Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/uaKaaqVbf2a2VGmNp4ogrCK0p9o.roa
File:                     uaKaaqVbf2a2VGmNp4ogrCK0p9o.roa (raw, json)
Hash identifier:          oPvySD6GPFPwyfgI73K1ycIqX4K7VOunaYrBZBQYuNE=
Subject key identifier:   B9:A2:9A:6A:A5:5B:7F:66:B6:54:69:8D:A7:8A:20:AC:22:B4:A7:DA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0280
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uaKaaqVbf2a2VGmNp4ogrCK0p9o.roa
Signing time:             Sun 01 Oct 2023 01:32:35 +0000
ROA not before:           Sun 01 Oct 2023 01:32:35 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        182.248.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct  1 01:32:35 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B9A29A6AA55B7F66B654698DA78A20AC22B4A7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:16:82:26:65:02:5a:ea:1e:e2:b5:fe:95:50:
                    47:38:3f:77:5f:fa:e6:54:4f:59:a0:5c:7f:eb:e7:
                    49:44:76:81:7d:e1:72:33:ed:8a:a9:49:12:4c:96:
                    76:2d:fe:93:1c:d8:e1:dd:19:0a:4f:6f:8a:04:81:
                    e7:a1:ed:43:28:e4:43:4e:88:c4:43:52:b5:31:c0:
                    fc:94:57:ce:85:bf:77:ba:5b:73:e8:b2:d0:96:e4:
                    ef:6b:25:28:54:d1:24:a8:83:82:7d:00:5a:df:24:
                    1a:7c:e4:3e:b4:ab:f1:73:3a:b1:a5:93:80:28:55:
                    f1:e0:61:8c:01:08:b0:61:51:eb:c9:ee:83:04:1a:
                    89:bd:32:57:cf:83:ce:3c:a4:8a:69:1a:74:5d:36:
                    fe:35:cd:fb:a3:5b:44:2c:35:f8:6c:ae:28:96:32:
                    bf:d8:83:28:b9:5e:e6:14:20:6d:62:22:9c:09:ca:
                    ab:53:76:7a:b1:80:62:57:30:63:99:9c:06:35:98:
                    2a:9a:46:95:14:d8:65:56:0c:b1:65:3f:01:ac:84:
                    02:fb:99:f8:44:b5:ed:02:3e:c6:a1:31:dd:5e:3a:
                    8b:db:e7:8a:ec:9f:b5:e5:33:21:f7:ae:0c:67:ad:
                    92:27:38:4b:8f:42:13:c3:a0:fa:36:21:6a:5a:ef:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:9A:6A:A5:5B:7F:66:B6:54:69:8D:A7:8A:20:AC:22:B4:A7:DA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uaKaaqVbf2a2VGmNp4ogrCK0p9o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:f7:7f:0f:08:d5:89:29:6b:a6:6a:f3:7e:53:32:b6:3a:
         7d:6b:43:39:37:d0:04:dd:3a:a3:bc:61:de:14:55:d1:ac:8f:
         22:53:49:d9:aa:20:d5:1b:d9:70:28:6b:7d:67:c3:ee:bf:80:
         9f:23:80:2d:16:7b:87:f6:e3:3f:d8:c4:33:e8:6f:c2:ae:5e:
         6a:14:6d:08:28:fe:69:17:79:1c:d1:5a:b1:c9:3e:3a:95:a4:
         19:bd:74:8a:f8:3b:76:b7:5e:c4:91:11:15:84:83:0c:82:71:
         1f:89:d6:f9:51:5e:b4:f0:15:64:12:37:06:b6:3c:d7:ba:8e:
         a6:ba:c5:0a:7a:61:5e:0e:85:04:e7:85:03:13:20:b8:2e:d5:
         a3:9b:3e:a6:c9:b3:e0:1b:25:de:8e:b6:fa:e4:50:0b:d9:5c:
         09:2c:39:84:ca:12:10:61:0a:7a:f4:5a:45:d9:27:d9:4f:bb:
         82:df:98:12:91:9a:c1:c9:ad:57:bc:2d:24:7d:ba:22:de:73:
         03:7d:a4:ad:08:ba:4e:06:74:74:62:30:e2:6c:8a:f9:22:9d:
         fb:a6:d9:15:89:71:f2:1d:1c:6b:d1:56:90:6f:9e:35:c4:e9:
         15:76:6d:3b:55:25:ca:a3:bc:68:e1:67:cb:5b:d3:ff:d3:ec:
         0a:6d:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:30 2024 by rpki-client on console-ams.rpki-client.org