Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/aduRHjhSQVPGOGSc19pjHHk9d2w.roa
File:                     aduRHjhSQVPGOGSc19pjHHk9d2w.roa (raw, json)
Hash identifier:          nVs2FyQIk+/WaiyUgiWATnERu+MsPc0NlPwfYKOJU/E=
Subject key identifier:   69:DB:91:1E:38:52:41:53:C6:38:64:9C:D7:DA:63:1C:79:3D:77:6C
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       64
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/aduRHjhSQVPGOGSc19pjHHk9d2w.roa
Signing time:             Fri 31 May 2024 01:31:08 +0000
ROA not before:           Fri 31 May 2024 01:31:08 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        153.126.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May 31 01:31:08 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=69DB911E38524153C638649CD7DA631C793D776C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:5d:b9:a1:19:41:c2:4f:a1:2a:66:0a:87:
                    41:31:06:c9:e5:22:8e:a9:0e:12:8f:27:33:76:ad:
                    75:5c:6c:05:24:86:84:71:52:65:26:bf:74:b7:21:
                    b8:b7:bb:b8:a8:41:41:60:5c:27:62:9f:41:44:2f:
                    59:12:72:32:20:3c:c2:33:ee:48:22:c8:c2:f7:1d:
                    94:9f:a1:c9:c3:d1:55:9b:f9:ec:59:58:bb:04:ad:
                    f5:c7:34:66:1b:63:f5:25:33:e9:03:c3:72:fa:1c:
                    2a:60:17:b5:6b:d4:62:03:0d:7c:55:5c:63:75:75:
                    46:cf:dc:98:e9:aa:7e:56:d9:94:76:a3:ae:eb:c8:
                    89:63:2f:b8:30:31:67:6a:79:8d:81:2a:b6:87:7a:
                    0c:95:dc:d2:f4:5a:2e:6b:2d:11:fd:2f:b9:53:e7:
                    7f:a7:b3:71:b2:96:51:31:be:73:18:95:3b:70:d2:
                    52:f2:5a:f0:20:84:3b:ac:12:69:01:1b:64:68:c7:
                    cd:b1:29:1f:ea:d9:e1:4f:27:12:c4:3e:08:25:09:
                    52:b8:89:8b:77:c4:6c:6f:09:f0:98:11:d8:df:a8:
                    e1:9a:ca:a2:8b:1f:5f:6e:61:f7:37:7a:f4:47:56:
                    d5:0b:84:cd:ac:f7:29:a1:f1:cf:ed:8b:56:ff:f9:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DB:91:1E:38:52:41:53:C6:38:64:9C:D7:DA:63:1C:79:3D:77:6C
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/aduRHjhSQVPGOGSc19pjHHk9d2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         27:45:54:34:2f:ba:d2:9b:aa:7d:46:f3:4d:75:34:fa:33:9a:
         37:e7:cd:48:56:09:68:6e:93:59:ed:cd:55:97:6a:f9:08:8b:
         ab:dc:72:fe:78:e9:48:2a:e0:48:a6:d1:03:2b:19:f1:cb:f8:
         0f:1e:64:cf:fd:a9:45:09:26:f1:d6:2b:27:89:11:3b:fa:c2:
         01:85:17:28:7c:0f:52:be:a1:ee:d7:62:7c:12:14:08:48:c2:
         fb:2c:2b:b7:74:56:cf:af:d5:9a:27:53:6b:ff:9e:8b:30:dc:
         33:cf:5f:36:24:8f:82:01:e6:ac:be:fe:fe:be:7f:7d:c3:84:
         ca:36:33:9c:6f:8a:c6:c5:24:0a:af:d2:9d:59:37:fe:8c:31:
         17:e9:fa:eb:35:51:9b:1f:29:f3:22:7d:07:dd:35:9b:49:d8:
         60:21:63:a3:84:a5:7c:32:12:ad:58:b0:6c:ac:29:90:8e:d9:
         06:6c:a3:d5:96:73:d7:0c:fb:09:c6:7e:8e:60:a4:53:4e:32:
         03:bf:f8:4f:1f:a1:a5:bb:ba:81:08:87:f9:d7:43:fb:48:da:
         0e:75:11:09:63:38:2d:14:cb:ee:fa:b6:5e:87:5c:80:92:a6:
         3e:e6:42:74:aa:bc:e4:22:80:fb:d1:01:b8:ff:86:77:5a:ae:
         07:0e:3e:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:30 2024 by rpki-client on console-ams.rpki-client.org