Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/z1OtcALVZpw9K2DAUQ-tiF4O3oA.roa
File:                     z1OtcALVZpw9K2DAUQ-tiF4O3oA.roa (raw, json)
Hash identifier:          1XENkZxtH1vNhxqQYJhijYUkg0+vaH7Qungr8Pv6uBM=
Subject key identifier:   CF:53:AD:70:02:D5:66:9C:3D:2B:60:C0:51:0F:AD:88:5E:0E:DE:80
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       03A0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/z1OtcALVZpw9K2DAUQ-tiF4O3oA.roa
Signing time:             Sat 31 Aug 2024 01:34:42 +0000
ROA not before:           Sat 31 Aug 2024 01:34:42 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        182.248.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 31 01:34:42 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=CF53AD7002D5669C3D2B60C0510FAD885E0EDE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:16:f0:8e:99:2b:a4:19:cc:72:8a:66:ae:
                    bb:d1:8c:69:5b:93:f5:b5:0d:b0:d1:5e:f4:5b:21:
                    d6:ec:08:ff:b0:50:0f:d0:d4:8a:38:b6:54:c8:33:
                    9a:23:c2:a8:c1:7d:db:79:c2:0b:1e:24:4f:dd:65:
                    00:b1:9d:28:28:75:d9:ea:90:f4:74:10:a5:ba:13:
                    3e:1f:8f:3b:96:42:d5:af:a1:4c:7e:6a:e4:0a:df:
                    d2:3d:0e:4a:57:73:8e:5b:f0:66:cf:6f:30:a6:9b:
                    f6:25:1a:03:98:f7:0d:7c:27:ed:e8:10:63:21:e4:
                    10:04:2d:2c:5c:d8:bd:37:a9:48:f2:bc:9e:07:05:
                    37:b9:e8:1b:6a:45:9e:5e:8f:e9:0a:31:fc:a2:a2:
                    31:90:01:3e:7f:62:c8:9b:fe:a6:39:72:ba:78:dd:
                    e8:3b:a6:a4:1d:72:1b:5d:89:76:2d:c1:35:7f:46:
                    82:b7:a2:27:f2:ff:2a:0e:67:19:12:05:fe:fc:95:
                    e6:4c:b9:f3:5a:39:2b:cc:21:da:4b:57:85:60:7f:
                    14:ce:49:6f:64:08:9c:a5:73:93:87:73:f0:7d:ef:
                    bb:66:c9:ed:d4:80:b1:cd:69:be:99:4f:5e:40:ff:
                    c3:7f:9c:53:83:14:0d:d9:2b:4a:b2:fc:25:c0:4b:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:AD:70:02:D5:66:9C:3D:2B:60:C0:51:0F:AD:88:5E:0E:DE:80
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/z1OtcALVZpw9K2DAUQ-tiF4O3oA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5b:83:94:32:a9:b1:f6:c4:48:11:f9:d5:f9:0f:67:d9:11:ab:
         d5:dc:b1:2e:44:e6:f4:de:b7:b8:c1:53:09:25:3e:cf:f1:0d:
         50:0a:76:28:bc:23:4a:09:18:74:1b:8d:43:94:76:a8:ea:cf:
         de:81:94:6b:5e:83:be:ee:ee:44:3a:f5:dd:ea:3a:16:33:49:
         f5:60:b2:59:b8:58:29:a1:67:15:d6:aa:f8:fb:60:ca:7d:56:
         69:f4:84:ee:6b:c4:af:48:be:4a:cc:ff:7a:9f:d7:d6:10:f0:
         4f:39:7e:9c:c2:f9:e9:a1:a7:d2:c0:4f:02:f2:81:66:9c:11:
         21:4e:f7:69:2a:6d:b9:c0:c3:fa:23:9b:45:9c:67:9c:49:b8:
         00:56:4b:58:a3:7f:e6:f2:e9:07:2a:fc:03:a1:51:74:40:48:
         fc:97:fc:41:af:97:16:59:37:27:ed:85:0b:d4:e9:f8:6c:2d:
         73:eb:41:0e:57:38:6e:57:29:b9:ff:22:e6:cf:73:90:23:b4:
         b5:0d:1c:e5:5e:0b:b4:5b:29:3e:92:95:12:e4:d4:da:37:52:
         ef:4d:a7:5b:f4:fe:7e:1e:d4:8e:d5:e1:93:49:5c:b2:18:af:
         f0:30:67:e6:fd:53:77:01:b7:aa:30:c2:83:01:2c:dc:ef:cd:
         2b:31:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org