Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/roErK5olq8VVFyG-Q_qKJzbaHkE.roa
File:                     roErK5olq8VVFyG-Q_qKJzbaHkE.roa (raw, json)
Hash identifier:          GD+wiDz3wze+VvVQRx1q4HAGnqZ8IpmMqtDYD3u1KdA=
Subject key identifier:   AE:81:2B:2B:9A:25:AB:C5:55:17:21:BE:43:FA:8A:27:36:DA:1E:41
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0365
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/roErK5olq8VVFyG-Q_qKJzbaHkE.roa
Signing time:             Sun 31 Mar 2024 01:44:35 +0000
ROA not before:           Sun 31 Mar 2024 01:44:35 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:44:35 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=AE812B2B9A25ABC5551721BE43FA8A2736DA1E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:e4:dc:48:25:97:3d:8c:24:14:82:9a:2f:
                    db:25:8d:3f:8c:be:09:3b:5b:fe:a0:e7:52:c3:dd:
                    a1:c7:c4:8f:f6:80:cb:ad:00:8a:27:5c:ee:d5:22:
                    63:38:74:f5:c2:fd:6d:cc:b6:d5:86:01:4a:24:46:
                    75:a0:d3:eb:af:cc:23:3a:6e:85:be:31:01:4e:89:
                    53:fb:f0:fb:95:e7:56:ed:3f:c4:dd:40:d1:6d:20:
                    3b:46:e7:01:eb:ea:c9:f7:66:aa:1b:30:0f:02:ef:
                    5e:9d:72:66:ec:25:c2:eb:f5:cd:e8:95:b5:e9:51:
                    49:a2:c5:b3:f8:a1:46:96:74:56:f3:3d:4c:51:80:
                    ee:7a:52:3f:8b:e2:56:62:3c:1b:af:c7:f8:f5:ed:
                    9d:80:10:3c:06:b6:59:31:01:0d:18:ea:49:dd:a6:
                    f7:ed:86:de:0c:9a:a0:b4:b3:9a:ca:6f:0e:26:3a:
                    5b:68:55:50:6f:4a:0d:7c:14:a3:6e:47:c4:5f:ad:
                    95:8b:5e:18:97:e6:58:62:98:57:c1:1d:eb:00:a7:
                    46:0a:63:75:a0:29:00:cd:29:85:a3:75:1f:d4:9c:
                    8a:11:4c:92:91:cf:80:ce:6e:b2:89:dd:8b:7f:44:
                    4e:44:ad:18:f0:df:17:22:4e:6d:5a:5a:b9:7a:5b:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:81:2B:2B:9A:25:AB:C5:55:17:21:BE:43:FA:8A:27:36:DA:1E:41
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/roErK5olq8VVFyG-Q_qKJzbaHkE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:84:af:69:bd:a2:90:31:7c:74:fd:7e:79:5c:09:1f:ea:19:
         bb:23:69:9b:91:0f:9c:ef:81:bf:fd:0e:08:b6:6d:00:56:b3:
         db:0a:35:dc:d1:ba:47:86:62:ca:4b:45:28:54:f5:b7:0d:16:
         d1:a4:f4:53:c7:8b:c8:1d:31:98:58:0f:44:c4:4f:07:7b:39:
         32:64:ae:c3:5a:86:66:41:c0:e6:be:ec:d2:03:a0:f8:b9:58:
         58:86:42:dc:c2:40:5c:1a:ed:ae:8e:28:e4:5e:af:d5:75:b5:
         8c:ab:8d:9e:2c:75:cf:d8:83:65:bf:69:73:60:a1:86:16:9e:
         78:d9:95:3c:6c:8e:60:46:fc:a8:8a:17:d3:14:be:2f:f1:f2:
         0f:66:87:8e:d4:9a:fd:05:14:64:c7:d2:27:fa:6a:2c:74:7c:
         e6:cc:84:09:35:b0:14:29:e4:72:8b:b7:25:dc:2c:24:f9:46:
         51:f2:de:01:d7:b7:e6:22:d2:92:0f:6f:07:41:08:9e:7c:ba:
         cc:d8:d6:c1:4e:38:80:30:fb:6e:32:49:f8:6f:6c:d1:ee:14:
         68:81:d0:dc:c2:0f:a4:5a:f2:9e:f5:3e:f7:38:1f:44:20:21:
         bb:21:97:6a:96:a7:89:d4:68:ee:f4:e7:1e:78:79:ef:a1:08:
         ef:45:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:28 2024 by rpki-client on console-ams.rpki-client.org