Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/8HxVkrJlC_UKeNwlpyLHL8zQSzY.roa
File:                     8HxVkrJlC_UKeNwlpyLHL8zQSzY.roa (raw, json)
Hash identifier:          k8abx1J3wTKzk2JqScj0eRqqOxV5iQoV2NzNSIkCsvI=
Subject key identifier:   F0:7C:55:92:B2:65:0B:F5:0A:78:DC:25:A7:22:C7:2F:CC:D0:4B:36
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       62
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/8HxVkrJlC_UKeNwlpyLHL8zQSzY.roa
Signing time:             Fri 31 May 2024 01:31:07 +0000
ROA not before:           Fri 31 May 2024 01:31:07 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        153.125.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May 31 01:31:07 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F07C5592B2650BF50A78DC25A722C72FCCD04B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:a3:30:01:52:2c:0a:42:31:76:92:54:3c:
                    da:1a:39:cf:b9:f7:56:bb:fd:7d:ab:4e:18:5c:de:
                    83:9b:20:54:e5:d5:e0:94:ac:9b:39:96:c9:aa:8f:
                    70:b9:66:77:93:d4:82:75:0c:96:60:53:65:b1:5c:
                    14:f6:8f:c3:a8:07:80:b4:7f:fb:26:f0:c0:eb:26:
                    37:d1:d7:4a:c4:ae:19:90:3d:db:d5:cc:c9:9a:87:
                    08:43:f5:82:80:a8:41:f1:5c:ea:19:fc:9f:50:ef:
                    f6:3d:ae:86:ae:ee:17:fe:b0:2c:9a:48:3f:42:e5:
                    ee:7c:ca:90:d5:fb:b9:b2:8d:8e:38:12:62:0f:c4:
                    8d:15:c5:b4:97:95:4a:bb:a1:fa:06:23:9d:c7:11:
                    81:d1:56:bd:5b:bb:e3:63:0e:33:8c:7c:f9:00:d7:
                    44:bd:74:98:a5:10:3f:96:18:54:92:a0:e1:34:2c:
                    41:fb:df:56:87:c2:00:1b:38:38:58:0a:05:3f:e2:
                    99:70:e0:1f:d2:42:33:67:63:5b:03:bd:d4:8f:b2:
                    b5:41:9a:b9:63:41:2d:88:94:37:cd:30:13:35:92:
                    7a:a0:c2:68:59:de:e9:95:10:1f:30:3e:1b:db:61:
                    56:59:65:ca:b9:0c:ce:6d:c7:ec:70:7d:a0:51:70:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7C:55:92:B2:65:0B:F5:0A:78:DC:25:A7:22:C7:2F:CC:D0:4B:36
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/8HxVkrJlC_UKeNwlpyLHL8zQSzY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.125.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:18:4d:f3:13:3e:19:8a:48:77:47:21:a7:16:37:ef:c5:
         9e:5a:88:de:60:8d:f9:7e:2f:c7:39:c5:c4:99:40:0c:79:9b:
         d9:0a:4e:23:17:2d:af:e8:42:2d:23:a0:90:7a:94:18:bb:55:
         65:1a:ed:06:8b:05:6c:5e:b4:39:84:42:cd:2d:4a:90:f3:cc:
         fc:ed:9b:d9:d4:7b:17:d2:09:f4:41:e7:c7:18:ab:c2:64:b2:
         48:10:6b:de:d5:60:69:1a:49:99:11:aa:fd:c9:be:4c:ac:2b:
         4a:89:a1:fa:2e:84:e2:6e:1c:2b:fc:1f:75:92:6b:fd:ef:8e:
         58:3b:bb:9e:cd:fc:90:c7:d8:38:92:9a:7d:f3:7b:ef:d4:c4:
         24:54:65:6f:fc:27:d0:a2:dc:59:ff:47:d2:59:1f:f3:43:5f:
         07:71:9a:e2:64:2c:f5:3c:57:a6:ee:69:7a:03:3c:b6:95:8f:
         af:3e:fb:69:ea:d5:7f:40:7e:a2:e4:3a:bb:0b:6a:88:e3:52:
         68:c2:0e:35:41:75:73:b6:8c:31:68:8d:0f:76:bd:4c:ae:a6:
         79:11:df:6d:46:56:f5:28:ee:a9:1d:fb:48:a0:33:c4:0c:42:
         66:e1:28:f4:6d:36:c2:6e:b0:6c:1c:d7:24:ef:e3:8f:2d:38:
         e3:0c:24:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:30 2024 by rpki-client on console-ams.rpki-client.org