Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5TYppnLdqJR_C-wRtb_MQmBaYHI.roa
File:                     5TYppnLdqJR_C-wRtb_MQmBaYHI.roa (raw, json)
Hash identifier:          jSO4J8KfS+Yew3s/EU11EJKdZfWgpoeQk8eMplOOhp4=
Subject key identifier:   E5:36:29:A6:72:DD:A8:94:7F:0B:EC:11:B5:BF:CC:42:60:5A:60:72
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       4C
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5TYppnLdqJR_C-wRtb_MQmBaYHI.roa
Signing time:             Sat 01 Jul 2023 01:31:03 +0000
ROA not before:           Sat 01 Jul 2023 01:31:03 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        153.121.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Jul  1 01:31:03 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=E53629A672DDA8947F0BEC11B5BFCC42605A6072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:67:ef:df:35:63:b3:5f:77:78:e0:6a:d5:
                    48:d9:5b:fd:57:1c:f0:3e:d2:4a:2d:0c:58:68:68:
                    ec:bb:73:b6:92:1d:24:84:da:b4:79:2c:8b:18:57:
                    d8:a6:7e:58:32:0d:a6:65:8e:40:89:2c:74:12:27:
                    70:f2:c2:ce:bb:07:45:1d:f6:19:9b:e1:7d:27:26:
                    cf:85:9a:7b:c9:b9:44:bc:e9:d6:87:51:55:db:4c:
                    9b:79:91:ce:16:19:55:f8:1d:1e:f6:8d:91:9d:2c:
                    a3:f6:ce:4f:78:9f:05:f4:64:0d:19:a8:10:95:0d:
                    95:7f:d5:72:a2:b6:de:ff:99:0a:37:d6:56:ea:b8:
                    5a:9e:f1:ac:73:2e:7b:fd:d3:6a:06:dc:87:e9:38:
                    00:ab:45:d3:9e:c3:f6:b8:bb:61:a8:f6:8a:71:71:
                    eb:8a:89:65:7e:9d:b7:a8:36:79:57:e2:23:d7:ca:
                    72:1c:76:99:f9:15:9c:7a:36:0d:51:22:7a:7d:09:
                    8c:18:c7:eb:4e:ed:75:b0:1e:27:10:a4:99:b6:24:
                    54:77:58:86:61:16:65:ae:43:c4:80:18:8b:7d:a9:
                    79:9f:9e:f1:43:77:96:91:98:69:9e:11:91:cd:5b:
                    3a:57:6d:d3:ab:5c:7b:f7:d2:9b:73:62:0f:d1:09:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:29:A6:72:DD:A8:94:7F:0B:EC:11:B5:BF:CC:42:60:5A:60:72
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5TYppnLdqJR_C-wRtb_MQmBaYHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a9:71:3f:a5:9a:89:fc:b3:87:2f:5c:4a:87:c7:b5:e3:6b:70:
         b6:31:9d:85:eb:5d:43:76:46:72:da:1b:57:3c:98:94:8b:ae:
         bb:b7:97:9a:16:27:71:3d:d0:3c:6a:cf:95:07:fc:a7:04:e9:
         ff:fe:30:37:cc:34:69:ff:8a:f5:cf:11:61:67:22:9f:62:af:
         33:34:21:e4:20:55:0d:52:f3:85:f6:27:6d:89:96:2f:cd:10:
         47:52:69:4d:f2:43:ae:00:cc:0c:cf:51:9c:09:8b:3a:e2:4b:
         ca:e0:05:43:ec:45:a4:58:e7:ab:0c:42:7f:e4:f1:61:1a:8c:
         aa:8f:f5:e5:5f:43:93:9f:b3:6f:4e:a6:04:64:fb:db:3e:c3:
         ac:87:ad:2b:e7:8d:4c:34:5d:c0:9c:e4:f6:64:dc:07:f5:2a:
         35:d0:75:45:0c:8b:f4:5f:99:3d:5a:1e:ef:c2:01:9f:37:a8:
         42:82:78:de:76:53:c0:03:73:0a:0c:43:1d:57:a8:8a:a7:31:
         a4:42:f5:b4:a9:fe:7b:ce:30:cb:6f:9b:3b:12:a6:1f:a5:44:
         a4:e9:84:ef:be:e1:d7:c8:3e:10:95:2a:47:36:c2:83:4a:13:
         4e:04:a1:0b:8b:0f:ec:90:42:27:86:39:10:1c:d2:50:13:93:
         14:51:d6:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 20 02:37:12 2024 by rpki-client on console-fra.rpki-client.org