Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pNKUW3D5OdkjcZS9JLIBuc2KRzM.roa
File:                     pNKUW3D5OdkjcZS9JLIBuc2KRzM.roa (raw, json)
Hash identifier:          F7nBoIVH3cSPD5rIkxIPah3iCUXTERzNAoZ6nqPe/EU=
Subject key identifier:   A4:D2:94:5B:70:F9:39:D9:23:71:94:BD:24:B2:01:B9:CD:8A:47:33
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0263
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pNKUW3D5OdkjcZS9JLIBuc2KRzM.roa
Signing time:             Sun 01 Oct 2023 01:29:22 +0000
ROA not before:           Sun 01 Oct 2023 01:29:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        27.88.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:29:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A4D2945B70F939D9237194BD24B201B9CD8A4733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:cf:86:72:f1:44:da:0d:db:96:97:76:c5:
                    d1:0e:cc:c5:2e:19:73:9b:c7:0a:60:09:e0:41:8f:
                    f5:a2:3b:e6:71:fc:54:e2:72:b9:0e:ba:44:15:3a:
                    15:86:29:41:62:fb:b9:82:3f:5c:bf:24:2d:dd:49:
                    10:c2:7c:72:25:1a:bc:9f:7a:15:5a:4a:7d:9b:89:
                    20:32:71:d6:38:ae:8b:4d:9f:df:fc:8b:a3:a4:23:
                    bd:22:b9:e5:1c:83:fd:ce:b4:d0:04:64:5d:87:71:
                    e0:5f:e1:bf:a0:ab:76:b7:b6:31:d8:b0:ea:f5:0f:
                    a2:21:71:22:31:5e:f5:83:69:86:e4:2b:19:61:90:
                    b3:4b:46:0b:01:4b:98:07:79:1a:c9:4d:88:82:1b:
                    fd:67:90:fd:12:59:a7:b6:c4:36:6b:2d:e2:46:6a:
                    cc:56:6f:1a:49:60:c7:d9:f0:74:b1:93:0d:ba:14:
                    54:a4:64:1f:51:c0:ce:dc:29:6f:a0:c1:87:61:09:
                    89:14:35:8b:b2:6d:9e:e3:ce:c1:37:8d:f7:fe:55:
                    18:35:d5:87:9a:e6:77:4b:67:22:f9:86:bf:6a:ed:
                    64:be:07:dd:5e:f0:59:ae:f2:b1:8a:f3:06:44:0e:
                    fb:19:66:be:6a:58:88:6e:1c:58:e1:73:f3:41:36:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:94:5B:70:F9:39:D9:23:71:94:BD:24:B2:01:B9:CD:8A:47:33
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pNKUW3D5OdkjcZS9JLIBuc2KRzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:85:5e:e3:0d:3f:3a:0f:57:4c:44:35:4e:41:29:a2:1e:e5:
         02:3c:3e:24:71:39:fd:b2:b4:cd:06:e7:d9:0c:d6:04:df:41:
         66:6d:48:d9:fe:12:39:76:18:fe:be:be:d0:89:18:54:c5:e2:
         18:cc:aa:c6:19:61:47:8d:61:43:24:81:0b:c7:5e:83:73:5c:
         ec:11:41:c0:7c:cf:c6:ae:51:e3:62:0e:77:1b:ba:d6:47:fb:
         43:cf:aa:2c:87:71:60:e0:6e:e3:0a:84:e0:b4:64:e2:9a:83:
         53:5e:f6:38:40:6a:de:81:74:53:79:da:38:10:7b:a7:85:0c:
         dd:f7:7a:fd:02:d2:48:71:ce:34:c1:33:aa:db:12:9c:97:7d:
         ed:da:ee:dc:63:01:bd:84:37:78:2d:83:5f:a7:e0:ca:3d:b4:
         6a:fd:39:ab:49:c6:43:a8:1f:5c:18:8d:6f:25:b8:8f:2f:da:
         62:04:97:b1:d7:b4:b9:b5:a4:fd:00:9e:51:8a:7d:18:e6:59:
         0f:d5:ba:52:22:4b:47:bc:d0:e0:7c:8d:45:ff:c2:dd:45:60:
         ef:cc:aa:0f:48:2d:50:16:a1:37:fd:ed:c6:5d:56:b3:0c:39:
         6f:29:57:67:6d:2a:a3:52:ff:63:68:e3:07:59:95:0b:7c:c9:
         8f:e3:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org