Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/jPGql0wW0z61ewVN9tympVM5iQY.roa
File:                     jPGql0wW0z61ewVN9tympVM5iQY.roa (raw, json)
Hash identifier:          QJGwsPhhocUoRCfJquOADSNuM0rzcJoFbjikbL0YWBs=
Subject key identifier:   8C:F1:AA:97:4C:16:D3:3E:B5:7B:05:4D:F6:DC:A6:A5:53:39:89:06
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       68
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/jPGql0wW0z61ewVN9tympVM5iQY.roa
Signing time:             Fri 31 May 2024 01:31:11 +0000
ROA not before:           Fri 31 May 2024 01:31:11 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        153.127.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May 31 01:31:11 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=8CF1AA974C16D33EB57B054DF6DCA6A553398906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:19:91:8e:53:08:cd:91:be:87:5a:98:cb:
                    b7:39:2b:7d:c8:cd:93:04:e8:ba:e3:9a:1a:0c:ed:
                    12:96:8f:fc:cc:85:1a:ce:6a:a8:db:96:8c:a7:71:
                    f6:4e:26:d6:55:66:86:9b:25:59:c5:f9:73:11:c9:
                    5f:25:d8:25:81:0f:62:3f:de:19:43:50:21:53:d2:
                    b0:4a:38:9b:96:8f:df:5c:fb:e4:fc:1c:a0:24:97:
                    31:ca:7d:a9:d6:d4:55:e9:84:cf:ae:cc:84:d4:79:
                    77:56:32:e4:02:d1:ed:97:21:69:be:18:fc:f1:5a:
                    8d:14:29:5c:04:ee:5c:21:af:24:90:24:1d:91:4f:
                    8b:81:1f:a2:a5:d1:e1:71:bd:c3:9c:22:14:8d:e6:
                    11:6f:8a:a3:1e:bc:24:a5:3e:5f:d6:88:39:d5:a9:
                    90:f6:54:c2:b0:43:44:e4:95:e9:98:9b:ee:28:e6:
                    a7:26:12:d2:ec:2f:26:94:f4:d5:6e:65:52:a4:cb:
                    aa:e9:91:98:51:9a:a5:38:42:78:7b:2f:f4:7c:78:
                    67:32:7d:21:d1:f7:26:1a:37:88:f2:e4:d2:51:82:
                    24:2c:10:18:a5:a8:c7:70:5d:64:85:7f:c8:e3:c2:
                    09:39:6b:4b:70:18:5d:f4:2f:e7:f9:64:d8:a9:52:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F1:AA:97:4C:16:D3:3E:B5:7B:05:4D:F6:DC:A6:A5:53:39:89:06
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/jPGql0wW0z61ewVN9tympVM5iQY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:57:c7:c2:8e:1c:1e:79:de:77:71:22:0a:64:7d:9c:8c:38:
         15:e5:fc:16:f7:5f:3c:db:4d:23:b1:5d:dc:e0:8f:c9:30:58:
         28:ae:91:3e:6e:b9:40:80:da:ff:e7:a5:d4:b7:f7:3f:b5:0f:
         1a:8d:3d:d7:f3:57:52:57:20:b0:67:cc:ae:c9:64:7e:3f:90:
         8a:22:24:d3:47:63:94:43:9e:9c:75:8e:3e:0b:fe:1f:4e:2f:
         cc:ac:78:ac:76:39:5a:cc:ed:f0:6d:d8:0b:9a:50:41:36:dc:
         92:03:83:38:46:6e:35:b5:c7:9a:b9:0a:59:d8:31:20:59:4a:
         e9:bc:07:3b:12:33:07:8a:75:cf:2a:47:01:80:89:36:72:d1:
         4d:df:dc:c2:dc:7a:10:6a:d6:65:40:9b:6f:98:58:56:6e:c8:
         c5:9d:94:10:a5:8c:d2:ce:04:c1:8f:fb:4b:33:1a:1c:1a:3d:
         61:27:54:6d:48:b4:12:61:8f:d5:2a:51:51:eb:08:94:28:f4:
         b8:1c:1f:51:d0:5f:12:fe:7a:09:ba:f0:37:0a:3e:5d:b1:07:
         aa:ec:20:85:fc:ed:01:44:7c:2e:1d:08:ee:af:55:5b:1e:5b:
         be:3c:d4:9d:a6:b9:a3:b4:a6:00:ef:18:3e:ea:5e:93:52:e0:
         27:8e:10:58
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBaDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx
NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTI0MDUzMTAx
MzExMVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoOENGMUFBOTc0QzE2RDMz
RUI1N0IwNTRERjZEQ0E2QTU1MzM5ODkwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMNyGZGOUwjNkb6HWpjLtzkrfcjNkwTouuOaGgztEpaP/MyFGs5q
qNuWjKdx9k4m1lVmhpslWcX5cxHJXyXYJYEPYj/eGUNQIVPSsEo4m5aP31z75Pwc
oCSXMcp9qdbUVemEz67MhNR5d1Yy5ALR7Zchab4Y/PFajRQpXATuXCGvJJAkHZFP
i4EfoqXR4XG9w5wiFI3mEW+Kox68JKU+X9aIOdWpkPZUwrBDROSV6Zib7ijmpyYS
0uwvJpT01W5lUqTLqumRmFGapThCeHsv9Hx4ZzJ9IdH3Jho3iPLk0lGCJCwQGKWo
x3BdZIV/yOPCCTlrS3AYXfQv5/lk2KlSSukCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSM8aqXTBbTPrV7BU323KalUzmJBjAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj
EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP
SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L2pQR3FsMHdXMHo2MWV3Vk45dHltcFZNNWlRWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAWZf8AwDQYJKoZIhvcNAQELBQADggEBAJRXx8KOHB553ndxIgpkfZyM
OBXl/Bb3XzzbTSOxXdzgj8kwWCiukT5uuUCA2v/npdS39z+1DxqNPdfzV1JXILBn
zK7JZH4/kIoiJNNHY5RDnpx1jj4L/h9OL8yseKx2OVrM7fBt2AuaUEE23JIDgzhG
bjW1x5q5ClnYMSBZSum8BzsSMweKdc8qRwGAiTZy0U3f3MLcehBq1mVAm2+YWFZu
yMWdlBCljNLOBMGP+0szGhwaPWEnVG1ItBJhj9UqUVHrCJQo9LgcH1HQXxL+egm6
8DcKPl2xB6rsIIX87QFEfC4dCO6vVVseW7481J2muaO0pgDvGD7qXpNS4CeOEFg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:08 2024 by rpki-client on console-fra.rpki-client.org