Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nEUJ4p-Esb0gmbbugPShGc0XPX0.roa
File:                     nEUJ4p-Esb0gmbbugPShGc0XPX0.roa (raw, json)
Hash identifier:          BhJ8aBSyzsdcA7gS22lv/mOdHvHHTSuIUVrvDBvlPr0=
Subject key identifier:   9C:45:09:E2:9F:84:B1:BD:20:99:B6:EE:80:F4:A1:19:CD:17:3D:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       027E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nEUJ4p-Esb0gmbbugPShGc0XPX0.roa
Signing time:             Sun 01 Oct 2023 01:32:34 +0000
ROA not before:           Sun 01 Oct 2023 01:32:34 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        175.135.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:34 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9C4509E29F84B1BD2099B6EE80F4A119CD173D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7d:22:1f:01:08:07:4b:a5:fe:be:0f:42:0f:
                    35:36:27:7e:71:0c:59:f1:ab:25:3f:f9:89:b0:87:
                    d0:fd:34:5a:4c:d4:2d:29:73:14:6c:3b:93:86:12:
                    e5:64:c1:4a:7c:de:a0:cb:19:3e:6a:13:44:2a:af:
                    06:96:65:d8:5d:a1:07:6a:fe:d1:2b:b1:34:5d:08:
                    51:db:13:3a:2b:f4:43:3a:9e:60:2e:36:82:9c:58:
                    a0:11:53:66:85:f8:6b:9d:87:d5:11:a8:48:67:e3:
                    82:59:26:46:af:eb:35:ce:b9:db:e3:a6:7c:c6:67:
                    22:93:30:52:cc:25:28:d7:88:7d:a3:f2:ff:11:9a:
                    11:0a:80:a9:74:06:30:25:dc:c2:68:72:d1:93:f9:
                    b4:25:5e:7b:0d:90:18:17:b6:01:0a:0a:76:27:35:
                    2e:79:a7:cd:e2:0e:4d:8a:35:22:9e:6b:49:bd:23:
                    99:f5:8e:9a:62:07:d1:62:0a:17:cf:8e:44:95:59:
                    c5:f4:a3:c1:13:99:2e:81:67:45:ed:62:c1:47:2d:
                    f8:d1:1a:f2:63:19:1a:45:9d:f2:97:51:17:29:5a:
                    c7:22:2f:2a:15:98:77:dc:f4:e8:95:53:92:97:aa:
                    cb:42:f5:bf:03:0e:20:6d:70:77:da:bb:d8:a7:e9:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:45:09:E2:9F:84:B1:BD:20:99:B6:EE:80:F4:A1:19:CD:17:3D:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nEUJ4p-Esb0gmbbugPShGc0XPX0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:c0:17:54:fb:74:68:ac:aa:d0:5b:f8:ba:93:b4:3b:06:46:
         91:63:f0:e8:0f:2a:4e:dc:f8:50:07:7e:cd:f3:04:80:a3:f7:
         38:a3:b6:63:05:a5:54:ee:64:1c:20:5f:48:2b:fe:75:f7:bc:
         f6:a6:be:ab:47:3c:3d:c6:d0:00:48:70:3a:9b:40:85:98:46:
         e4:10:a5:53:a8:d5:cc:84:9a:bb:f6:83:89:db:e3:f4:d8:e4:
         54:34:0b:c4:4b:2c:3f:3f:c9:60:7f:f9:b5:f9:e4:e1:36:e6:
         e6:12:e3:d5:a9:98:04:ff:3e:b4:66:5a:72:ea:39:ce:ea:a8:
         89:69:65:dc:6d:72:5b:a8:86:ad:bb:1a:4e:42:00:95:9d:dd:
         be:5a:11:46:8a:c9:c3:a6:b8:30:29:84:cd:31:90:61:69:c1:
         7f:55:a2:04:e6:02:0e:99:60:00:95:95:48:83:48:c5:56:9a:
         4c:82:70:81:02:90:54:8a:bb:85:0b:1d:b9:ef:8b:0a:48:76:
         2a:92:06:3d:a8:a6:46:f7:15:e7:3d:40:09:68:2e:57:14:e8:
         00:ea:14:de:7e:38:f0:4a:8f:e8:a4:ae:ad:57:97:f4:f6:45:
         8c:90:91:d5:c9:fb:ef:d5:c5:46:44:fd:aa:db:ec:35:7b:f0:
         16:3a:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org