Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/su3k_S8LYyu14dvqnMnGq-xYc-s.roa
File:                     su3k_S8LYyu14dvqnMnGq-xYc-s.roa (raw, json)
Hash identifier:          ti3IOJlG8WMcXz9XrodMdzxP6TTiEdYqDogWIJJdrsk=
Subject key identifier:   B2:ED:E4:FD:2F:0B:63:2B:B5:E1:DB:EA:9C:C9:C6:AB:EC:58:73:EB
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       67
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/su3k_S8LYyu14dvqnMnGq-xYc-s.roa
Signing time:             Thu 14 Nov 2024 15:58:06 +0000
ROA not before:           Thu 14 Nov 2024 15:58:06 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     23918
IP address blocks:        153.254.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 14 15:58:06 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=B2EDE4FD2F0B632BB5E1DBEA9CC9C6ABEC5873EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:59:c9:f4:29:58:d1:cf:a8:aa:6c:d7:0d:
                    80:22:5c:48:26:97:f0:85:94:66:e8:06:8b:50:e3:
                    01:ce:61:d1:ca:70:01:69:db:72:41:d7:2c:ec:f4:
                    9e:62:ca:24:eb:a0:01:73:a9:39:53:de:c5:35:38:
                    5b:86:b9:16:35:ac:31:76:6b:e9:7b:07:bd:85:2e:
                    0a:ac:20:b0:ec:99:ff:fc:dc:f0:52:f7:5c:83:6d:
                    3e:2a:80:81:ef:43:dd:cc:c8:7d:2c:22:a6:6a:d7:
                    33:4d:61:fb:4c:4c:c5:4a:61:a1:a1:cc:fd:bd:94:
                    67:72:2a:26:b4:98:34:56:36:44:15:33:12:dc:4e:
                    c4:1c:65:89:ea:fd:00:b1:f5:a9:99:f8:a7:6b:b2:
                    63:ad:f0:1e:29:e9:7a:3e:01:bc:32:3a:e6:84:c4:
                    8a:46:30:b3:e5:4e:08:ad:a9:51:87:9b:1b:ed:5a:
                    12:cb:5c:cd:b3:20:bd:d2:ba:b1:d0:2e:9f:3f:c9:
                    6c:18:31:22:06:55:9e:78:d8:6e:71:46:11:1b:9b:
                    c7:1e:ee:67:b5:45:86:cc:aa:e7:da:88:dc:27:36:
                    a1:1f:63:5b:da:c3:ff:54:12:27:1a:df:37:ba:18:
                    ff:26:33:03:54:be:0e:fc:13:89:2a:b7:93:6f:a5:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:ED:E4:FD:2F:0B:63:2B:B5:E1:DB:EA:9C:C9:C6:AB:EC:58:73:EB
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/su3k_S8LYyu14dvqnMnGq-xYc-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:94:a8:48:0a:e2:01:c0:1e:5a:a4:01:b3:f1:96:14:05:
         43:4e:4a:1e:f2:2d:52:82:3c:1e:fb:ed:9f:5c:d5:e9:15:58:
         1b:4e:47:03:02:ca:43:3c:83:73:11:e8:d0:16:93:20:42:3d:
         ad:b4:9f:be:54:27:5c:7e:bf:8e:8b:62:56:6d:f6:2b:26:56:
         65:3b:a6:35:2c:75:24:49:90:bb:3a:f3:43:f8:79:6b:c4:58:
         84:12:ac:e6:9a:f4:c4:fa:ee:9f:54:22:c5:57:7e:fd:14:59:
         03:39:ef:7a:9c:46:6a:2d:3f:69:e4:0e:da:fe:28:72:23:7e:
         67:61:79:22:42:fd:a3:43:23:fe:4d:ee:40:3b:3b:0e:7d:44:
         1e:08:07:bd:4c:08:71:e3:61:0d:59:de:ab:60:88:1c:39:d8:
         8b:a8:bc:5d:b8:f8:0e:f4:5e:16:1d:39:7f:b1:84:f5:4d:40:
         cd:e2:d3:95:ae:94:ed:7c:4c:c0:16:25:53:db:24:0c:79:14:
         51:35:54:1c:36:77:03:32:44:b1:23:aa:ab:36:d7:06:84:19:
         c4:45:a6:5e:1d:97:2c:b9:00:f8:d2:f1:5b:c2:9b:cc:bf:bf:
         ad:59:08:cb:b1:f3:62:8f:57:34:fc:52:7f:e8:59:79:62:ed:
         83:61:f0:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:47:49 2024 by rpki-client on console-fra.rpki-client.org