Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTrlJTEQiM_chrj8Ec3l7LHPED8.roa
File:                     nTrlJTEQiM_chrj8Ec3l7LHPED8.roa (raw, json)
Hash identifier:          cSYdsZ+E0RSmyetO8Rn/TP8mhoyXlFCCv0Ml0/prftk=
Subject key identifier:   9D:3A:E5:25:31:10:88:CF:DC:86:B8:FC:11:CD:E5:EC:B1:CF:10:3F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0296
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTrlJTEQiM_chrj8Ec3l7LHPED8.roa
Signing time:             Thu 29 Feb 2024 01:31:35 +0000
ROA not before:           Thu 29 Feb 2024 01:31:35 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     2516
IP address blocks:        125.55.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Feb 29 01:31:35 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=9D3AE525311088CFDC86B8FC11CDE5ECB1CF103F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:df:8b:a0:fe:5c:d9:d4:be:3e:55:97:90:
                    db:51:ce:aa:63:62:b8:3b:5e:25:9e:a8:90:fb:0e:
                    b5:8c:e2:71:ca:5a:29:dc:22:d9:85:f5:ac:c5:10:
                    16:7c:a9:39:46:84:e8:91:16:0a:64:10:fa:15:06:
                    ca:38:5d:1f:cc:0f:20:f5:45:b6:13:68:11:56:86:
                    a9:8d:f0:d3:77:7a:37:80:e3:00:af:ab:db:44:8e:
                    67:34:f9:27:ca:6a:0c:85:c1:18:3c:84:ae:41:22:
                    86:b2:88:0f:79:78:28:6b:c6:b8:02:cf:d2:88:7e:
                    ee:55:ed:8c:1f:93:f5:c8:59:ef:1f:ec:76:c4:f5:
                    f8:34:74:a4:49:b7:e3:16:dd:4f:7e:69:ac:a4:8a:
                    1a:a6:63:fc:3c:af:14:30:86:d8:42:36:97:22:01:
                    3d:39:d3:e7:60:2e:a8:66:9f:31:0b:9a:99:c0:56:
                    62:15:8b:2b:e1:6a:fc:d2:05:21:6b:49:32:df:8a:
                    2a:35:51:b5:9d:13:04:19:25:49:69:fb:c8:b0:7f:
                    a2:14:38:04:87:93:96:31:9d:f0:8b:a3:34:6e:3b:
                    6e:2c:80:8e:35:aa:03:58:a2:9e:8d:19:31:39:96:
                    b0:6d:b0:df:39:4a:c6:8f:93:3f:c5:e8:b4:cc:bd:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3A:E5:25:31:10:88:CF:DC:86:B8:FC:11:CD:E5:EC:B1:CF:10:3F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nTrlJTEQiM_chrj8Ec3l7LHPED8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.55.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:b4:f1:d7:5c:15:a7:fe:8d:64:1a:88:de:fe:e8:b0:87:
         44:ff:a1:7f:0b:39:b3:b2:6b:19:15:95:c8:9e:ee:df:99:9c:
         d8:ef:4a:83:f4:71:6a:71:71:a4:d1:22:66:22:6e:8f:36:45:
         ff:6e:f4:c4:23:6f:86:b0:7d:c2:6d:3e:9a:f0:24:ac:af:e8:
         c5:45:3c:73:91:6d:06:b6:e2:1f:6f:69:14:13:78:1f:82:40:
         6f:9a:21:ec:d7:00:03:87:29:32:39:e3:54:65:30:df:56:2f:
         e7:8d:e9:4a:f1:1e:89:de:79:e5:e1:cf:16:e7:12:c8:38:71:
         98:23:96:48:53:b4:de:20:1c:ff:25:69:76:5d:c3:39:29:56:
         bc:e6:f9:ad:54:b1:2f:b1:a0:78:00:e0:3e:81:e2:b6:c5:99:
         be:38:23:28:a3:40:27:a1:5e:a5:81:e1:2b:c8:e6:f8:52:c6:
         ab:0e:3f:bb:6c:ff:ee:56:da:c6:77:1c:e3:f0:ad:16:18:78:
         5f:59:cf:b2:3d:6c:d4:28:87:1f:e6:7c:ae:b9:2e:4f:61:ae:
         15:89:49:24:a4:82:e6:c7:78:a6:7e:31:64:a8:68:db:5e:69:
         5b:c2:24:fe:87:3f:3e:92:36:a9:1e:7f:c6:24:f5:ae:fb:99:
         ce:11:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org