Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/vpGhy6XhVwpW21EZWJS6uL3oRzw.roa
File:                     vpGhy6XhVwpW21EZWJS6uL3oRzw.roa (raw, json)
Hash identifier:          S/3iGbTkeIxYJu2HzT/txSB+VOoyBILTMFddMXC0Iuo=
Subject key identifier:   BE:91:A1:CB:A5:E1:57:0A:56:DB:51:19:58:94:BA:B8:BD:E8:47:3C
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       53
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/vpGhy6XhVwpW21EZWJS6uL3oRzw.roa
Signing time:             Sat 01 Jul 2023 01:31:07 +0000
ROA not before:           Sat 01 Jul 2023 01:31:07 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        153.120.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Jul  1 01:31:07 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=BE91A1CBA5E1570A56DB51195894BAB8BDE8473C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:0b:fe:8e:a2:47:25:a8:7b:11:27:41:14:
                    a9:d0:4b:d2:6c:f8:35:3b:16:f6:4c:8d:b4:08:4b:
                    9c:0e:06:7b:ab:b2:6f:93:13:bd:e7:66:9b:74:bd:
                    29:c0:34:eb:26:a7:ee:ac:b1:e1:bb:8e:b5:8a:d0:
                    4f:66:b4:6e:1e:05:4d:89:1b:9c:ba:81:fa:7d:2e:
                    5b:fb:4b:fb:0b:56:c0:b4:74:91:03:fd:3b:d2:b0:
                    6f:76:29:f9:35:86:1c:a7:18:0f:62:ac:93:2a:2e:
                    9b:ce:cc:be:92:1b:c1:8b:83:73:7c:69:83:a3:ad:
                    77:9c:af:ce:bc:59:6c:1a:d5:69:ce:3a:35:31:ab:
                    83:10:8d:06:cf:79:32:17:bb:e2:a8:22:ed:3c:00:
                    6d:d8:85:db:43:16:8a:be:1d:9d:63:7e:fa:1d:e6:
                    31:dd:d3:cd:b7:74:26:a8:42:34:ba:f1:ad:e1:8d:
                    ec:92:e1:ce:4f:66:87:21:c1:2a:d1:12:e8:0a:35:
                    72:43:b9:0b:7c:75:7a:ac:c9:cc:b5:14:67:1d:ee:
                    3e:86:7e:b1:cf:0c:0c:5e:47:ed:05:b2:f2:34:de:
                    0d:e8:ef:bf:b7:68:70:43:33:5b:7b:f5:2e:ae:17:
                    a9:77:a9:92:7a:c0:f0:86:53:40:74:de:a0:3e:cd:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:A1:CB:A5:E1:57:0A:56:DB:51:19:58:94:BA:B8:BD:E8:47:3C
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/vpGhy6XhVwpW21EZWJS6uL3oRzw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8d:7f:30:36:39:57:a9:13:34:f1:81:c4:a0:fb:6f:7e:ab:82:
         1c:59:78:13:5c:1e:7c:7f:27:8e:81:be:aa:28:7f:60:0e:dc:
         7d:8f:00:07:d6:bf:2c:6b:5b:81:b3:62:66:b4:18:ee:5b:74:
         d9:b1:54:ef:44:44:b2:32:11:23:2c:e3:f3:ac:cf:73:00:b3:
         c0:e5:a7:c1:28:70:eb:16:3a:3e:93:69:49:2f:b1:a3:34:c4:
         d5:7f:49:78:91:b5:de:0b:09:df:86:99:32:97:85:10:ac:99:
         08:54:13:54:1d:9a:be:a5:4c:ed:e0:ab:87:4f:83:33:96:9c:
         d8:4a:03:99:a3:8b:79:c2:c4:61:5d:7c:76:ac:0d:6f:6a:d8:
         af:74:6e:87:8a:60:65:b2:e1:17:0b:a0:01:b2:47:83:1d:39:
         0e:e8:ec:5e:fb:5e:f8:92:85:c7:4c:8a:ec:e9:62:50:b2:c9:
         89:cd:28:03:1c:b0:3d:81:1f:35:e5:b3:26:75:1f:d7:f9:8f:
         c7:06:a7:0a:09:45:ce:84:a2:9e:5d:18:81:df:63:eb:8d:9e:
         92:f1:7c:90:fd:67:c2:ce:06:31:3d:29:c9:8c:13:a4:bc:9a:
         77:9a:75:e8:58:05:36:91:37:b9:8d:b4:4b:fa:55:dc:30:a3:
         ef:03:4c:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 20 02:37:12 2024 by rpki-client on console-fra.rpki-client.org