Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/zo72AofFc2_K9v5PbJoPngMpN6o.roa
File:                     zo72AofFc2_K9v5PbJoPngMpN6o.roa (raw, json)
Hash identifier:          YEW5CSUQc3gXcYk1BHlpHxBB7HfD+C9HbVGf33tVvSg=
Subject key identifier:   CE:8E:F6:02:87:C5:73:6F:CA:F6:FE:4F:6C:9A:0F:9E:03:29:37:AA
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       63
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/zo72AofFc2_K9v5PbJoPngMpN6o.roa
Signing time:             Fri 31 May 2024 01:31:07 +0000
ROA not before:           Fri 31 May 2024 01:31:07 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        153.121.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May 31 01:31:07 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CE8EF60287C5736FCAF6FE4F6C9A0F9E032937AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:a2:62:2a:78:ee:a5:ef:94:d9:18:88:94:
                    5c:67:79:3d:13:b1:cf:20:29:bd:15:98:49:88:ff:
                    20:98:f6:9b:8f:fa:bf:46:27:6b:e2:f7:fa:f0:ba:
                    98:35:f5:1d:c2:6b:76:11:0e:67:17:7b:11:70:9e:
                    be:6a:29:90:3c:a1:d8:fa:ff:1f:89:12:48:7a:cb:
                    b4:6d:dc:47:f1:db:d5:ff:3d:f6:ac:cf:2f:25:e7:
                    79:49:1c:ef:e9:6c:45:a7:8f:62:a4:a8:02:79:d4:
                    ac:d8:1b:5e:9c:eb:e2:4a:61:60:9b:ab:bb:01:04:
                    34:94:72:e8:24:50:07:ef:08:ec:b7:6a:bc:7f:08:
                    de:1d:b0:fc:0f:d6:71:12:79:6f:f3:e2:19:b9:2f:
                    6f:53:c1:18:70:f0:d6:c5:18:84:b6:d3:a9:2b:1b:
                    d5:e7:27:67:cd:c5:85:54:f1:29:38:b7:dd:b5:05:
                    86:92:9a:ac:08:57:f3:23:54:3f:db:c2:b8:24:83:
                    d9:8f:43:7d:25:7b:e0:24:2e:fe:ee:79:b3:d8:b4:
                    7d:d3:f0:5f:28:0b:fb:44:44:ec:9e:e0:a2:12:03:
                    6d:e2:6f:d1:25:15:4c:57:00:55:8a:16:f5:28:a8:
                    67:2f:21:01:1a:f9:86:89:66:87:57:6f:0e:c4:55:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:F6:02:87:C5:73:6F:CA:F6:FE:4F:6C:9A:0F:9E:03:29:37:AA
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/zo72AofFc2_K9v5PbJoPngMpN6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:94:1e:2c:00:bc:0e:fd:14:32:25:33:37:f1:81:13:ef:
         4c:06:52:b2:ae:fd:95:65:c9:5a:c3:12:1f:b0:32:5a:c2:36:
         e9:44:02:dd:94:3d:92:1c:81:04:f7:7c:4c:a1:67:6a:9d:22:
         a0:45:1a:67:e0:a2:a9:7b:4e:af:0e:b3:d9:e9:73:f4:6e:95:
         d1:85:06:61:60:4f:03:88:3d:88:29:9b:7a:b2:b3:b3:dd:00:
         6e:57:70:06:bb:0b:86:66:ae:3e:04:06:1c:f8:47:05:f0:33:
         c0:9c:ad:56:96:12:84:12:67:22:59:b4:14:c7:3b:4f:b4:50:
         4b:6f:a4:dc:fd:5d:b4:e2:56:5d:5b:d8:34:43:6e:8b:6e:32:
         c9:fa:12:47:79:fe:8b:85:80:01:68:c3:21:55:65:64:c2:86:
         0c:3a:5d:87:d4:27:c4:b8:3d:70:7a:95:b0:4d:04:6d:85:2e:
         a3:07:e2:51:78:7c:23:be:0a:5b:1f:11:93:68:2b:1b:2e:ba:
         51:24:0a:4d:cc:89:ca:b2:1e:a5:60:70:84:e6:70:18:62:dc:
         f8:45:5d:a0:df:f6:2c:b2:da:25:6f:fe:b8:ca:9c:7c:95:8f:
         95:f3:d0:ea:8e:5d:1d:9f:df:c3:3e:ee:5b:88:92:51:11:db:
         ac:5a:7a:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:08 2024 by rpki-client on console-fra.rpki-client.org