Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vSnF3oMzmbxN2AuWE0E089DKkGU.roa
File:                     vSnF3oMzmbxN2AuWE0E089DKkGU.roa (raw, json)
Hash identifier:          D9yIrd9dq/X789pbS4h3eF4LmQGsflcKtpAShqlHbQg=
Subject key identifier:   BD:29:C5:DE:83:33:99:BC:4D:D8:0B:96:13:41:34:F3:D0:CA:90:65
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0383
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vSnF3oMzmbxN2AuWE0E089DKkGU.roa
Signing time:             Sat 31 Aug 2024 01:29:48 +0000
ROA not before:           Sat 31 Aug 2024 01:29:48 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        27.88.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:29:48 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=BD29C5DE833399BC4DD80B96134134F3D0CA9065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:ab:6b:9d:c6:13:76:52:4d:dc:bd:30:67:
                    bd:26:4a:7b:22:87:34:c6:c8:b0:a8:a9:6f:50:b8:
                    f0:26:bf:ff:26:f1:bf:e8:ec:c6:87:1c:a1:a1:5f:
                    cb:aa:70:51:6c:ae:df:08:e6:f9:75:e8:37:fb:27:
                    7a:61:ed:58:bd:22:bd:81:a9:cc:c6:26:82:41:42:
                    c5:44:a4:f3:52:f2:a5:fb:c4:af:74:66:52:e0:af:
                    a1:31:d5:fe:cd:fb:32:8e:43:03:f9:08:7a:f1:09:
                    3b:e8:0a:41:61:a8:f9:37:03:e5:28:e9:e2:a0:37:
                    af:6e:ac:24:48:59:ad:00:0a:55:38:79:8e:bb:5a:
                    e5:83:df:6c:ea:bf:92:3a:b1:94:eb:a9:8e:c6:8a:
                    a7:fa:c6:22:38:fe:7b:95:af:37:36:88:ce:98:f3:
                    0e:80:02:df:70:bd:11:41:16:e8:22:a0:14:b1:84:
                    55:5d:2a:3c:41:41:99:3f:51:98:8e:db:99:06:56:
                    ad:b6:ce:12:59:49:78:1e:fe:f0:e5:9c:08:a1:fc:
                    29:33:19:3b:af:57:66:38:a3:2a:57:6c:3e:ea:11:
                    f6:7f:e1:3d:a4:c0:f2:e6:8d:ca:9d:9a:6c:f6:01:
                    0a:d3:73:d5:e5:09:fc:35:8a:5f:42:2a:14:9b:4f:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:C5:DE:83:33:99:BC:4D:D8:0B:96:13:41:34:F3:D0:CA:90:65
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vSnF3oMzmbxN2AuWE0E089DKkGU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:17:98:ac:0f:2a:43:bc:c2:a2:66:43:48:83:8f:f7:73:
         a9:6c:fd:58:ad:7e:00:fd:cc:5a:69:87:82:33:e7:69:a4:83:
         d0:40:e3:c0:8c:b9:d8:fb:d5:b1:05:12:83:c7:61:53:af:d4:
         fc:92:9f:31:78:51:bc:df:9b:a5:a6:67:8b:09:d5:fa:cc:58:
         ce:38:f1:e1:1b:e3:e5:9e:5b:1c:0d:b2:1e:78:16:8f:91:17:
         b9:3b:6f:0f:24:2e:e5:b3:99:d3:6f:08:b7:1d:3b:34:5a:46:
         f0:d7:e6:fa:ac:4c:ae:b3:4e:0e:21:1c:d7:0d:bb:1e:e4:d9:
         f5:8c:0c:7c:01:56:30:20:5d:84:1e:ee:1f:7b:1c:26:cd:87:
         81:cd:aa:a6:90:0e:db:6a:f1:32:e5:3b:1c:2a:78:fa:5a:c3:
         9c:a5:e8:7b:b5:df:ef:d7:58:eb:18:18:9a:f8:f0:98:a2:e5:
         ad:b7:fa:c4:74:b9:9e:0c:85:e8:75:bf:b3:5b:ed:56:f6:dd:
         a2:2e:7d:c5:83:7a:ba:98:ba:5d:24:4f:85:1e:83:bd:44:ce:
         86:ce:e6:02:ae:9a:c8:e9:db:7c:ad:46:6b:b1:f3:69:43:b7:
         cf:af:37:f3:c2:54:e3:51:c4:52:7b:47:77:80:df:79:e1:77:
         d7:5f:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org