Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pegu-VWOkTghtRaHJtl6psOzqIQ.roa
File:                     pegu-VWOkTghtRaHJtl6psOzqIQ.roa (raw, json)
Hash identifier:          2eMgKWEWPfeUG4KianomlZnFSQz0V+qdSglJ1Iu+pRs=
Subject key identifier:   A5:E8:2E:F9:55:8E:91:38:21:B5:16:87:26:D9:7A:A6:C3:B3:A8:84
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       027B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pegu-VWOkTghtRaHJtl6psOzqIQ.roa
Signing time:             Sun 01 Oct 2023 01:32:32 +0000
ROA not before:           Sun 01 Oct 2023 01:32:32 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        125.53.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:32 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A5E82EF9558E913821B5168726D97AA6C3B3A884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:c8:92:4f:a1:96:c9:bb:ad:a5:e4:89:2f:
                    d9:28:3b:6f:91:05:da:99:70:6c:b0:5c:21:da:15:
                    42:78:05:c1:f9:8c:d8:90:9d:a3:ec:2d:2e:87:4d:
                    a6:1d:c5:14:c9:2e:aa:1f:f9:11:3f:2e:50:10:48:
                    95:42:e0:a2:eb:10:ab:b7:47:de:f3:ea:ac:5c:b6:
                    e2:69:c3:59:9a:98:1d:6b:da:e6:12:a6:f6:d0:0a:
                    dc:d2:26:3f:e6:46:64:73:42:cb:74:d6:5e:22:42:
                    24:4d:cd:85:47:0b:5d:e8:76:6e:c2:90:d5:f6:73:
                    9c:3b:56:c0:55:7d:6b:c5:62:b2:0f:e4:cf:c7:02:
                    5a:f5:b7:e3:54:de:04:9a:c9:5a:7a:40:01:f0:5e:
                    23:38:9c:7b:bb:3b:d9:97:a0:0c:06:07:3a:09:3e:
                    a3:05:59:0d:39:eb:5f:b0:56:bb:6c:c0:8e:7f:ca:
                    d2:d4:6f:1e:70:08:ed:24:f9:fd:df:ff:9a:ea:80:
                    6b:54:4e:8c:8b:a3:c6:83:ab:b7:c7:40:bf:f4:08:
                    22:4e:e4:b2:ef:36:af:24:9d:0e:f0:38:f9:a8:a0:
                    a0:be:88:d6:61:2d:90:62:ab:c8:7b:d7:05:67:c5:
                    4e:2d:cd:46:d2:92:ad:60:a7:b1:bc:77:ad:24:1b:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E8:2E:F9:55:8E:91:38:21:B5:16:87:26:D9:7A:A6:C3:B3:A8:84
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pegu-VWOkTghtRaHJtl6psOzqIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:b2:ad:25:09:15:8b:47:d8:72:68:e8:f9:8a:89:f4:50:be:
         96:01:0e:ef:5b:4a:57:81:94:df:c7:15:c7:0a:25:6b:28:63:
         6a:47:de:bb:91:ac:87:a8:74:1c:a6:e5:8a:13:bd:71:87:7c:
         4c:e8:81:83:91:ea:67:15:86:39:9a:85:f4:ef:89:ba:18:9d:
         9d:0b:40:76:72:08:59:a8:a9:08:6c:dd:4a:6e:12:96:89:1b:
         de:8e:92:57:8f:91:c2:28:fb:8a:ec:82:df:10:03:33:8c:cf:
         9a:1e:f3:be:14:d7:ca:b5:8d:63:d5:f8:02:ea:f7:99:7e:4d:
         84:5d:39:19:b4:7a:91:2f:79:d5:19:61:c9:95:7e:ef:5d:d6:
         f7:12:3a:51:2c:4b:c2:45:3b:a5:52:7e:39:7a:29:8a:b9:a5:
         ca:6d:46:0b:f4:14:03:da:a1:22:eb:10:9d:30:6d:19:db:b3:
         7b:71:4d:0a:50:a0:ae:a3:04:8d:16:4a:55:be:32:21:ef:05:
         81:7d:d0:7f:3e:61:fd:dc:c3:40:6d:43:ea:15:e1:6c:18:5f:
         35:5b:02:0d:22:71:e8:76:d5:d8:f6:b3:d4:1b:51:7e:f2:3e:
         09:ba:e1:6a:a6:19:ff:6c:d0:d6:72:1e:2c:a1:a6:3c:ae:1f:
         9d:1b:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org