Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/B8OREf7Ybso6FOXFHjaaIgCho8E.roa
File:                     B8OREf7Ybso6FOXFHjaaIgCho8E.roa (raw, json)
Hash identifier:          LQaaMepFZmbAbWWPZVFWiCo3lhjrrbyuIX//o7knMLs=
Subject key identifier:   07:C3:91:11:FE:D8:6E:CA:3A:14:E5:C5:1E:36:9A:22:00:A1:A3:C1
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       61
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/B8OREf7Ybso6FOXFHjaaIgCho8E.roa
Signing time:             Thu 24 Oct 2024 15:25:34 +0000
ROA not before:           Thu 24 Oct 2024 15:25:34 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     55888
IP address blocks:        153.254.87.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Oct 24 15:25:34 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=07C39111FED86ECA3A14E5C51E369A2200A1A3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:d7:4d:76:e0:6d:e4:80:6d:f1:df:4e:6d:
                    6c:42:df:11:61:8d:49:18:70:81:44:e7:81:a3:bc:
                    3a:af:0e:5a:74:75:80:c7:cc:1d:fa:45:83:49:ea:
                    95:3c:96:79:c6:09:f3:97:c5:6c:e1:c8:05:36:1c:
                    ca:3d:a0:0d:aa:e2:a1:08:18:fa:da:49:e3:55:22:
                    fc:59:ba:b3:5c:d8:00:6a:33:3a:65:fb:b4:54:26:
                    ea:e6:df:c3:5a:3f:b6:4c:d2:24:88:82:7e:6b:45:
                    65:6e:21:3c:53:17:04:0c:04:7e:94:c5:79:af:69:
                    02:77:0d:93:3d:da:bf:7e:1d:46:18:fd:bf:6c:f4:
                    3f:47:4c:aa:94:03:db:ad:c6:24:e9:1a:30:1e:ad:
                    91:7a:07:1e:64:83:c6:bf:55:ac:3b:fb:03:35:7d:
                    e0:dc:df:9c:34:4f:ed:c1:41:da:86:49:85:85:18:
                    e2:76:ee:dc:87:b8:10:a0:2b:e7:dc:40:b1:bb:c0:
                    df:6b:85:1b:bd:1b:e3:7b:95:44:5d:30:19:4e:9c:
                    2f:9f:40:70:a9:db:aa:88:df:12:9f:b6:68:0c:97:
                    05:f3:06:c3:96:aa:13:c9:2b:fd:ac:e2:d9:a6:42:
                    3d:25:d0:50:60:5a:f7:fa:79:5a:21:57:07:f8:fd:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C3:91:11:FE:D8:6E:CA:3A:14:E5:C5:1E:36:9A:22:00:A1:A3:C1
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/B8OREf7Ybso6FOXFHjaaIgCho8E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.87.0/26

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:46:33:e3:d1:76:ae:78:92:4c:0f:c4:1e:f1:88:e1:5d:
         c6:7d:8f:c9:2a:9c:63:bd:dc:6a:73:8f:90:f1:c6:59:d9:c9:
         e1:78:d5:6f:7a:97:bb:ba:33:7d:00:76:4c:cb:65:3c:31:39:
         59:f7:2c:db:b6:ef:dd:e7:38:2a:f8:8d:50:d4:2d:aa:5c:d5:
         86:db:81:01:dc:cd:30:09:da:b6:1f:d6:ad:9b:7a:e0:30:73:
         85:9b:18:7e:cd:2e:57:df:2d:7c:9b:71:95:f3:0e:c4:7d:65:
         13:36:b0:26:eb:ae:c1:be:c3:b5:d5:47:6e:2e:c5:9b:53:b6:
         b6:39:75:40:ca:b3:8d:31:ef:2d:ac:8d:5c:d9:41:c0:7b:be:
         28:27:db:48:59:05:ea:a9:08:53:6a:42:51:f6:9b:17:06:2c:
         4d:46:26:88:00:52:68:7c:45:f8:e0:dc:da:0e:90:7f:67:a8:
         1c:1d:13:9c:a6:eb:48:0a:32:a2:ce:01:b9:8a:85:c6:d3:d9:
         f9:de:c4:37:e2:80:a3:1b:dd:80:41:b3:6c:7a:85:16:d3:8e:
         a2:81:18:8e:c1:18:92:9d:73:e8:41:97:40:83:17:46:a2:36:
         ed:70:0c:fa:95:1b:e2:cd:5a:e1:e7:de:55:e0:2c:b1:48:f5:
         d4:d8:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:27 2025 by rpki-client