Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa
File:                     j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa (raw, json)
Hash identifier:          nCpTpd7jSt8+7mcnctp8sLij6ALI2Q9DEpdKRh+eeIo=
Subject key identifier:   8F:BB:D8:64:BA:3E:48:66:63:C8:24:93:56:C6:7F:0F:D1:E3:E2:5B
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       97
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa
Signing time:             Wed 04 Dec 2024 19:14:55 +0000
ROA not before:           Wed 04 Dec 2024 19:14:55 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     137922
IP address blocks:        124.40.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:14:55 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=8FBBD864BA3E486663C8249356C67F0FD1E3E25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:04:d3:e6:6e:ad:e5:38:2c:80:76:78:42:
                    f7:c5:95:24:86:ed:32:32:59:3e:e7:50:ce:2c:b2:
                    4f:7c:c6:8b:de:a2:f3:45:fe:ae:9b:df:c8:79:d5:
                    0e:f5:bd:e1:63:08:fe:ed:11:52:fd:73:b6:d5:85:
                    96:e6:d7:7e:53:e7:a1:47:bd:c5:23:1a:81:50:a8:
                    b4:f4:e0:4a:c4:7c:aa:bc:1e:b9:b6:fb:fc:c9:52:
                    ef:4b:fb:3e:24:7a:77:e2:22:50:40:5b:75:de:50:
                    a0:bb:5a:fd:4b:9f:b5:cc:e8:e5:a1:c2:8a:1c:06:
                    72:9b:ee:88:a2:33:8a:fe:df:94:7f:dd:d2:45:b4:
                    b6:e8:01:99:0a:66:12:33:de:74:c9:b0:94:fb:87:
                    ba:24:06:3d:d0:75:9b:8d:ba:bf:bc:83:ec:ed:03:
                    c1:f9:6b:8a:bd:85:7f:eb:1a:e6:66:20:74:c6:50:
                    5a:42:6b:6f:6f:b3:75:1a:62:b6:d4:3c:bc:e4:a6:
                    dc:2c:21:7e:de:f6:69:70:bc:6a:23:a7:0e:3d:9f:
                    18:55:d5:54:50:08:fe:6d:56:5d:f1:b9:8d:97:ba:
                    30:bf:7c:28:19:70:4d:6a:6c:b8:f2:65:61:1f:db:
                    5a:35:76:59:51:38:ce:b7:2f:db:d4:08:b6:82:bf:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BB:D8:64:BA:3E:48:66:63:C8:24:93:56:C6:7F:0F:D1:E3:E2:5B
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:38:94:24:bf:f4:e9:6f:b3:40:9d:d5:1b:fa:62:6a:03:10:
         ba:37:b6:c3:55:05:08:13:59:e2:c3:d4:69:94:47:22:ba:97:
         3e:75:12:ee:33:26:8b:60:9f:2e:d0:a8:a6:97:a6:37:16:c3:
         ad:4d:3f:c7:37:54:f5:f7:9c:9c:54:e7:3a:8d:2d:69:71:8d:
         f8:31:81:26:bd:6c:02:2d:f0:e2:35:ab:5e:03:8f:db:1f:e7:
         e9:20:12:10:71:fd:14:7f:46:10:b8:28:b4:38:9f:21:55:83:
         1a:00:26:19:e1:3f:e9:db:44:b4:b5:4a:28:f3:62:91:9a:4c:
         1f:a6:99:32:38:73:37:9d:8e:0b:d5:38:53:d4:88:62:47:93:
         66:4d:b2:12:0e:c7:92:16:8d:c6:ae:7f:f7:15:63:eb:1d:6a:
         86:34:36:ea:db:a2:c9:1d:31:ce:8d:fd:14:04:1d:d4:82:f8:
         f6:59:b2:ab:df:67:9e:88:1f:0a:f1:c3:c7:c1:ac:ee:bf:b9:
         7c:c1:15:1e:44:f4:fe:22:57:24:34:c7:d8:4a:fd:20:75:31:
         e8:ba:47:35:c7:91:c4:ff:05:ab:95:9e:e3:3a:31:9a:09:4a:
         51:43:a5:fe:cc:37:31:a5:ba:af:47:db:1e:e8:9b:f3:65:7a:
         07:45:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:48 2025 by rpki-client