Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zOpw-CbUirPzUZtRRpWqn4DCkec.roa
File:                     zOpw-CbUirPzUZtRRpWqn4DCkec.roa (raw, json)
Hash identifier:          3Hq/Foz+Jik1AqA+u6osYDCG1MIXAPED9hJ/jSQRcCc=
Subject key identifier:   CC:EA:70:F8:26:D4:8A:B3:F3:51:9B:51:46:95:AA:9F:80:C2:91:E7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0330
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zOpw-CbUirPzUZtRRpWqn4DCkec.roa
Signing time:             Sun 31 Mar 2024 01:40:42 +0000
ROA not before:           Sun 31 Mar 2024 01:40:42 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        36.8.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:40:42 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=CCEA70F826D48AB3F3519B514695AA9F80C291E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:86:c9:f8:38:03:1f:c3:8f:a4:86:2a:50:
                    63:b1:6f:a7:66:8b:f8:ef:24:f5:a6:d3:2b:7b:19:
                    00:bc:10:76:e0:52:6f:97:e0:ae:8c:e8:54:3c:61:
                    dc:79:13:88:7a:d2:a8:0e:8d:b9:fb:22:0d:ca:3e:
                    e0:25:5c:56:c0:31:28:95:7d:ca:50:f0:03:8a:32:
                    7c:8d:58:04:d0:4e:be:d6:91:56:33:bd:48:86:9b:
                    7e:26:0d:47:b4:8e:d9:b9:a2:eb:7d:3b:44:e0:d9:
                    36:0e:05:95:ca:a5:f6:e2:66:d9:27:19:c6:8e:0e:
                    04:6a:51:7d:a2:2c:9d:42:2d:35:68:57:b5:89:26:
                    2e:07:9e:87:4d:a2:97:c5:a2:10:ae:63:11:3c:55:
                    fd:a5:fa:3d:9c:1c:ed:b6:7c:30:03:1c:12:7c:42:
                    b5:ea:22:90:17:27:64:84:f2:75:d1:31:be:22:4d:
                    d2:51:ef:75:23:d3:e8:8c:8e:70:ab:12:4f:13:52:
                    ed:9d:b4:cf:f1:d5:b8:dc:da:8a:e0:e1:5b:57:97:
                    d7:c0:7e:fe:37:59:0a:32:80:eb:9c:32:09:ba:c5:
                    0b:13:bd:d5:f7:bc:e6:a8:19:f9:0e:ee:de:ce:5e:
                    82:29:c6:e1:f8:5e:5e:70:67:11:9a:6a:3f:ad:cb:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:70:F8:26:D4:8A:B3:F3:51:9B:51:46:95:AA:9F:80:C2:91:E7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zOpw-CbUirPzUZtRRpWqn4DCkec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.8.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         9a:08:6f:1a:c5:26:03:29:2d:87:1e:8d:68:fa:d0:8a:d0:9d:
         5e:97:f2:c9:03:b3:05:8a:d8:b2:f3:68:34:c6:c1:8a:d4:00:
         f0:d1:c3:04:f6:47:c5:0c:1d:36:2b:95:1f:f9:e8:a9:41:19:
         34:91:34:cc:19:9b:f6:ef:67:02:bb:d0:4e:2c:ee:2e:b4:4a:
         6b:4c:dc:52:93:e1:32:40:9d:6c:85:fe:21:7b:2b:fd:15:3f:
         01:72:49:9e:92:bf:25:dd:cb:c7:c5:55:a5:09:b7:f6:b4:2a:
         d5:c9:2e:e7:60:1a:75:65:36:94:5e:44:2f:44:72:1c:1f:82:
         93:63:db:23:47:42:e8:99:db:10:af:99:2b:dd:c8:4a:3a:0f:
         3e:fe:b1:3f:ba:77:1d:bc:12:1c:08:dd:d4:c0:a0:86:89:22:
         98:41:27:47:f0:f1:16:76:91:a9:05:70:6d:0a:a1:47:07:a6:
         45:a0:63:70:cb:89:64:25:55:39:31:78:f5:bd:f0:91:94:06:
         7b:74:10:d1:e5:05:eb:ca:d8:be:8c:a8:57:ce:17:e3:36:ee:
         db:54:80:2f:ca:51:db:cb:ae:e8:18:79:3a:9f:b4:72:f7:9c:
         43:2b:09:80:75:4b:d8:30:50:c2:70:4c:f0:12:7e:b1:0d:1a:
         ab:57:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:13 2024 by rpki-client on console-fra.rpki-client.org