Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p96S4U5TfMAxkEEE1-kw-Q701WQ.roa
File:                     p96S4U5TfMAxkEEE1-kw-Q701WQ.roa (raw, json)
Hash identifier:          FQ2C8f1DsXFq/gVGLP6SnqgPuq+VsxaD8Jw5oer/1ro=
Subject key identifier:   A7:DE:92:E1:4E:53:7C:C0:31:90:41:04:D7:E9:30:F9:0E:F4:D5:64
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0354
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p96S4U5TfMAxkEEE1-kw-Q701WQ.roa
Signing time:             Sun 31 Mar 2024 01:42:46 +0000
ROA not before:           Sun 31 Mar 2024 01:42:46 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.182.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:46 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=A7DE92E14E537CC031904104D7E930F90EF4D564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:9b:1f:7c:81:6a:5a:b6:0c:ed:e7:e1:4d:
                    69:7b:b7:88:88:88:d7:85:31:71:41:ce:8b:55:5c:
                    77:a4:39:e4:44:e4:8e:af:d9:94:39:d3:66:6d:94:
                    55:d2:18:34:bd:d7:de:78:ae:4c:07:31:7c:93:18:
                    32:4b:a6:6a:de:36:3a:e4:b4:da:4f:78:96:62:a8:
                    87:16:17:a6:f1:52:dc:e1:19:27:3f:19:44:79:58:
                    4b:2f:1e:4f:0b:78:03:98:f9:2f:87:c7:ad:39:95:
                    7d:91:55:10:06:51:30:26:f4:56:e8:ec:34:cd:f3:
                    8b:e4:7d:12:06:bd:9d:e5:3e:73:dd:fd:cd:80:5c:
                    cf:71:bf:3f:e7:07:82:4b:14:66:f0:32:9d:db:0b:
                    a7:d7:0a:d8:6d:8d:3a:0d:fa:9f:00:6e:2e:68:ee:
                    8e:b6:b4:e5:f8:51:4a:f0:e2:0d:53:2b:e0:fa:ac:
                    f0:9c:6f:59:7f:72:10:e6:8b:31:c7:d4:90:55:ce:
                    7a:d8:12:50:34:9e:8d:c0:03:88:15:74:00:7b:16:
                    08:65:fa:16:9e:f3:86:0b:8c:5a:21:b3:e3:cd:80:
                    bd:ee:11:02:0d:7a:6f:d0:27:48:1f:a3:e9:a0:f1:
                    3e:0a:31:1d:29:a3:10:df:e2:bb:1e:16:c5:c0:84:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DE:92:E1:4E:53:7C:C0:31:90:41:04:D7:E9:30:F9:0E:F4:D5:64
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p96S4U5TfMAxkEEE1-kw-Q701WQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:81:d0:20:fa:d4:96:ed:15:61:f0:d2:58:fb:f0:98:87:
         e7:27:ee:8e:53:c8:a1:76:b3:66:a2:7c:68:7b:4d:75:59:26:
         eb:e4:c2:7c:fa:cc:16:2f:07:d8:f2:ac:09:1d:13:86:d0:33:
         92:99:ae:91:ba:6d:0d:5f:a5:90:5d:90:25:b6:bd:0e:5b:1a:
         05:9d:1a:ce:1d:20:08:e2:79:d4:d9:09:7a:70:22:7d:54:65:
         1e:a2:39:6e:9d:45:14:ad:2d:f2:80:e3:b6:bf:f3:86:ff:e0:
         8a:ad:2a:d7:e8:fc:d0:0b:62:2f:ac:25:9f:80:15:b4:8d:93:
         74:2e:b3:73:6f:9a:8c:d9:8e:03:27:15:0d:e9:26:09:08:3a:
         8d:69:ca:08:57:e0:f1:f3:6d:d4:6b:13:6c:2b:40:d1:db:52:
         14:f3:d6:d4:18:15:6d:9c:1a:19:29:b5:9e:c6:4b:c5:db:4e:
         fd:65:82:fb:50:4e:e4:4b:1b:af:ae:9a:03:08:18:b2:d5:12:
         2b:67:f5:42:bc:34:92:06:9c:04:51:82:6f:e6:63:0a:13:5d:
         24:16:a2:b1:ea:4a:60:4a:a6:44:d1:ec:38:2f:59:28:86:eb:
         66:90:37:b8:c0:bd:18:c2:a8:1a:31:09:21:3b:30:a2:ab:cc:
         21:f5:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org