Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sZccTmZyL23n0C5jSi00AExBXuQ.roa
File:                     sZccTmZyL23n0C5jSi00AExBXuQ.roa (raw, json)
Hash identifier:          LO6DL6j6lVJu75x5YXS6qKyjiRXUXtjX7KHEwBfHpBk=
Subject key identifier:   B1:97:1C:4E:66:72:2F:6D:E7:D0:2E:63:4A:2D:34:00:4C:41:5E:E4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0272
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sZccTmZyL23n0C5jSi00AExBXuQ.roa
Signing time:             Sun 01 Oct 2023 01:32:28 +0000
ROA not before:           Sun 01 Oct 2023 01:32:28 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        111.107.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:28 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B1971C4E66722F6DE7D02E634A2D34004C415EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:78:6d:3a:5e:1a:91:c5:57:87:e9:9f:e6:
                    96:1c:2e:96:e6:2c:a3:c6:e7:9c:2d:23:27:03:45:
                    e2:a9:41:61:92:74:4c:7d:b0:29:15:60:82:67:78:
                    c9:71:4b:cb:14:20:a7:79:c6:2a:fb:64:41:4c:cd:
                    68:8e:a0:c2:1a:c1:27:5b:d5:36:4c:27:10:d3:4d:
                    42:58:db:54:13:c3:65:c6:65:98:d0:d9:fc:33:ae:
                    70:46:e1:11:5f:71:38:73:d3:21:70:3d:45:b6:37:
                    3d:21:7e:5c:fb:0c:79:5d:35:57:4d:d6:bd:33:64:
                    4f:10:44:54:35:2b:21:6d:1d:26:4a:1f:87:1b:45:
                    8d:20:e7:ae:1a:96:54:29:2a:21:37:1a:64:d6:b6:
                    52:29:26:d9:79:35:9f:46:44:2a:74:1d:88:2c:aa:
                    4c:cd:dd:ea:24:2b:2a:e4:86:73:40:ac:72:e0:1c:
                    1c:b1:59:32:ae:12:25:7b:0a:01:be:3a:ca:95:47:
                    5d:26:e9:8d:5d:7e:a3:0b:89:47:2d:49:a7:fc:af:
                    6c:46:6a:0d:c8:47:9f:8e:20:f5:d4:e6:dd:ad:49:
                    f6:7c:ad:8e:d3:58:a9:cb:52:5c:1e:07:b1:2c:f9:
                    ae:b1:87:4b:d2:67:a7:47:11:de:0b:c9:dc:e7:15:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:97:1C:4E:66:72:2F:6D:E7:D0:2E:63:4A:2D:34:00:4C:41:5E:E4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sZccTmZyL23n0C5jSi00AExBXuQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:6d:b4:16:60:d2:4b:93:a4:5b:b6:9d:80:08:a4:e4:9b:
         7e:88:dd:34:ee:5f:69:93:fe:12:71:cc:a5:99:17:2a:6e:ab:
         7a:9f:e8:d0:05:05:e5:39:14:53:10:89:c3:28:12:5a:03:34:
         b3:7a:c3:db:f5:33:95:0a:40:71:af:17:a0:90:97:27:fa:73:
         f8:2f:57:35:a5:f1:c1:bf:ed:1d:44:71:82:65:7e:d3:21:f1:
         73:1a:a1:17:81:14:86:7d:30:14:1e:ca:28:86:9a:a5:4e:de:
         49:b8:38:22:90:a2:e8:ad:08:06:4d:0f:46:31:a6:a9:1c:7e:
         10:8a:f1:5e:07:53:7d:da:98:ac:c3:aa:45:f8:65:0d:0f:d5:
         ef:6d:ba:7f:c8:95:98:09:92:31:3d:2a:ae:fb:da:c6:fc:aa:
         92:fb:ba:e9:97:15:6c:3e:c8:e9:5a:c9:b1:9a:58:57:59:93:
         1e:2f:ce:c6:d8:ea:c3:4d:11:ed:01:3f:59:c4:84:88:78:21:
         aa:36:19:eb:b0:ba:31:35:73:84:f1:f5:cc:42:e8:77:b1:f9:
         63:3c:eb:31:32:ed:80:2c:4e:17:62:9e:5b:8f:29:bb:7a:87:
         41:49:26:ba:04:4e:02:8f:e3:d8:a5:ee:7f:4d:dd:16:d9:e2:
         d7:79:ba:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org