Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pOYvUchRuEnHFOTDMzYX-AlC6E8.roa
File:                     pOYvUchRuEnHFOTDMzYX-AlC6E8.roa (raw, json)
Hash identifier:          w/6ww55McjCPWiKVrESG68NHjGlFIQwMmylzdb9b29k=
Subject key identifier:   A4:E6:2F:51:C8:51:B8:49:C7:14:E4:C3:33:36:17:F8:09:42:E8:4F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02DB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pOYvUchRuEnHFOTDMzYX-AlC6E8.roa
Signing time:             Sun 31 Mar 2024 01:33:29 +0000
ROA not before:           Sun 31 Mar 2024 01:33:29 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.174.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:29 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=A4E62F51C851B849C714E4C3333617F80942E84F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:37:a5:b3:64:66:c4:54:c5:6a:0f:20:31:
                    af:64:d7:23:fc:13:19:6e:11:f1:0a:4a:ce:bd:bc:
                    eb:75:27:f5:79:89:c1:7a:64:51:73:24:da:95:67:
                    45:ce:23:5c:89:b1:3c:f8:08:10:78:b5:cd:fc:0e:
                    e9:b8:8c:c7:cd:6f:39:00:78:bf:bf:7d:7e:15:5e:
                    78:f9:9b:e9:a6:a9:17:b0:e6:20:0f:a5:2b:d7:bf:
                    fb:0b:64:a6:8b:4c:4a:9f:4c:d7:53:7c:45:79:33:
                    c8:0f:80:4b:f4:ea:72:4e:7a:f7:c3:da:06:10:a2:
                    da:46:24:f1:ba:cd:ae:b2:97:de:7a:a8:a9:1c:9e:
                    51:dc:e2:de:50:b4:57:c7:2c:9b:36:0b:20:66:81:
                    89:0f:cc:ec:2e:b8:66:66:52:73:c8:2b:fa:e0:64:
                    d8:9b:5f:46:c7:31:3c:71:ed:17:4e:7e:26:38:0d:
                    b3:10:69:86:cc:9e:48:57:4a:27:d7:2b:1c:20:0c:
                    87:4b:2a:96:f2:73:02:de:10:61:d9:d4:60:87:29:
                    e6:16:ea:5d:df:45:12:c2:34:c2:29:84:19:0f:ad:
                    0b:b7:10:ea:c5:a3:63:94:4a:bc:cd:82:07:dd:85:
                    63:bd:e7:6a:ef:c1:ef:32:77:5e:d9:bd:20:31:8e:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E6:2F:51:C8:51:B8:49:C7:14:E4:C3:33:36:17:F8:09:42:E8:4F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pOYvUchRuEnHFOTDMzYX-AlC6E8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:01:a2:0f:7a:0c:a5:fb:d3:23:a5:e9:79:d1:b3:b3:4b:e6:
         51:96:49:ca:fa:6a:86:9c:ea:14:df:c8:73:4f:35:28:01:b3:
         be:57:38:8a:72:a0:52:7f:5a:51:e2:9d:95:17:47:d8:67:69:
         a4:17:90:07:aa:2a:d1:67:0e:07:67:7c:2d:51:1b:b8:77:99:
         92:de:54:c0:16:26:1f:1e:04:9b:a7:da:9c:9c:51:eb:d3:70:
         dd:57:be:58:5a:cd:e7:42:bf:a9:f5:af:c2:d5:75:91:6c:b3:
         14:3d:bd:07:d1:ed:cd:15:c8:36:19:d5:b0:42:7d:cb:62:60:
         98:40:4f:83:da:4e:a5:ee:51:11:a0:02:d7:91:b9:1b:70:f8:
         79:33:4d:7d:64:ae:70:a7:6a:18:2b:54:11:be:8e:2f:53:a7:
         03:fc:90:fe:ea:b2:27:4a:b3:eb:ca:6e:a9:3a:95:b9:28:4f:
         af:58:95:dc:54:92:71:d5:0c:27:6a:e7:9c:21:43:ed:62:49:
         0a:d2:76:3c:5f:ea:e8:58:ed:ba:b8:63:d7:fe:0c:77:4f:90:
         fa:ca:5e:f6:cc:7f:01:2f:6a:14:6a:ba:49:fa:c1:da:22:94:
         37:8a:75:be:90:d3:63:b3:cf:82:60:76:9b:d4:3e:4a:77:ac:
         98:ca:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org