Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa
File:                     njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa (raw, json)
Hash identifier:          NM9Jl6cWrReGvUHLVwHbHYf3+vs9SRbT/eLUy9NWTOs=
Subject key identifier:   9E:35:0C:92:34:A8:59:26:A2:44:4C:E8:08:5A:7C:27:2D:15:B3:92
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02D4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa
Signing time:             Sun 31 Mar 2024 01:33:27 +0000
ROA not before:           Sun 31 Mar 2024 01:33:27 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        125.51.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:27 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=9E350C9234A85926A2444CE8085A7C272D15B392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:bb:b4:38:d4:66:1b:af:66:2d:c6:ae:d9:
                    e4:81:c4:cf:8e:4d:79:82:26:35:86:27:1a:04:35:
                    34:d4:f2:3f:89:7e:64:5b:ef:97:9f:13:c1:c7:7a:
                    9a:80:93:ac:ad:51:be:c3:2f:6e:f2:ae:58:0c:7d:
                    07:10:68:95:04:b8:2e:69:12:af:4b:da:9f:cd:e5:
                    45:14:78:06:5e:a3:2b:9d:b2:63:dc:6c:8b:f5:62:
                    b8:89:5e:a6:8c:b8:ce:80:9a:f3:62:b6:f9:e4:94:
                    51:7f:59:db:a1:e0:fd:da:93:17:57:aa:70:59:09:
                    ca:66:06:c5:af:da:07:f3:15:f6:a0:02:23:a4:06:
                    fc:ba:86:29:c6:fa:9e:ec:d8:c5:89:fc:e2:10:cf:
                    8c:53:c1:29:ea:23:d7:9e:99:45:af:30:26:61:13:
                    5d:f7:1c:f3:2e:37:e7:83:09:0e:10:c6:7f:e3:e9:
                    eb:04:4b:0e:82:a3:4d:b8:65:21:89:b7:91:79:52:
                    de:c6:e5:3d:c8:ed:76:ac:71:f8:2b:ec:02:a8:56:
                    7c:47:ba:a5:7b:73:83:85:03:65:93:3e:8a:9e:ad:
                    ac:3f:06:d6:ac:fa:17:1f:8e:d5:93:73:2d:af:0b:
                    ae:ee:93:b4:e9:61:8b:03:43:41:9a:c6:4f:29:b4:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:0C:92:34:A8:59:26:A2:44:4C:E8:08:5A:7C:27:2D:15:B3:92
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/njUMkjSoWSaiREzoCFp8Jy0Vs5I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:09:50:3e:65:72:72:83:85:81:07:c9:6a:ad:79:a0:0f:
         96:57:64:ab:b9:bf:46:ee:0c:cf:17:b1:90:7b:f9:e0:12:33:
         6c:d4:85:15:86:13:02:13:37:11:fc:6b:27:38:ab:58:bd:3a:
         1e:9a:3e:a8:b7:a1:4b:23:7b:ec:1f:b4:c3:89:33:97:4c:3f:
         27:52:81:a1:db:bd:ef:7b:b0:7e:8c:09:31:00:2b:cd:8c:3c:
         be:8e:89:cf:c1:18:7c:54:61:ab:ed:11:91:86:e2:35:d1:39:
         0c:ae:3f:78:d0:0f:bf:30:92:1e:4d:67:8c:7a:48:bf:de:d6:
         96:84:63:ed:42:0f:3f:b8:71:8e:fb:54:7a:b8:4b:40:aa:42:
         63:b1:b2:24:54:a7:bc:83:2d:2d:b8:47:e6:cb:9f:59:91:2c:
         c9:fa:ca:b3:07:68:19:09:84:53:7f:f5:b7:9c:b1:01:56:71:
         03:e1:e2:c3:cb:11:ae:5c:d7:15:df:fb:a0:52:39:c2:07:45:
         a9:c3:d8:9b:49:71:19:55:27:38:b0:b4:eb:f1:4c:aa:56:9c:
         8e:9a:59:62:d2:f5:cd:67:ba:15:4c:c8:37:8a:e5:7f:e3:10:
         a2:2d:9d:76:5b:16:2b:42:47:9b:71:d4:4b:e2:c4:06:7d:7b:
         9d:76:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org