Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9VSCPYGAOzxp0irqz9PUNJtwvM.roa
File:                     s9VSCPYGAOzxp0irqz9PUNJtwvM.roa (raw, json)
Hash identifier:          TKMmyzw2FuxtRE1G/zuVc9PP2kmAYqV3wvjPNSE6QOA=
Subject key identifier:   B3:D5:52:08:F6:06:00:EC:F1:A7:48:AB:AB:3F:4F:50:D2:6D:C2:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0273
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9VSCPYGAOzxp0irqz9PUNJtwvM.roa
Signing time:             Sun 01 Oct 2023 01:32:28 +0000
ROA not before:           Sun 01 Oct 2023 01:32:28 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        113.145.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:28 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B3D55208F60600ECF1A748ABAB3F4F50D26DC2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:75:7c:81:ef:d7:42:1f:95:83:c1:4a:91:
                    4b:f1:a4:86:f9:84:7b:4a:08:c5:c5:11:72:b2:80:
                    e9:ba:7e:cd:44:ec:96:b9:80:ac:38:75:fd:6d:98:
                    53:56:69:fc:eb:8a:65:da:e9:2f:b2:71:ed:b1:88:
                    5e:14:ce:5e:b8:44:1a:ba:f3:b4:f2:48:dc:05:88:
                    87:b9:95:8d:92:34:74:9e:8c:14:95:47:11:e3:53:
                    cd:1d:8e:95:86:c6:e9:51:a8:c7:2d:d3:c3:b1:44:
                    b6:ba:5b:71:b7:c3:80:6a:d5:84:56:31:a4:9a:00:
                    a6:bd:4c:8d:6f:8c:32:30:a3:9b:7f:f3:63:c2:b8:
                    06:46:0a:b9:86:d9:c7:55:15:69:8b:58:5d:57:cd:
                    57:8a:a5:cc:18:2e:82:15:53:fb:92:3c:65:e7:51:
                    19:c8:1b:dc:10:3e:70:58:40:74:07:98:c9:86:9e:
                    62:dc:9f:8a:fc:af:54:6e:49:32:5c:05:6f:3c:19:
                    78:37:95:46:65:7a:32:60:b6:7d:fc:b8:63:57:02:
                    c5:e2:d4:39:bf:79:14:af:aa:2b:8f:8a:fb:79:ec:
                    8f:21:0f:9f:8a:b3:20:ec:70:12:cd:e6:9a:97:bc:
                    0d:42:40:98:9e:3a:1b:21:04:33:d5:2a:22:ee:c3:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D5:52:08:F6:06:00:EC:F1:A7:48:AB:AB:3F:4F:50:D2:6D:C2:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9VSCPYGAOzxp0irqz9PUNJtwvM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:d4:3f:02:49:fc:f2:cf:e8:a5:3f:cf:12:75:46:8f:9b:e1:
         0f:bf:93:a1:e6:46:e1:ce:1c:b5:97:76:7a:67:09:5b:57:38:
         74:65:c4:e9:a5:ea:2d:b5:d0:f6:d3:3f:7c:2f:c0:c7:6f:d2:
         45:56:60:6a:42:ca:a9:77:a3:78:9e:67:c1:af:ab:4d:f1:a8:
         2f:c3:82:06:dc:e2:a8:29:49:10:d4:1c:26:76:92:43:68:40:
         3f:8e:d8:90:c6:96:37:04:bb:e0:f9:5d:52:83:28:ef:36:92:
         eb:09:8b:20:57:cd:8f:1a:50:e4:6a:da:8d:ff:f6:85:1f:43:
         75:b3:2d:dc:9f:65:ed:c0:eb:86:7c:5c:ed:bd:ea:1b:de:c4:
         76:97:44:86:70:02:c1:49:64:d2:4e:40:72:65:85:fe:82:29:
         a8:38:e9:31:a7:9f:12:f4:27:67:90:c0:4c:8e:66:aa:e8:74:
         42:60:83:d6:11:a1:2d:51:4d:a9:2d:1a:e4:5e:e4:61:59:cd:
         5d:f5:10:88:b8:d3:07:41:6c:19:4d:50:21:a1:e1:1c:61:1a:
         cf:f9:8b:62:1c:a0:71:fd:f0:0e:84:3e:77:33:55:05:c0:f4:
         5c:fd:67:42:e7:3e:bf:76:16:07:f6:7d:15:ee:15:84:2f:60:
         e5:43:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:29 2024 by rpki-client on console-ams.rpki-client.org