Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/-OciBuFJcOmQE71oPeVrdcqYDrM.roa
File:                     -OciBuFJcOmQE71oPeVrdcqYDrM.roa (raw, json)
Hash identifier:          Ij4lVVRZNmECyhhyns8DwuCTtvKijKXhT4GszHGqFfA=
Subject key identifier:   F8:E7:22:06:E1:49:70:E9:90:13:BD:68:3D:E5:6B:75:CA:98:0E:B3
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       76
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/-OciBuFJcOmQE71oPeVrdcqYDrM.roa
Signing time:             Fri 15 Nov 2024 15:32:34 +0000
ROA not before:           Fri 15 Nov 2024 15:32:34 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2914
IP address blocks:        153.254.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 15 15:32:34 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=F8E72206E14970E99013BD683DE56B75CA980EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:eb:d3:cd:f1:ec:95:9e:82:0f:70:84:31:a6:
                    79:c1:ca:2c:17:ce:bc:81:9e:f4:d8:5c:a3:23:39:
                    6b:2b:60:f1:ea:b2:66:2a:e2:a8:23:6e:2d:ad:fa:
                    fd:fa:66:b3:8f:0e:d1:b3:87:43:1c:0e:e3:87:ba:
                    9c:12:05:8a:5a:14:bd:15:70:87:25:70:7c:6d:29:
                    e9:e7:41:20:aa:f5:d1:f0:ae:66:18:bc:01:6a:ca:
                    4c:e9:9d:5e:0f:c9:30:49:aa:be:2f:d1:98:d0:4c:
                    76:7c:07:e6:61:1d:02:6e:4d:8d:fd:df:f3:37:6a:
                    2d:27:f9:7a:b7:31:7f:15:ec:f6:73:51:b3:46:70:
                    f4:00:14:aa:74:04:4c:25:c2:61:59:78:4d:e0:34:
                    62:f9:54:31:08:a1:65:17:bd:26:cc:32:e2:c8:fa:
                    f6:25:e6:1e:3c:f4:8d:30:79:ff:7e:f7:33:a4:d8:
                    0e:29:bd:82:c2:e5:2d:35:35:00:77:c4:72:cb:81:
                    f5:28:28:c8:32:f3:1e:13:c7:eb:55:97:9a:bf:fe:
                    40:2e:63:ec:57:b5:7f:54:6e:a9:e5:ca:a5:68:16:
                    3b:74:5d:59:45:a2:17:46:67:9d:ce:97:aa:f5:91:
                    dd:4c:45:95:a0:2c:8b:8a:0f:63:4d:1b:54:ba:41:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E7:22:06:E1:49:70:E9:90:13:BD:68:3D:E5:6B:75:CA:98:0E:B3
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/-OciBuFJcOmQE71oPeVrdcqYDrM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:14:27:56:4f:3f:c0:03:17:72:8d:d4:b4:b1:88:21:37:94:
         aa:70:83:60:57:41:4a:98:f8:36:43:d2:77:04:98:31:a0:b9:
         74:a5:dc:15:e4:9b:74:7d:ba:3b:8c:f2:89:99:c7:a3:c8:79:
         b4:0e:37:df:c4:8f:66:86:75:46:7b:d8:d4:34:0b:e0:c9:2e:
         73:09:b2:92:ce:bb:d1:a0:03:c8:d1:bf:67:f2:24:67:13:cf:
         70:e3:85:91:dc:da:e6:77:f7:2c:a1:03:5c:64:c2:f2:4a:c2:
         73:57:78:21:2f:0b:55:99:be:1b:02:2c:c9:54:1f:43:c6:e4:
         1d:09:69:e5:99:b3:40:c3:36:0f:d7:41:26:44:17:f8:8b:26:
         3b:40:0c:f2:03:40:0f:af:e1:5d:5e:9c:96:b1:0b:f3:b7:de:
         5c:3a:ec:e2:6b:32:4b:d5:3a:f0:65:d2:c5:76:5c:9a:34:a7:
         08:0f:bc:a8:2d:05:6d:e7:db:8e:40:36:ae:bf:62:ec:e4:1b:
         a9:ec:27:6e:2a:4a:f7:8a:cc:c6:12:45:af:e3:57:e1:55:e4:
         cf:5f:32:49:b1:a1:e8:57:26:df:fb:c7:b7:95:6f:a2:ff:89:
         f4:40:d8:80:03:28:68:bc:10:50:cb:b7:5f:9d:6f:71:0e:db:
         bd:41:1b:d8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2
RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTExNTE1
MzIzNFoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoRjhFNzIyMDZFMTQ5NzBF
OTkwMTNCRDY4M0RFNTZCNzVDQTk4MEVCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAP3r083x7JWegg9whDGmecHKLBfOvIGe9NhcoyM5aytg8eqyZiri
qCNuLa36/fpms48O0bOHQxwO44e6nBIFiloUvRVwhyVwfG0p6edBIKr10fCuZhi8
AWrKTOmdXg/JMEmqvi/RmNBMdnwH5mEdAm5Njf3f8zdqLSf5ercxfxXs9nNRs0Zw
9AAUqnQETCXCYVl4TeA0YvlUMQihZRe9Jswy4sj69iXmHjz0jTB5/373M6TYDim9
gsLlLTU1AHfEcsuB9SgoyDLzHhPH61WXmr/+QC5j7Fe1f1RuqeXKpWgWO3RdWUWi
F0Znnc6XqvWR3UxFlaAsi4oPY00bVLpB54UCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT45yIG4Ulw6ZATvWg95Wt1ypgOszAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf
8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY
OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTI4Ly1PY2lCdUZKY09tUUU3MW9QZVZyZGNxWURyTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAKZ/lAwDQYJKoZIhvcNAQELBQADggEBALQUJ1ZPP8ADF3KN1LSxiCE3
lKpwg2BXQUqY+DZD0ncEmDGguXSl3BXkm3R9ujuM8omZx6PIebQON9/Ej2aGdUZ7
2NQ0C+DJLnMJspLOu9GgA8jRv2fyJGcTz3DjhZHc2uZ39yyhA1xkwvJKwnNXeCEv
C1WZvhsCLMlUH0PG5B0JaeWZs0DDNg/XQSZEF/iLJjtADPIDQA+v4V1enJaxC/O3
3lw67OJrMkvVOvBl0sV2XJo0pwgPvKgtBW3n245ANq6/YuzkG6nsJ24qSveKzMYS
Ra/jV+FV5M9fMkmxoehXJt/7x7eVb6L/ifRA2IADKGi8EFDLt1+db3EO271BG9g=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:07 2024 by rpki-client on console-fra.rpki-client.org