Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rbyKofUgJyERlHD9_aInWQxbTFk.roa
File:                     rbyKofUgJyERlHD9_aInWQxbTFk.roa (raw, json)
Hash identifier:          NY0iASJ8IlPuPOhWhQ6VYD1WTmstVwkxUsckdwTu/uk=
Subject key identifier:   AD:BC:8A:A1:F5:20:27:21:11:94:70:FD:FD:A2:27:59:0C:5B:4C:59
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0343
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rbyKofUgJyERlHD9_aInWQxbTFk.roa
Signing time:             Sun 31 Mar 2024 01:42:38 +0000
ROA not before:           Sun 31 Mar 2024 01:42:38 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:38 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=ADBC8AA1F5202721119470FDFDA227590C5B4C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:d9:4b:75:a5:fd:c7:09:92:3f:b5:6e:f0:
                    4b:d9:5b:92:8d:cc:83:12:d0:7c:07:f3:2f:ac:ac:
                    e9:07:86:e5:7d:44:74:32:7a:ca:ae:ab:53:80:f6:
                    e9:27:34:a1:a2:8b:bb:09:00:89:15:bf:ef:3e:0f:
                    3e:4f:16:19:aa:d1:e8:68:0f:67:c1:ed:d1:c1:da:
                    a2:8a:c4:cc:3c:fb:69:ee:0c:06:54:05:de:15:c5:
                    3b:31:58:9e:e0:30:43:e1:2a:6a:57:4d:43:10:4d:
                    ac:3b:fe:b8:a9:24:7a:c6:a3:ce:b0:ae:6c:82:a2:
                    a0:4d:d3:53:5c:5b:f6:af:9e:08:59:6f:52:97:4c:
                    f1:2f:d4:c3:04:fb:4d:07:f8:93:a4:cb:76:65:e3:
                    f4:d6:5a:74:00:d2:04:e8:f5:84:d4:9a:57:d3:6e:
                    77:4f:9e:0c:38:17:b5:92:30:47:ad:40:93:7c:7e:
                    2d:a9:50:04:2f:0b:b9:ed:0c:1f:2b:01:9b:0e:80:
                    ff:ae:58:3c:1a:e3:6d:29:9d:fa:82:45:f4:db:4a:
                    bc:e2:0f:1f:b8:f6:8e:41:6c:1f:3b:3b:7e:4d:47:
                    a2:02:ec:77:e8:93:55:d0:21:99:e9:ae:fc:c2:e2:
                    9d:f8:bd:75:63:23:ca:6c:6f:28:e3:2b:ad:16:fa:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:8A:A1:F5:20:27:21:11:94:70:FD:FD:A2:27:59:0C:5B:4C:59
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rbyKofUgJyERlHD9_aInWQxbTFk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6c:ca:d8:ac:28:40:8c:40:69:28:20:b8:6e:34:57:70:df:94:
         d3:18:ee:12:0b:ca:cd:e7:e8:ee:08:08:39:eb:8e:88:53:1d:
         2e:32:1d:3d:5c:99:de:5b:5d:ca:35:d7:bc:0a:ac:e9:4c:ea:
         e3:d3:c2:dd:be:80:cc:ba:a2:0d:9e:e6:ab:3a:6a:5a:1a:50:
         14:27:7e:44:15:cd:86:92:01:e6:38:f4:e6:78:d6:f7:f0:72:
         73:5d:40:b5:83:24:7d:d8:da:88:17:8d:5c:e8:f6:17:0f:bc:
         95:dd:56:9a:1c:b1:2b:75:db:ab:75:81:77:35:a2:e2:c9:89:
         f4:90:d3:fe:3f:06:4c:bc:26:c5:a6:fa:e9:5f:22:a0:5a:9f:
         e5:6c:cb:7e:8f:8a:2a:ba:cc:75:02:53:0d:2e:0c:9b:ae:6f:
         7d:fc:68:a3:34:7d:30:ba:32:cc:14:f0:3f:fb:4c:6a:48:d2:
         8c:76:42:60:37:26:24:cf:4d:5e:33:6d:34:76:fe:68:4e:98:
         e9:97:b6:70:dc:20:73:4a:51:9e:c5:29:6e:6f:76:0f:20:23:
         fd:1e:7e:fc:f3:92:06:8b:30:7d:a0:ab:36:cb:01:8b:ef:36:
         df:9d:86:a4:f3:ca:e0:89:25:9f:bb:d6:a0:11:df:4f:b7:9c:
         e0:ae:26:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org