Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ll9B8ETOUAZSVo6OZoJeDuPrtz8.roa
File:                     Ll9B8ETOUAZSVo6OZoJeDuPrtz8.roa (raw, json)
Hash identifier:          mA+OLmt5LXMA9La+2sEcqTLNgp90tuXetumDrc8VZmo=
Subject key identifier:   2E:5F:41:F0:44:CE:50:06:52:56:8E:8E:66:82:5E:0E:E3:EB:B7:3F
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       69
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ll9B8ETOUAZSVo6OZoJeDuPrtz8.roa
Signing time:             Thu 14 Nov 2024 15:58:08 +0000
ROA not before:           Thu 14 Nov 2024 15:58:08 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     23918
IP address blocks:        153.254.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 14 15:58:08 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=2E5F41F044CE500652568E8E66825E0EE3EBB73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:54:92:e9:e3:45:00:2d:3a:05:30:18:70:
                    ab:c1:46:3b:27:21:ee:2f:05:f5:d4:5a:2f:b2:86:
                    dc:47:d4:d3:f7:30:2a:be:37:e5:0c:c3:e0:05:34:
                    4f:bc:81:4a:46:84:8c:d1:23:1b:9b:f8:56:3f:79:
                    b4:ab:33:cf:d0:23:ca:fc:1e:e8:b4:47:e7:8c:92:
                    96:86:a1:b5:70:90:9a:a9:ec:f1:f0:8e:81:de:77:
                    d7:05:cd:46:8a:92:82:50:41:b9:6b:e9:fa:cb:80:
                    85:f5:b0:3c:57:20:f9:a6:bb:38:da:3d:09:0a:9d:
                    e6:c6:0e:a7:89:9f:b9:90:ab:30:88:d6:b5:fc:a5:
                    dd:5e:dd:c6:46:9f:c6:57:82:3e:68:41:02:14:52:
                    be:9e:a3:0a:ce:66:a5:c3:13:69:90:b3:8b:bf:82:
                    f4:e2:6f:d5:9b:21:32:76:a5:ab:d4:03:82:f4:5f:
                    6f:84:85:aa:9d:df:c2:f0:62:f0:ff:af:52:38:d6:
                    c6:7c:ff:bf:e2:8e:fb:b5:71:6e:b9:b3:cf:e2:78:
                    b1:58:73:1d:2f:ae:61:6d:1b:07:cf:51:fd:6a:02:
                    8d:c8:83:33:85:f4:39:12:b7:42:9c:8f:23:66:b8:
                    e8:0a:ec:c7:81:a4:ab:ce:b5:c5:e9:45:5b:3b:3a:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5F:41:F0:44:CE:50:06:52:56:8E:8E:66:82:5E:0E:E3:EB:B7:3F
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Ll9B8ETOUAZSVo6OZoJeDuPrtz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:74:4c:d4:c8:34:40:05:78:8e:5e:8c:13:26:fc:04:fa:
         02:80:31:30:af:31:1b:85:07:b0:a5:21:82:a6:d2:49:da:98:
         c1:70:e7:63:9a:95:d9:77:77:1b:ec:65:5c:fe:23:8c:1e:64:
         3a:2b:4f:25:5b:02:3c:d6:1c:19:93:1d:54:e0:ab:6b:62:c0:
         13:d5:91:ae:44:0c:4d:44:bf:f5:87:7d:21:61:cd:cb:15:72:
         44:63:0f:18:bf:4d:b7:5f:21:ac:08:42:f6:56:ff:7b:38:14:
         4b:2d:f6:a2:53:29:26:9f:0e:87:1f:ec:88:59:31:6e:52:d2:
         28:86:f1:f3:19:73:64:3f:f6:b6:c1:0a:aa:7e:32:3c:60:2d:
         fc:12:1b:95:43:83:5e:50:24:13:e8:d2:bf:51:ff:71:0c:d2:
         f3:af:99:c8:e8:e2:e5:f6:48:34:96:fa:45:c4:dd:e5:1e:5d:
         44:8b:01:f1:73:e5:66:c1:1b:75:9b:25:cb:c6:33:fb:a4:ab:
         8a:62:cc:c6:b5:c2:1a:5c:f6:2e:88:fd:e5:dd:ae:cc:ff:02:
         0a:3a:03:39:71:1c:ec:ed:9c:5d:f5:9b:84:3c:3d:af:26:6f:
         9a:2a:36:98:5c:7e:4f:f8:fb:97:bb:66:57:bc:56:6d:7b:86:
         29:59:a0:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:47:49 2024 by rpki-client on console-fra.rpki-client.org