Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/gy5LOxeoGMq6kfcSM_BBt6r53jw.roa
File:                     gy5LOxeoGMq6kfcSM_BBt6r53jw.roa (raw, json)
Hash identifier:          C2E8Y9HBW15B8jCn6mcs2vBynJ3QiCYasnT0GXe4fFY=
Subject key identifier:   83:2E:4B:3B:17:A8:18:CA:BA:91:F7:12:33:F0:41:B7:AA:F9:DE:3C
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       69
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/gy5LOxeoGMq6kfcSM_BBt6r53jw.roa
Signing time:             Fri 31 May 2024 01:31:11 +0000
ROA not before:           Fri 31 May 2024 01:31:11 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        153.127.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May 31 01:31:11 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=832E4B3B17A818CABA91F71233F041B7AAF9DE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:03:62:3d:0d:36:f6:fd:61:a2:d5:ff:bb:
                    4f:a5:55:51:b0:26:e9:e8:11:d7:0c:d6:f6:2e:60:
                    7f:ce:17:d7:58:cc:bd:77:78:0d:4b:f9:b9:00:f2:
                    94:f0:8b:f6:50:0a:39:e2:57:b9:8a:57:40:66:59:
                    55:c1:9b:21:85:aa:d0:3b:a6:87:d9:cc:8a:e5:c3:
                    67:df:7e:bf:20:59:0a:c4:08:2c:89:9e:8f:fb:5f:
                    4c:25:50:2a:2e:d6:43:1a:a6:27:85:00:58:ba:02:
                    8a:dc:3a:26:b3:49:1a:d2:98:f7:d5:6b:b8:11:7d:
                    f1:1f:29:84:61:d6:d3:31:67:20:aa:f9:2c:47:2e:
                    a2:e3:b2:20:0f:9c:72:54:19:39:24:c5:ac:e5:34:
                    90:13:dc:99:a2:e6:04:62:de:df:f7:b0:8f:e8:6f:
                    77:6f:5e:24:75:5d:09:6b:89:5c:6a:ce:ea:b8:83:
                    22:43:6a:b7:1a:44:10:9d:d5:80:88:19:51:25:e9:
                    82:37:5c:b0:2b:f9:b9:1a:a7:b9:e9:10:58:17:e8:
                    0a:78:f3:36:70:07:1f:46:ea:75:7d:84:76:63:88:
                    39:a0:b7:f3:51:8e:35:84:e9:d0:33:4e:0e:e7:05:
                    db:bc:8d:c7:7f:9b:c4:99:c8:57:43:ad:0f:2b:01:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2E:4B:3B:17:A8:18:CA:BA:91:F7:12:33:F0:41:B7:AA:F9:DE:3C
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/gy5LOxeoGMq6kfcSM_BBt6r53jw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:18:14:09:83:ca:c4:84:47:d3:a0:d9:cd:d8:3f:8a:76:65:
         95:5b:98:e4:13:5f:f5:7e:ff:ab:ae:dd:d4:28:12:a1:2a:55:
         42:60:a0:aa:48:9a:0f:d8:4e:59:7a:02:23:49:60:50:22:47:
         9c:21:52:70:f9:92:f6:e2:5a:f2:f5:c8:51:f3:f7:a7:d9:b0:
         0f:98:06:b9:87:06:6e:27:14:a2:89:c8:f8:2b:a4:64:c6:46:
         8d:3f:c6:3e:25:9d:e0:b7:15:98:8a:61:55:78:b2:d6:11:f7:
         cc:89:ad:ca:3d:96:ef:22:25:ab:27:22:2a:36:16:9a:d8:81:
         9d:60:6e:4f:61:af:2e:91:43:38:74:ad:f4:d2:0a:db:7c:da:
         f0:a6:5d:e2:dd:69:ed:fc:77:b1:22:d9:7a:7c:3b:8d:d2:93:
         f0:8f:2d:44:59:49:cc:25:d5:3d:af:83:e1:ff:ca:e1:c0:17:
         45:bd:cd:af:0d:18:95:d6:01:26:9d:e1:e4:31:48:b5:68:9e:
         25:fb:37:7c:e4:96:4f:94:fd:c5:40:06:27:dd:e7:28:be:06:
         3a:5d:87:3c:60:88:f8:59:1c:f4:d2:d2:84:ed:17:cd:f0:b5:
         20:e5:c0:b3:44:da:ee:a5:33:1a:21:fc:58:97:34:c6:65:0f:
         61:95:0d:96
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx
NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTI0MDUzMTAx
MzExMVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoODMyRTRCM0IxN0E4MThD
QUJBOTFGNzEyMzNGMDQxQjdBQUY5REUzQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMjAA2I9DTb2/WGi1f+7T6VVUbAm6egR1wzW9i5gf84X11jMvXd4
DUv5uQDylPCL9lAKOeJXuYpXQGZZVcGbIYWq0Dumh9nMiuXDZ99+vyBZCsQILIme
j/tfTCVQKi7WQxqmJ4UAWLoCitw6JrNJGtKY99VruBF98R8phGHW0zFnIKr5LEcu
ouOyIA+cclQZOSTFrOU0kBPcmaLmBGLe3/ewj+hvd29eJHVdCWuJXGrO6riDIkNq
txpEEJ3VgIgZUSXpgjdcsCv5uRqnuekQWBfoCnjzNnAHH0bqdX2EdmOIOaC381GO
NYTp0DNODucF27yNx3+bxJnIV0OtDysBfZECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSDLks7F6gYyrqR9xIz8EG3qvnePDAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj
EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP
SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L2d5NUxPeGVvR01xNmtmY1NNX0JCdDZyNTNqdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAaZf4AwDQYJKoZIhvcNAQELBQADggEBAJ8YFAmDysSER9Og2c3YP4p2
ZZVbmOQTX/V+/6uu3dQoEqEqVUJgoKpImg/YTll6AiNJYFAiR5whUnD5kvbiWvL1
yFHz96fZsA+YBrmHBm4nFKKJyPgrpGTGRo0/xj4lneC3FZiKYVV4stYR98yJrco9
lu8iJasnIio2FprYgZ1gbk9hry6RQzh0rfTSCtt82vCmXeLdae38d7Ei2Xp8O43S
k/CPLURZScwl1T2vg+H/yuHAF0W9za8NGJXWASad4eQxSLVoniX7N3zklk+U/cVA
Bifd5yi+BjpdhzxgiPhZHPTS0oTtF83wtSDlwLNE2u6lMxoh/FiXNMZlD2GVDZY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:08 2024 by rpki-client on console-ams.rpki-client.org