Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/lux0wm5kEw-VG4uZXfbc5j3PgSs.roa
File:                     lux0wm5kEw-VG4uZXfbc5j3PgSs.roa (raw, json)
Hash identifier:          uEgKUtk/ZxClzCT+L9Vi0fID6p3DrCL8aSQV4Jjug4g=
Subject key identifier:   96:EC:74:C2:6E:64:13:0F:95:1B:8B:99:5D:F6:DC:E6:3D:CF:81:2B
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       57
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/lux0wm5kEw-VG4uZXfbc5j3PgSs.roa
Signing time:             Fri 01 Sep 2023 01:28:23 +0000
ROA not before:           Fri 01 Sep 2023 01:28:23 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     38644
IP address blocks:        115.69.238.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Sep  1 01:28:23 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=96EC74C26E64130F951B8B995DF6DCE63DCF812B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:bc:b1:a4:7e:e0:48:f5:2c:6a:83:81:d8:
                    83:7d:7e:a0:e6:38:4d:b6:e1:d9:ec:a2:2d:39:39:
                    2e:00:1d:40:ae:ff:bc:b3:ef:fb:ab:ba:18:c9:c6:
                    d8:de:e7:cf:e5:42:12:34:cf:3b:36:e8:8f:44:0e:
                    b7:5a:69:5b:ba:c9:c6:e4:c3:a6:50:75:59:cb:bb:
                    c7:2f:a4:22:b9:17:2b:f3:ea:db:ab:87:5e:c9:72:
                    dc:d0:f7:9f:37:47:20:30:c1:85:ad:bf:51:87:a1:
                    10:72:4d:33:76:ec:c0:e5:0a:46:59:14:61:5d:c5:
                    04:e7:f3:28:7b:12:28:94:55:93:2f:5b:e9:72:75:
                    18:7f:b8:57:95:85:e1:49:97:c5:9b:b2:2c:2e:e2:
                    52:36:10:28:da:bd:59:3b:92:af:c4:11:fd:55:49:
                    4d:de:d0:de:e7:a3:97:4f:91:c7:a7:47:bc:c8:5e:
                    f2:fe:79:2c:97:5e:7b:13:85:5a:29:0d:65:c4:2d:
                    b2:09:1f:c1:67:d7:10:56:14:c8:f5:99:c0:0a:10:
                    2f:e5:f7:d9:65:a3:20:61:fe:ef:01:18:20:4c:8f:
                    05:51:20:5a:d2:44:12:d9:33:d4:37:a1:47:e5:a4:
                    8f:3f:e4:0d:52:ab:19:7f:2f:16:7a:0b:f9:d6:bc:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EC:74:C2:6E:64:13:0F:95:1B:8B:99:5D:F6:DC:E6:3D:CF:81:2B
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/lux0wm5kEw-VG4uZXfbc5j3PgSs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:9b:2c:c4:a4:b3:8a:5d:6d:6c:35:e6:74:58:dd:af:31:
         ed:3e:69:aa:22:00:bf:d0:18:a3:ee:62:18:af:4f:86:2f:97:
         25:84:ce:c9:b8:09:4d:d7:2f:6d:8d:f5:c8:25:8b:28:a1:c1:
         d6:1c:47:5e:fa:f9:bf:19:96:4f:c3:fc:49:c2:02:61:dc:2f:
         93:67:ce:f3:9c:0a:ef:7f:73:09:b8:7c:60:37:51:ab:4c:42:
         ab:31:ae:26:b0:c1:64:0b:3e:d8:4c:40:4d:c6:2f:15:05:b9:
         e2:b1:23:65:42:aa:75:4d:06:61:97:15:6b:fb:d5:ef:0e:98:
         96:21:3e:23:f7:60:e5:75:a4:d7:7a:02:34:af:50:d2:30:8e:
         fd:98:5e:ee:fc:84:42:21:c3:5b:ef:31:76:31:b0:bb:2e:8d:
         05:20:a2:68:48:41:be:17:27:66:88:13:a9:ec:82:3b:f1:b8:
         08:76:57:9c:b1:96:0a:72:3a:1d:28:be:3a:45:38:5c:22:fb:
         45:19:f5:10:16:b0:5f:ed:19:8d:7e:d0:aa:be:96:98:45:02:
         53:a7:d5:0f:15:5d:9e:89:ec:b0:e5:ef:b1:b3:35:31:8d:89:
         9b:94:8a:57:8e:68:2a:a3:b4:6a:17:6d:c1:bd:ce:07:94:2b:
         aa:9f:74:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:09 2024 by rpki-client on console-ams.rpki-client.org