Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xv3wd8M3P3yd6y8K_ZrLLuaukrE.roa
File:                     xv3wd8M3P3yd6y8K_ZrLLuaukrE.roa (raw, json)
Hash identifier:          CDxj0KTHLEMfXFE2q/J47EYZPZ71675aIY9VcGOurMk=
Subject key identifier:   C6:FD:F0:77:C3:37:3F:7C:9D:EB:2F:0A:FD:9A:CB:2E:E6:AE:92:B1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02BE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xv3wd8M3P3yd6y8K_ZrLLuaukrE.roa
Signing time:             Sun 31 Mar 2024 01:33:18 +0000
ROA not before:           Sun 31 Mar 2024 01:33:18 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        118.157.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:18 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=C6FDF077C3373F7C9DEB2F0AFD9ACB2EE6AE92B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:ba:b3:c0:2d:3c:a7:50:9e:e0:25:e6:6a:
                    a4:eb:86:1c:f8:ae:60:1e:ed:b6:8b:6f:c1:ab:a8:
                    92:8e:48:74:db:a6:97:90:00:8b:98:d0:7b:18:8c:
                    b7:1e:51:89:6f:01:92:6e:af:59:25:78:8f:a2:94:
                    26:e2:e5:c3:cb:73:0e:5d:92:5d:db:35:2b:b5:f7:
                    8c:aa:62:6d:16:98:90:e6:7c:69:84:91:0f:d2:ea:
                    e0:bb:4c:da:74:3f:5b:09:23:e4:ec:08:f9:3e:f4:
                    c4:f9:3c:60:12:6c:04:34:e3:3f:21:48:6a:b8:0d:
                    16:b2:07:59:83:4f:59:b2:2a:41:b2:2c:b2:25:61:
                    f8:ae:53:82:a8:e3:b1:fa:04:74:a9:01:e0:67:b2:
                    54:9e:7f:fd:f5:8f:b0:f7:ea:2d:88:a9:5d:1b:04:
                    2e:4a:a4:34:eb:ad:ce:56:7e:99:df:25:33:3d:09:
                    c9:95:1d:4b:c7:92:36:fe:b4:fb:c1:e0:d5:0e:4c:
                    37:9b:fe:9d:f1:ae:96:1b:62:68:59:37:58:52:bd:
                    ea:16:75:39:19:49:c3:9d:48:34:9c:1d:cf:17:e0:
                    60:6a:0e:38:77:2b:1c:70:2e:40:11:06:ca:4d:bc:
                    42:6a:db:ba:94:b7:ac:17:c7:55:f1:ea:10:ea:88:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FD:F0:77:C3:37:3F:7C:9D:EB:2F:0A:FD:9A:CB:2E:E6:AE:92:B1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xv3wd8M3P3yd6y8K_ZrLLuaukrE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:14:7a:2a:74:be:a8:45:7a:ed:03:14:ab:1d:c2:a4:22:
         16:24:52:f1:56:7f:6f:02:ea:b3:80:e4:20:03:4a:fd:d1:03:
         b8:1d:e9:04:f8:a9:20:fc:87:bc:6d:cf:84:a5:2f:04:37:37:
         c5:fa:fe:96:b9:2d:9f:ad:ce:65:82:3a:9c:4c:d7:ee:c8:b4:
         7d:20:ff:03:d8:2d:3c:27:3a:78:fc:92:11:af:e5:f9:d6:ec:
         58:f0:d2:44:6b:66:2b:18:1e:e7:90:9e:b3:5e:17:a0:56:09:
         92:03:db:79:bf:75:51:cd:5e:f4:45:43:70:16:39:9b:99:ef:
         5b:13:ad:95:a3:e9:d2:b2:a5:86:22:66:3a:7a:a7:73:5f:eb:
         1b:1b:51:35:ac:fb:93:d4:73:7c:ca:c1:13:8a:c2:bd:e8:6b:
         16:1e:10:ea:bf:76:3a:fd:1d:d4:60:eb:0d:78:de:de:9d:04:
         75:be:ca:e5:ca:bc:03:af:51:8a:c4:06:f1:00:e7:0e:a6:26:
         ef:a8:a0:0e:9b:59:03:cc:83:6c:38:dd:f5:6b:5e:26:e7:08:
         51:3f:2f:8a:99:b4:08:db:b2:0e:08:eb:89:7c:fe:82:5a:11:
         5f:1c:28:e8:20:74:e5:f1:44:d1:9a:f0:f0:36:df:71:37:3e:
         98:3b:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org