Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p99S6J6FaQ0f9SFV4nC4aP0ANS0.roa
File:                     p99S6J6FaQ0f9SFV4nC4aP0ANS0.roa (raw, json)
Hash identifier:          QHHmxYO1s326mvBCjWtGP6leZP8Goe9D0XwZxOT6cVc=
Subject key identifier:   A7:DF:52:E8:9E:85:69:0D:1F:F5:21:55:E2:70:B8:68:FD:00:35:2D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0392
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p99S6J6FaQ0f9SFV4nC4aP0ANS0.roa
Signing time:             Sat 31 Aug 2024 01:29:54 +0000
ROA not before:           Sat 31 Aug 2024 01:29:54 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        111.107.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:54 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=A7DF52E89E85690D1FF52155E270B868FD00352D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:6f:18:68:e7:57:a5:ec:3c:97:bb:c7:31:
                    0a:53:2a:5d:d1:28:8e:4e:a6:09:4a:2c:dc:3b:f0:
                    d0:b1:4f:06:32:13:6b:b7:e5:35:29:07:1b:88:82:
                    89:94:15:6d:60:d3:24:5d:5a:15:d1:e8:de:f1:9d:
                    db:26:09:9e:f1:3f:48:ac:b9:41:9a:90:47:75:8a:
                    06:a2:08:a3:1c:51:6d:4c:ed:3f:3d:66:51:ae:84:
                    c1:46:d6:7e:69:f1:f1:d0:53:83:68:69:88:56:f5:
                    03:dd:90:fa:b1:d3:58:8c:3d:de:06:95:dc:63:9f:
                    b4:81:44:07:2c:79:60:bd:52:69:85:b3:33:17:b1:
                    30:ca:7c:74:77:eb:e8:cd:2c:2e:bb:9a:c8:21:e3:
                    2f:51:6c:1b:6f:6e:6d:e7:01:d5:07:fd:00:24:33:
                    54:0f:ea:35:37:d8:1d:bb:56:1d:84:6b:b7:3c:b8:
                    5c:4a:68:6c:a5:67:81:93:55:d5:4a:7d:91:0b:c8:
                    1f:a7:dc:91:3e:b5:7b:56:98:ae:04:04:56:8f:e3:
                    14:18:15:ba:8d:80:01:d0:b8:2d:d9:ae:86:08:b5:
                    1f:52:50:ef:c1:32:3e:3f:e6:48:a6:19:35:1d:7b:
                    ba:6a:82:3f:d5:8d:51:88:14:11:24:48:eb:09:6b:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DF:52:E8:9E:85:69:0D:1F:F5:21:55:E2:70:B8:68:FD:00:35:2D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p99S6J6FaQ0f9SFV4nC4aP0ANS0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:02:32:d9:e1:19:70:e6:74:b1:08:50:10:c1:96:44:24:7b:
         66:06:57:56:9c:4d:67:b3:05:a8:db:65:57:ab:19:ae:a2:a7:
         a4:c2:1c:f9:b4:0c:07:24:d2:47:c1:f5:ec:f6:4a:20:6a:b7:
         82:b3:67:c9:72:77:8a:9b:b8:1d:90:91:f1:24:40:c3:6c:04:
         f5:6f:77:e5:1f:ec:79:d6:7d:ba:4c:53:f6:07:0c:a2:e0:6b:
         b1:11:a1:25:6e:77:55:2d:20:97:cf:2a:0c:6a:fa:3b:3a:3a:
         13:dd:fb:94:5d:c5:35:9b:49:92:d0:ae:41:67:6b:cb:5b:d3:
         83:7d:38:36:d2:08:18:6c:60:d0:29:c8:bb:04:a3:e0:ce:58:
         1c:7b:0a:d1:57:3a:f9:f3:ef:96:b4:cd:9a:4e:40:6b:5f:7d:
         99:54:f0:dd:f2:7d:ff:a0:1b:b6:b6:07:21:22:d5:a4:69:9c:
         dd:41:b8:e3:71:de:d4:98:eb:3d:76:f6:df:2c:2e:ff:b1:af:
         c8:66:d4:f6:d1:87:ec:2b:72:d4:27:7b:13:28:5a:04:80:37:
         1c:97:ac:0c:dd:6e:f5:c5:87:f2:e2:10:fd:73:34:a4:13:8e:
         96:c6:56:53:f5:e3:bf:bd:cd:00:02:59:73:60:12:bc:56:bc:
         b9:3f:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org