Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pcAexrrf1vlfmPWKEcMUSPT18I8.roa
File:                     pcAexrrf1vlfmPWKEcMUSPT18I8.roa (raw, json)
Hash identifier:          z01cVagQUFREBGjb5nL7xwNRVRE6Ykznnp1cqxSsg1w=
Subject key identifier:   A5:C0:1E:C6:BA:DF:D6:F9:5F:98:F5:8A:11:C3:14:48:F4:F5:F0:8F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       034C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pcAexrrf1vlfmPWKEcMUSPT18I8.roa
Signing time:             Sun 31 Mar 2024 01:42:41 +0000
ROA not before:           Sun 31 Mar 2024 01:42:41 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.132.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:41 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=A5C01EC6BADFD6F95F98F58A11C31448F4F5F08F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:3e:c7:01:c6:ba:f8:92:89:47:d6:a6:ba:
                    85:51:cd:93:dc:34:f0:bf:e4:54:16:11:3a:0c:ca:
                    14:23:53:c2:71:e5:f7:e0:13:a0:3d:84:93:0b:55:
                    73:7a:aa:c9:9a:2d:62:34:40:c7:ca:10:1e:73:b9:
                    0d:43:6a:5b:7b:57:00:3f:5d:dd:a6:8a:2e:ed:56:
                    1d:08:6a:01:b5:52:32:13:7b:9a:48:b9:e3:03:02:
                    1a:36:df:ca:64:51:f8:31:38:e8:37:04:9f:cc:63:
                    70:e0:92:8a:72:c4:9d:ea:f8:f2:87:ad:18:f7:0c:
                    61:dd:cd:21:c1:cc:e3:38:05:ce:04:3d:e5:ea:77:
                    1d:02:6e:0c:42:e5:28:53:5b:ab:ff:09:29:4c:84:
                    27:f3:c4:50:ca:dc:ec:31:e2:4d:71:5b:bd:ed:53:
                    0d:0a:51:af:0f:c4:78:e0:53:49:11:27:9e:d5:c4:
                    94:e5:fb:15:c5:1c:f3:c4:b2:ed:de:5c:92:c1:9f:
                    cf:7a:49:81:be:a1:f0:a8:27:76:42:15:6f:68:34:
                    ea:71:4d:b5:ff:0e:d7:1a:58:59:88:19:0d:25:56:
                    dd:25:5e:b9:e1:01:07:57:59:83:47:e9:9d:e8:64:
                    b5:a9:35:5a:65:cc:d8:08:42:6d:b7:0b:23:07:dd:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:1E:C6:BA:DF:D6:F9:5F:98:F5:8A:11:C3:14:48:F4:F5:F0:8F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pcAexrrf1vlfmPWKEcMUSPT18I8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:69:22:5f:12:72:eb:4a:6e:1d:64:72:b6:30:d2:c9:67:
         ab:06:79:01:fb:c2:ea:2a:4b:98:9e:42:b7:60:b8:f9:90:bb:
         9c:00:15:fb:cc:8b:0c:23:59:a3:9d:6b:32:5d:e3:c3:7c:ab:
         1b:d9:b0:6e:06:7c:01:e3:d0:ff:bb:59:35:68:9b:8e:77:dd:
         9f:00:e8:7a:a4:48:ca:8b:16:0b:a8:6d:bd:03:b3:b7:1c:3f:
         d3:26:4d:08:96:ee:b4:6d:96:30:1c:51:29:af:86:25:ec:2d:
         88:b2:1c:aa:6a:b5:1b:a6:a6:53:3b:04:bb:92:18:84:b6:d8:
         86:24:a5:87:a2:85:ca:cd:bd:70:67:8b:36:84:b3:a9:f4:70:
         37:de:74:66:98:61:0e:86:ab:ff:6c:d2:da:9b:cf:07:fb:90:
         43:e0:bf:86:cb:8b:f2:76:98:5a:11:4e:d1:21:3d:72:0f:e5:
         98:4e:5e:30:62:49:44:bb:04:20:24:22:00:43:8a:8b:e0:2b:
         87:6c:a2:9c:2d:9b:b2:ea:44:b2:b8:1b:60:32:f9:83:98:da:
         64:32:3e:0b:f4:f4:f9:0e:53:31:30:e5:ff:8e:a7:f9:9a:7c:
         05:31:db:ab:92:fb:41:e4:b7:af:3d:bf:05:71:0c:6c:23:1d:
         e4:a5:58:b6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDAzMzEw
MTQyNDFaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE1QzAxRUM2QkFERkQ2
Rjk1Rjk4RjU4QTExQzMxNDQ4RjRGNUYwOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC81j7HAca6+JKJR9amuoVRzZPcNPC/5FQWEToMyhQjU8Jx5ffg
E6A9hJMLVXN6qsmaLWI0QMfKEB5zuQ1Dalt7VwA/Xd2mii7tVh0IagG1UjITe5pI
ueMDAho238pkUfgxOOg3BJ/MY3DgkopyxJ3q+PKHrRj3DGHdzSHBzOM4Bc4EPeXq
dx0CbgxC5ShTW6v/CSlMhCfzxFDK3Owx4k1xW73tUw0KUa8PxHjgU0kRJ57VxJTl
+xXFHPPEsu3eXJLBn896SYG+ofCoJ3ZCFW9oNOpxTbX/DtcaWFmIGQ0lVt0lXrnh
AQdXWYNH6Z3oZLWpNVplzNgIQm23CyMH3cHHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUpcAexrrf1vlfmPWKEcMUSPT18I8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3BjQWV4cnJmMXZsZm1QV0tFY01VU1BUMThJOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXShEAwDQYJKoZIhvcNAQELBQADggEBAH/EaSJfEnLrSm4dZHK2MNLJZ6sG
eQH7wuoqS5ieQrdguPmQu5wAFfvMiwwjWaOdazJd48N8qxvZsG4GfAHj0P+7WTVo
m4533Z8A6HqkSMqLFguobb0Ds7ccP9MmTQiW7rRtljAcUSmvhiXsLYiyHKpqtRum
plM7BLuSGIS22IYkpYeihcrNvXBnizaEs6n0cDfedGaYYQ6Gq/9s0tqbzwf7kEPg
v4bLi/J2mFoRTtEhPXIP5ZhOXjBiSUS7BCAkIgBDiovgK4dsopwtm7LqRLK4G2Ay
+YOY2mQyPgv09PkOUzEw5f+Op/mafAUx26uS+0Hkt689vwVxDGwjHeSlWLY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org