Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LFP-OapdqpiqALIuLhPnRUlYqm4.roa
File:                     LFP-OapdqpiqALIuLhPnRUlYqm4.roa (raw, json)
Hash identifier:          yPNT2HP1z/ugsHz/ABgGegO8coPjpGzPdU5nEZ1hf+4=
Subject key identifier:   2C:53:FE:39:AA:5D:AA:98:AA:00:B2:2E:2E:13:E7:45:49:58:AA:6E
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       C0
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LFP-OapdqpiqALIuLhPnRUlYqm4.roa
Signing time:             Thu 05 Dec 2024 16:47:14 +0000
ROA not before:           Thu 05 Dec 2024 16:47:14 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2914
IP address blocks:        120.88.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  5 16:47:14 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=2C53FE39AA5DAA98AA00B22E2E13E7454958AA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:2d:32:9a:01:fa:71:16:3f:7d:55:fc:18:
                    8d:57:a7:47:63:ba:0b:6f:df:91:35:c3:34:33:3b:
                    27:f7:c9:74:7e:5f:00:09:62:3b:67:43:3b:1c:7a:
                    ab:c1:fc:27:be:f3:14:e4:fa:69:ba:c7:ef:03:26:
                    b9:28:21:30:5c:d0:82:bd:bf:99:40:ea:42:18:18:
                    a3:a8:e5:5e:5e:ba:b9:1d:a7:d8:07:b1:1a:29:95:
                    29:18:c7:f9:13:1f:75:8f:25:1c:a6:ec:29:27:67:
                    a6:c2:ad:0b:56:21:65:25:dd:97:65:83:a9:c7:d9:
                    1d:e6:71:f9:47:49:98:87:60:93:df:3e:f8:72:80:
                    b6:40:0b:3d:5c:91:88:36:dd:3b:3c:03:e0:48:01:
                    c8:de:2c:43:1e:ca:40:16:d3:4c:bb:05:3c:d9:e3:
                    73:cb:05:e1:95:53:26:9e:88:db:c0:ec:c4:6a:ba:
                    0e:b3:ec:bc:e9:be:61:40:ac:e1:07:39:99:08:ce:
                    1e:1f:95:d1:9f:e4:4f:61:ba:27:14:a1:94:23:84:
                    a0:fe:1b:d2:a9:02:ec:21:46:1c:ff:e6:2d:79:48:
                    2f:4e:78:6a:86:22:a8:0c:46:d9:cf:b2:d8:84:3d:
                    2b:9d:fa:b1:63:e6:6e:83:d6:d4:de:ca:02:01:5c:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:53:FE:39:AA:5D:AA:98:AA:00:B2:2E:2E:13:E7:45:49:58:AA:6E
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LFP-OapdqpiqALIuLhPnRUlYqm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.88.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:20:be:bd:54:a1:1a:48:2e:29:11:1d:87:b7:fe:24:ac:
         eb:f3:c9:5c:07:c0:cd:3b:3f:e4:d9:2e:3c:e9:8d:43:6e:1a:
         31:d7:58:83:5c:f3:7b:74:d1:41:db:e2:c8:9e:3d:78:63:24:
         ee:62:55:27:d3:10:39:b2:35:58:50:43:0c:84:8b:aa:06:f0:
         25:06:5e:af:33:d5:0f:0b:a2:af:39:b3:86:09:1c:8b:2a:49:
         97:70:75:93:b2:fa:99:dd:5a:a4:e5:8d:8c:e0:4d:d9:ba:60:
         ab:26:25:bd:60:68:62:14:4b:67:70:39:bd:79:26:25:e8:2b:
         02:6c:c8:b7:0e:a8:56:a0:ab:2f:78:9d:d4:73:53:f5:14:cf:
         d5:86:a3:8a:75:46:10:90:d5:53:9b:34:fd:a4:ae:05:9b:34:
         00:36:47:0e:8b:60:6f:40:8c:3c:ef:df:65:af:26:06:17:32:
         52:2b:aa:35:b7:37:42:8c:47:67:1b:a6:4f:8a:36:b2:1e:c7:
         aa:2f:6e:f9:34:45:62:b2:71:26:43:29:58:c7:57:44:9b:49:
         6f:d0:19:43:99:c7:aa:4b:19:55:29:a9:18:b6:b7:e3:90:99:
         30:ca:8e:ea:cd:65:a9:25:fc:b8:45:54:46:f2:90:31:e2:82:
         eb:ee:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:36 2025 by rpki-client