:09:b8:0e:4f:a9:23:5d:a2:54:21:f0:
         da:2d:7f:37:14:f4:63:0b:45:ec:f7:80:46:6d:5f:b2:ea:c7:
         2d:a0:61:58:1d:44:9c:cb:47:72:5a:89:d9:74:8f:89:45:63:
         40:50:7c:fe:09:5d:5a:89:ce:f1:be:a4:18:23:f5:e7:15:99:
         db:a7:3d:50:e1:c2:bf:e5:c7:69:be:92:1e:72:65:ac:d2:60:
         a9:19:fc:09:17:0d:14:54:65:f9:b6:2e:ac:ce:01:23:5b:0c:
         5c:4f:b5:36:7a:09:62:98:6b:f2:6c:09:34:ea:30:81:41:dc:
         7f:21:62:9a:be:20:4a:0f:d9:b4:94:ce:27:78:d4:55:d9:11:
         22:5a:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org