Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fNuVBnLtcIYKJSelwSeqT88iQRk.roa
File:                     fNuVBnLtcIYKJSelwSeqT88iQRk.roa (raw, json)
Hash identifier:          2Az3MzlEPV1xdwrGrS6eFsp+4nTp0y6D8tONdTOnCl4=
Subject key identifier:   7C:DB:95:06:72:ED:70:86:0A:25:27:A5:C1:27:AA:4F:CF:22:41:19
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       6D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fNuVBnLtcIYKJSelwSeqT88iQRk.roa
Signing time:             Thu 14 Nov 2024 16:02:11 +0000
ROA not before:           Thu 14 Nov 2024 16:02:11 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     3949
IP address blocks:        153.254.110.72/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 14 16:02:11 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=7CDB950672ED70860A2527A5C127AA4FCF224119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:5d:0d:09:cd:f0:e0:ed:f6:7a:76:2a:d4:
                    d3:49:29:ba:a7:b4:6f:45:bf:bb:88:6e:98:6c:b4:
                    49:c7:1b:08:a4:29:51:5d:31:aa:07:81:f0:1c:2b:
                    0c:8d:8f:8c:b1:99:f6:c6:46:c8:31:45:ff:25:34:
                    63:24:4f:cb:dd:cc:30:b9:15:75:75:d2:9f:b4:8e:
                    56:c3:74:78:3b:9e:36:8c:19:2e:28:22:75:7f:ed:
                    85:04:80:04:c1:7c:37:f7:25:ac:8e:db:c7:48:ee:
                    a2:b7:ec:75:9c:35:fa:9c:68:99:05:2b:cd:4b:84:
                    32:f4:8d:e7:69:40:e3:56:a3:c7:c7:73:46:61:57:
                    73:28:b3:ad:d8:c0:7b:d8:9a:8e:17:1d:f6:e6:7f:
                    9c:c8:ab:ea:f1:5f:67:77:f4:99:60:c0:0c:13:9e:
                    54:c3:18:0c:c5:10:e5:76:b3:73:42:b2:0b:5c:16:
                    a9:5a:77:c0:ef:57:a1:6f:20:a8:c6:00:6a:81:53:
                    a3:c3:d5:a2:59:ce:1a:53:f5:4f:ee:e4:8e:f2:f0:
                    c6:b6:52:80:26:a9:c4:a3:5f:7e:d6:50:38:b5:c8:
                    ac:7c:83:aa:8f:59:96:6c:68:30:00:71:71:2b:59:
                    5d:49:cf:85:2f:91:d8:98:2f:e2:ce:6e:9d:1c:5c:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:95:06:72:ED:70:86:0A:25:27:A5:C1:27:AA:4F:CF:22:41:19
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fNuVBnLtcIYKJSelwSeqT88iQRk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.110.72/29

    Signature Algorithm: sha256WithRSAEncryption
         04:49:9d:39:15:4f:4f:f8:28:0b:99:4b:a6:b2:6d:98:9b:89:
         97:fd:c3:af:a1:5c:ca:7b:4f:ba:d9:a2:6f:6b:7c:f3:b0:80:
         d8:80:fa:ff:cf:ba:e7:d9:2a:31:7a:c2:b7:f2:84:3d:c3:24:
         e9:b5:b5:ff:df:59:18:22:f5:1d:d7:0e:b5:ec:45:2d:75:2a:
         5c:93:5f:f8:28:37:3e:1b:d8:f5:60:48:64:72:c4:36:9a:19:
         c0:ad:9f:c1:2e:e5:da:e6:54:bd:90:ac:a6:63:ea:93:1d:54:
         49:87:2a:af:9d:e7:7a:6d:9b:53:be:99:f8:bb:b8:17:f1:ca:
         cf:1b:15:0a:69:a0:94:02:e7:72:1e:e4:62:e1:d5:2f:37:57:
         21:f4:6c:08:9d:aa:4d:f7:6d:3d:1d:a2:66:28:a0:21:c7:f6:
         26:78:54:4c:1b:98:af:f9:d7:0c:49:d5:46:a9:8b:d7:68:5b:
         63:9e:e0:31:8c:b4:c7:54:6f:80:32:7e:6a:f7:4b:91:2c:20:
         e7:39:92:13:05:54:2c:df:70:5a:97:33:f3:b1:37:7c:0c:1f:
         94:41:31:10:fa:09:1a:30:5f:86:4d:a2:9a:35:d5:4f:f9:44:
         cc:cf:5d:b3:15:0c:8b:5a:2f:83:96:3a:4c:5e:1f:46:17:3e:
         05:8d:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:18 2024 by rpki-client on console-fra.rpki-client.org