Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4bEFbhus0l8ucm4sNiD6fEPFAU.roa
File:                     v4bEFbhus0l8ucm4sNiD6fEPFAU.roa (raw, json)
Hash identifier:          2fCYqgvxw24ee/ESGIoqY/Jky4BtspNBRy1EizgBxYM=
Subject key identifier:   BF:86:C4:15:B8:6E:B3:49:7C:B9:C9:B8:B0:D8:83:E9:F1:0F:14:05
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02F0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4bEFbhus0l8ucm4sNiD6fEPFAU.roa
Signing time:             Sun 31 Mar 2024 01:35:50 +0000
ROA not before:           Sun 31 Mar 2024 01:35:50 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        175.134.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:35:50 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=BF86C415B86EB3497CB9C9B8B0D883E9F10F1405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:b8:99:31:39:cf:36:ed:05:4c:52:7a:b7:
                    8c:cb:62:9d:41:f6:f7:b1:bf:23:88:2d:c1:cc:a4:
                    8e:08:e2:f0:86:29:f7:51:f0:f0:12:b3:b4:e5:cb:
                    8f:e8:10:59:81:36:d1:8c:96:68:9f:1b:0c:c4:f1:
                    d4:74:bb:68:b1:14:5d:58:2a:2e:9f:cd:7e:ea:d4:
                    b6:45:76:2a:35:41:68:19:13:c4:86:27:18:ea:b0:
                    9e:33:7c:20:14:ad:fa:b2:80:50:3e:34:d1:b3:10:
                    40:27:b3:de:09:3e:a5:3a:be:6a:86:18:47:24:65:
                    b1:66:35:13:47:87:51:ff:80:9d:37:a9:40:c1:d8:
                    db:63:4b:cb:10:89:1a:f7:f6:78:de:cd:76:5c:80:
                    73:03:92:98:88:d8:3e:3c:b4:f9:f6:3e:ff:87:df:
                    f7:f8:38:24:08:d1:10:02:23:e5:04:97:38:8b:cf:
                    34:d7:b8:96:f4:c8:11:88:d2:0b:aa:87:22:b3:49:
                    5c:fe:ac:8b:48:dc:c4:ac:fc:1f:c1:a9:20:10:6d:
                    7c:38:b9:08:71:5b:46:42:c0:b9:97:e0:cc:a7:eb:
                    2f:31:b8:f0:4b:db:34:a9:5f:ef:03:78:ff:a5:50:
                    c7:c9:f0:ea:38:23:c4:46:2b:57:df:f3:9b:43:9a:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:86:C4:15:B8:6E:B3:49:7C:B9:C9:B8:B0:D8:83:E9:F1:0F:14:05
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4bEFbhus0l8ucm4sNiD6fEPFAU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:55:bc:4d:da:96:0f:dc:8f:ee:e3:07:13:c4:97:0f:a7:
         00:99:db:df:13:a3:25:e4:30:52:09:ea:5f:08:81:2f:05:e2:
         9d:a8:ea:c1:52:ed:ab:5b:60:28:7b:97:bd:74:ef:f7:80:ab:
         f8:62:96:c4:bc:9e:ce:d6:7c:61:3b:a9:a6:03:12:b4:46:61:
         82:d7:d6:22:24:07:1e:f8:7c:96:ec:d0:60:c8:33:df:7b:5c:
         7c:88:4c:18:e2:7d:44:1a:f0:ab:ff:b2:2c:ab:73:84:df:09:
         89:65:26:a0:9b:75:bf:f0:bc:24:cb:7e:d3:64:bc:d3:f1:6c:
         4d:27:72:00:bb:ff:4b:82:5a:5a:66:ce:f1:6d:4f:d3:7c:86:
         3e:35:2c:23:ce:0e:2d:c2:9d:72:eb:87:63:ac:ed:e0:95:e3:
         9d:7a:42:3a:cb:a7:0d:8c:17:66:fd:ea:d3:37:f5:87:01:d5:
         41:fe:47:c3:35:60:b4:ff:ad:15:24:a7:5d:3b:4c:4e:b1:4d:
         db:0c:83:2f:b9:1b:1f:9c:3a:72:44:ae:8d:5f:d0:1a:7b:c8:
         36:4e:f8:ac:33:26:d3:0c:a4:23:1b:73:89:59:28:69:a4:54:
         61:b7:90:0d:bb:85:1c:52:30:95:cb:58:ca:f7:1c:d8:2f:ba:
         3b:a7:3c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:26 2024 by rpki-client on console-ams.rpki-client.org