Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/w-3bjXcmTdLog28HFGVdd0Ol6nQ.roa
File:                     w-3bjXcmTdLog28HFGVdd0Ol6nQ.roa (raw, json)
Hash identifier:          1k8IOqeSFmzPr/9sVEs5svqM9BNY5NktETMwHMMduZY=
Subject key identifier:   C3:ED:DB:8D:77:26:4D:D2:E8:83:6F:07:14:65:5D:77:43:A5:EA:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0344
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/w-3bjXcmTdLog28HFGVdd0Ol6nQ.roa
Signing time:             Sun 31 Mar 2024 01:42:39 +0000
ROA not before:           Sun 31 Mar 2024 01:42:39 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.164.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:39 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=C3EDDB8D77264DD2E8836F0714655D7743A5EA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:6d:ab:3d:f3:5f:3a:ec:55:69:e0:54:10:
                    20:ce:bc:c9:3e:bc:08:fd:c9:8a:94:83:de:37:ee:
                    78:2c:dd:7a:e0:7d:17:4f:43:b5:c7:45:f2:af:30:
                    7e:ac:f0:ed:20:e3:15:ab:b9:c3:07:94:79:73:7c:
                    b2:7e:4c:c5:1e:37:7f:f4:e3:78:b9:73:24:27:58:
                    25:65:c2:03:db:e6:b6:7a:ec:e7:b8:ff:e3:b6:e8:
                    ca:9b:92:b5:a4:aa:ac:eb:b4:a5:92:33:31:1c:47:
                    3e:9f:b4:bc:af:a7:a0:34:c0:e5:1e:3b:27:9c:5d:
                    79:93:35:c7:ae:d4:3e:da:e8:42:31:8f:43:0e:e9:
                    b5:45:76:61:3e:1b:06:19:fa:5b:64:01:b8:f1:72:
                    13:6c:b6:b8:78:fd:df:55:bf:42:85:0a:b0:b9:40:
                    47:e9:d3:60:79:3a:94:0b:40:4e:db:c7:78:5b:64:
                    5a:a4:c1:d7:b4:33:ea:89:21:1b:2e:cd:1f:67:60:
                    a1:8e:44:f3:9d:1d:a3:7c:91:e4:71:35:54:30:29:
                    57:51:5d:10:34:6a:db:d8:75:04:04:9d:25:45:59:
                    ef:fa:e4:b1:e2:50:8f:89:ce:f0:2a:69:9a:0b:88:
                    88:06:41:c4:35:75:ea:f4:a2:b8:db:5a:c2:48:95:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:DB:8D:77:26:4D:D2:E8:83:6F:07:14:65:5D:77:43:A5:EA:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/w-3bjXcmTdLog28HFGVdd0Ol6nQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:c1:36:74:5e:c6:0d:21:65:4a:b7:1b:fd:69:a4:2b:8e:
         db:ed:75:7f:eb:df:71:48:1c:99:0c:32:e9:35:2b:49:0b:b8:
         59:0b:99:6a:e0:66:12:8b:82:8f:b6:e2:81:16:10:8a:89:39:
         34:af:08:b9:b7:86:5f:93:f9:b7:0a:a4:07:2e:76:26:a7:f5:
         7a:fb:08:98:de:41:11:03:3a:06:62:f1:31:e1:41:7b:11:93:
         ef:f6:63:ef:45:82:b8:1a:a8:46:4d:da:19:50:35:ec:a7:3b:
         77:42:24:b8:0d:8c:88:40:cb:79:71:27:58:7e:54:0f:f6:1e:
         c2:1f:15:45:e1:9f:4e:2b:1e:25:04:6b:ca:af:c6:ef:c9:43:
         94:ac:fc:b3:0e:b5:7d:94:45:1f:c4:01:79:0c:a6:2e:e1:f9:
         e8:e4:19:35:8a:71:67:5a:d0:bb:08:23:2d:69:14:a3:a5:f9:
         a1:ca:99:fd:9e:c6:5f:ed:fa:2c:91:76:f3:86:10:b5:94:a4:
         47:3c:99:11:85:86:f7:16:e2:7b:da:34:6f:94:ae:a8:8e:85:
         32:92:89:33:ee:c9:4b:dc:70:d4:7a:bd:cb:8f:f6:4d:b1:50:
         f5:2c:e9:0b:89:80:36:8d:34:0d:f1:4a:e0:da:69:b8:af:47:
         36:76:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org