Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/uw0jaZQSJ6vbZcXSvNXGI4ON9vw.roa
File:                     uw0jaZQSJ6vbZcXSvNXGI4ON9vw.roa (raw, json)
Hash identifier:          p7U7PnlY2s3ci/mV1D6cjanRQK9uaBU02k3gDdSvB2c=
Subject key identifier:   BB:0D:23:69:94:12:27:AB:DB:65:C5:D2:BC:D5:C6:23:83:8D:F6:FC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02EC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uw0jaZQSJ6vbZcXSvNXGI4ON9vw.roa
Signing time:             Sun 31 Mar 2024 01:35:49 +0000
ROA not before:           Sun 31 Mar 2024 01:35:49 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        175.132.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:49 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=BB0D2369941227ABDB65C5D2BCD5C623838DF6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:27:a4:16:d3:07:53:60:e1:26:a7:64:36:
                    71:6b:90:13:cd:4e:d8:ab:7e:17:2a:8f:b4:da:dc:
                    be:60:e7:da:27:bd:db:46:76:72:0e:a5:97:1a:d8:
                    20:4d:42:52:3c:1d:30:30:02:7f:e7:4a:47:0c:3d:
                    c3:b9:fc:f9:0b:90:7f:1c:17:d0:ce:e3:e8:fe:dd:
                    e4:b8:0e:f6:31:ae:f9:c7:51:85:a7:aa:86:01:ec:
                    23:6b:ea:83:f5:06:a4:0e:e0:64:3d:fa:e8:6e:98:
                    df:68:d9:91:3f:09:3e:ca:04:d0:86:0d:e8:b0:5a:
                    74:fb:5d:6f:ba:19:7a:7a:53:cc:b7:32:2a:00:c3:
                    61:bb:1e:15:3c:fb:e3:51:86:c2:dc:1e:9c:78:eb:
                    87:8c:2c:9e:8d:36:83:ba:8d:2c:58:16:09:e2:dd:
                    e0:80:60:b3:de:f8:c2:52:de:5a:7e:4e:b5:22:e7:
                    6a:d2:b3:14:d1:b5:d1:50:ec:b3:86:78:fb:cf:91:
                    6d:95:39:3f:cb:ba:f3:08:8c:64:2f:18:42:c5:29:
                    56:48:5e:f7:ba:02:92:d9:4d:c3:df:bc:08:88:cc:
                    d1:59:90:1c:af:f7:50:af:ca:96:48:94:8b:1a:ac:
                    1d:18:8d:f5:6b:b5:94:1d:63:b1:c4:1c:39:f2:14:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0D:23:69:94:12:27:AB:DB:65:C5:D2:BC:D5:C6:23:83:8D:F6:FC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uw0jaZQSJ6vbZcXSvNXGI4ON9vw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:88:20:f1:51:24:fe:01:ef:dc:fb:25:65:be:6e:20:ee:
         5b:8c:54:36:2c:61:d3:df:54:70:02:1b:1d:8d:d3:73:1a:53:
         6a:dc:33:e9:fa:15:7e:d3:69:9d:e5:3c:4a:83:b2:4a:1b:40:
         23:5b:48:ea:92:8f:08:97:87:c7:0b:5d:22:d8:f2:90:bc:95:
         8d:c2:b6:7c:be:ad:0a:b9:52:17:68:b4:c1:ed:ed:b8:ea:11:
         df:6c:41:94:1d:de:a6:dc:56:9c:e9:32:5b:8a:35:2f:b9:bb:
         67:cc:90:b3:d3:26:74:a6:de:2b:eb:b7:85:e9:b8:c3:5c:e3:
         89:39:b4:58:12:77:6a:03:cf:21:69:64:78:d0:97:6a:0e:7c:
         08:92:d6:70:3c:81:ec:89:3e:85:6a:b6:28:79:29:d1:2e:69:
         a1:72:7b:f7:ce:a1:50:56:9a:01:6b:17:ce:d5:d6:1a:fd:76:
         14:5b:5f:61:c1:ce:d7:90:ea:15:80:d1:a6:c5:81:5f:08:fc:
         4f:3d:95:01:0c:4e:74:f9:07:fa:e8:03:dd:e9:a5:56:f7:f5:
         80:6c:4a:ab:c8:b5:2e:55:45:1f:54:e4:ac:18:79:8d:9a:79:
         a8:83:33:42:91:51:44:93:32:d0:89:88:dd:04:f4:d8:02:3b:
         eb:b2:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org