Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/AK081OMu9Co14jRkEOQw6yUfuFs.roa
File:                     AK081OMu9Co14jRkEOQw6yUfuFs.roa (raw, json)
Hash identifier:          4dqRjzsziqrBHkuTMktsfm8JJYxZzG31z0CvV6m+Ryk=
Subject key identifier:   00:AD:3C:D4:E3:2E:F4:2A:35:E2:34:64:10:E4:30:EB:25:1F:B8:5B
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       4D
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/AK081OMu9Co14jRkEOQw6yUfuFs.roa
Signing time:             Sat 01 Jul 2023 01:31:03 +0000
ROA not before:           Sat 01 Jul 2023 01:31:03 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        153.126.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Jul  1 01:31:03 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=00AD3CD4E32EF42A35E2346410E430EB251FB85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:11:ac:58:f8:5a:dd:09:64:ec:e1:50:59:
                    2f:82:1b:f5:65:dd:0c:68:1b:f9:30:3e:a5:fb:9d:
                    d6:dd:fe:ea:76:eb:ee:ad:57:76:18:3b:df:58:29:
                    9b:e2:e8:64:8f:3a:7f:bd:09:db:b6:8a:88:e7:23:
                    75:42:40:15:c1:6d:1e:82:b8:20:57:74:8b:b0:f5:
                    0d:b3:ac:3a:4a:29:8d:96:7e:e3:c4:dd:48:b7:b8:
                    26:6a:1f:7e:4f:6e:00:4e:a8:48:67:0f:09:a2:5d:
                    54:c1:ea:d3:52:a5:f6:fe:2e:61:b6:a4:47:8a:36:
                    f2:81:29:04:f5:94:31:4d:de:48:c1:3f:a7:04:a2:
                    e8:fb:17:a8:6a:a4:d4:78:63:e1:7c:83:a9:60:29:
                    28:17:21:0a:e9:36:79:58:d9:b6:6b:03:14:b6:45:
                    f3:c5:42:08:da:ea:59:dd:49:e4:52:ba:5e:8b:31:
                    44:21:c2:1b:98:db:95:1c:04:13:37:b6:ad:5a:af:
                    c1:5b:ec:4e:93:27:16:12:f8:4d:fa:bf:0c:9a:c3:
                    85:46:29:1b:71:6f:cb:90:12:d2:c4:aa:00:d2:07:
                    b9:6b:d6:c2:37:15:c8:3f:fb:5e:10:9c:25:3a:24:
                    d7:7e:f4:dd:9b:76:e5:36:c8:67:84:89:e6:91:f0:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AD:3C:D4:E3:2E:F4:2A:35:E2:34:64:10:E4:30:EB:25:1F:B8:5B
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/AK081OMu9Co14jRkEOQw6yUfuFs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:a2:c2:93:97:92:9c:1e:1c:c5:66:77:9f:03:5f:2d:30:39:
         d4:0a:e8:1f:a9:f9:85:21:e1:b5:bf:7a:9d:ed:8d:4e:3d:5e:
         eb:b5:9b:50:b4:9f:09:86:a6:1f:6b:8a:2e:03:51:53:4d:64:
         be:26:88:c3:3e:5d:5c:c6:e0:d0:d5:37:1a:55:af:87:2b:72:
         79:b8:54:a4:33:87:f6:c2:cf:52:24:be:41:24:4f:4b:db:df:
         21:ef:3d:4d:21:6b:fc:7e:02:56:6a:6a:a4:c5:4b:ef:8e:30:
         f0:30:ad:66:56:8b:fb:71:a3:6d:c4:94:90:b9:d8:b6:c9:ee:
         99:27:8b:d0:21:0a:1a:f6:14:08:8f:d9:a7:d4:2f:e8:1f:dc:
         a6:3a:e8:45:15:64:fb:ba:8a:85:4f:e3:70:11:38:3d:f0:d7:
         43:90:3a:d4:a1:8b:6d:17:49:62:8d:00:79:08:08:45:23:3a:
         ae:91:c2:29:43:07:fa:f5:bc:8e:4d:e5:56:88:22:56:f1:6a:
         c3:8b:4a:e4:d2:87:75:f2:60:23:e9:e8:b0:ec:8b:82:c8:03:
         1c:30:49:90:4f:d2:38:11:ea:60:c7:30:f9:8c:82:f9:dd:b4:
         f5:21:35:45:ea:dc:03:1d:1c:a9:57:76:b8:5c:f0:40:d8:f1:
         74:f7:d4:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 20 02:37:12 2024 by rpki-client on console-fra.rpki-client.org