Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/a9NVreBtrSECiCOWVmQG4kRD4zw.roa
File:                     a9NVreBtrSECiCOWVmQG4kRD4zw.roa (raw, json)
Hash identifier:          BJkteXISonWsFdI5LYg5AJWGYeLWT8knl9DZjEA21To=
Subject key identifier:   6B:D3:55:AD:E0:6D:AD:21:02:88:23:96:56:64:06:E2:44:43:E3:3C
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       6A
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/a9NVreBtrSECiCOWVmQG4kRD4zw.roa
Signing time:             Thu 14 Nov 2024 15:58:09 +0000
ROA not before:           Thu 14 Nov 2024 15:58:09 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     23918
IP address blocks:        153.254.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 17:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 14 15:58:09 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=6BD355ADE06DAD2102882396566406E24443E33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:d8:07:ca:f6:82:f2:e3:61:65:08:d0:98:
                    69:0d:c5:32:31:35:12:cc:a9:a2:a9:6f:07:b1:c1:
                    35:b0:e0:59:6b:f6:e0:14:cc:5f:03:43:03:ea:8a:
                    39:10:32:58:53:79:36:b9:20:41:35:e8:5d:bc:12:
                    12:56:7d:19:b8:ea:d9:df:6e:d1:8a:69:1e:57:8c:
                    3a:a5:3f:ac:12:45:67:15:ea:d5:da:60:ad:49:0e:
                    36:77:3a:75:ed:be:f4:45:2d:33:36:90:5f:31:c8:
                    80:24:c6:41:71:82:40:ba:f3:3e:95:35:01:4b:5c:
                    64:69:0a:a6:96:78:96:52:21:bb:88:dd:ad:12:bb:
                    ab:e2:43:69:60:a0:3f:21:1c:7b:7f:1d:75:20:89:
                    3a:ec:be:6b:fc:22:fc:5f:a7:41:fa:0f:3a:d7:e9:
                    07:b8:e2:ad:cd:9d:b8:97:86:f2:f2:8e:e2:f7:6a:
                    73:88:cd:0a:c8:dd:94:6a:8c:3a:03:ee:1c:59:16:
                    ba:4c:8d:a5:42:14:c6:86:12:d6:57:0d:5f:a4:0e:
                    29:e4:a7:15:5f:dc:dc:99:8e:37:29:b1:bb:15:11:
                    49:18:6a:91:be:d4:70:4e:9d:4e:0b:71:6e:fb:5a:
                    80:1e:9c:43:ed:e9:13:a5:17:8b:3e:83:0f:d0:17:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D3:55:AD:E0:6D:AD:21:02:88:23:96:56:64:06:E2:44:43:E3:3C
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/a9NVreBtrSECiCOWVmQG4kRD4zw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:76:6f:10:e2:bf:e9:4c:21:97:d5:6a:21:56:67:d5:95:dd:
         b3:61:65:a4:5e:6a:27:5c:1a:a6:df:32:a6:52:4b:40:20:46:
         7b:87:80:35:8a:81:d3:6d:0f:0e:c8:70:43:a2:40:1e:60:58:
         8b:d9:f4:00:b0:aa:0c:e8:e8:80:21:23:80:e6:0b:12:ce:47:
         3f:62:7b:0e:ce:63:b4:8c:75:0e:e6:7d:72:50:93:58:b5:84:
         c2:cf:bf:92:a2:13:de:66:83:96:b3:9a:00:4b:7b:5b:86:d0:
         55:dc:62:cd:c7:22:22:dd:56:65:02:32:d2:3a:f7:16:c9:f4:
         7a:a8:3a:56:7d:ad:95:4f:12:2c:8a:45:a8:9c:da:32:63:1c:
         08:b3:91:ea:69:c4:6b:18:1d:c1:51:e9:c0:e4:de:8a:75:ac:
         a4:62:c7:e4:33:1b:4e:dc:30:f6:66:44:ac:bf:2c:31:9a:98:
         40:3d:b6:9c:77:c6:c5:eb:64:e6:ae:9d:75:a7:c5:ee:80:65:
         c9:42:cc:5f:f9:bc:24:f2:09:5b:bf:17:16:88:0a:49:eb:aa:
         3e:d2:64:cb:a3:e9:31:64:30:ed:88:39:03:9d:d4:0b:c6:6c:
         b8:aa:f8:49:12:39:b4:e0:e4:bc:c5:fd:63:fe:3a:15:d7:80:
         ca:66:4f:f4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2
RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTExNDE1
NTgwOVoXDTI1MTEwNzEwMjc1MVowMzExMC8GA1UEAxMoNkJEMzU1QURFMDZEQUQy
MTAyODgyMzk2NTY2NDA2RTI0NDQzRTMzQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcl2AfK9oLy42FlCNCYaQ3FMjE1EsypoqlvB7HBNbDgWWv24BTM
XwNDA+qKORAyWFN5NrkgQTXoXbwSElZ9Gbjq2d9u0YppHleMOqU/rBJFZxXq1dpg
rUkONnc6de2+9EUtMzaQXzHIgCTGQXGCQLrzPpU1AUtcZGkKppZ4llIhu4jdrRK7
q+JDaWCgPyEce38ddSCJOuy+a/wi/F+nQfoPOtfpB7jirc2duJeG8vKO4vdqc4jN
CsjdlGqMOgPuHFkWukyNpUIUxoYS1lcNX6QOKeSnFV/c3JmONymxuxURSRhqkb7U
cE6dTgtxbvtagB6cQ+3pE6UXiz6DD9AXFAUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRr01Wt4G2tIQKII5ZWZAbiREPjPDAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf
8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY
OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTI4L2E5TlZyZUJ0clNFQ2lDT1dWbVFHNGtSRDR6dy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACZ/l8wDQYJKoZIhvcNAQELBQADggEBAGN2bxDiv+lMIZfVaiFWZ9WV
3bNhZaReaidcGqbfMqZSS0AgRnuHgDWKgdNtDw7IcEOiQB5gWIvZ9ACwqgzo6IAh
I4DmCxLORz9iew7OY7SMdQ7mfXJQk1i1hMLPv5KiE95mg5azmgBLe1uG0FXcYs3H
IiLdVmUCMtI69xbJ9HqoOlZ9rZVPEiyKRaic2jJjHAizkeppxGsYHcFR6cDk3op1
rKRix+QzG07cMPZmRKy/LDGamEA9tpx3xsXrZOaunXWnxe6AZclCzF/5vCTyCVu/
FxaICknrqj7SZMuj6TFkMO2IOQOd1AvGbLiq+EkSObTg5LzF/WP+OhXXgMpmT/Q=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:44:46 2024 by rpki-client on console-ams.rpki-client.org