Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hDv2Q91XqE5z09qgrb20t1vX96c.roa
File:                     hDv2Q91XqE5z09qgrb20t1vX96c.roa (raw, json)
Hash identifier:          8HWcH02go8As7z5yL2pmxROyo7nmgpHnf3t8h3hhjkE=
Subject key identifier:   84:3B:F6:43:DD:57:A8:4E:73:D3:DA:A0:AD:BD:B4:B7:5B:D7:F7:A7
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       6B
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hDv2Q91XqE5z09qgrb20t1vX96c.roa
Signing time:             Thu 14 Nov 2024 15:58:09 +0000
ROA not before:           Thu 14 Nov 2024 15:58:09 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     203849
IP address blocks:        153.254.102.0/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 14 15:58:09 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=843BF643DD57A84E73D3DAA0ADBDB4B75BD7F7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:85:e3:03:45:ff:9b:63:fc:d5:89:07:8f:
                    8f:05:5f:9b:62:97:b6:61:5d:4d:70:48:be:cd:bf:
                    c0:5a:32:58:42:cc:e7:2c:af:fb:90:7e:47:a4:a1:
                    e0:de:1c:9b:1d:30:12:f3:73:4a:e3:0f:76:65:dc:
                    b2:38:3a:38:d7:90:5c:35:41:95:f8:f7:55:6a:fd:
                    f8:29:1b:55:27:97:f9:08:b2:e3:9a:f9:51:f6:32:
                    67:4f:9f:68:ab:e6:3b:e5:af:50:b6:2f:35:0b:55:
                    59:0f:49:19:92:fa:9c:02:70:a2:15:41:bb:e3:2e:
                    36:d6:24:9b:67:f3:27:84:6d:11:93:8c:65:47:99:
                    54:b6:c0:7a:ab:74:ad:30:4a:1b:ae:00:71:de:18:
                    fa:fd:2f:5e:eb:36:8e:2d:b2:49:28:39:a7:2a:58:
                    10:7f:91:2b:ce:d4:36:9a:a1:4b:0d:b4:28:78:a0:
                    d5:b7:8a:9e:e0:cb:fb:3c:c0:68:47:ed:cc:93:ef:
                    ab:57:07:20:fe:c0:01:c3:f4:02:2b:4e:33:21:43:
                    21:42:42:95:11:5c:46:fb:ed:06:aa:ae:ff:bf:9c:
                    cc:d4:e9:1d:18:ad:8b:7d:66:1d:35:e6:84:b5:37:
                    54:67:fb:e4:21:e2:b1:0c:b7:9a:26:ad:ef:f9:f1:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:F6:43:DD:57:A8:4E:73:D3:DA:A0:AD:BD:B4:B7:5B:D7:F7:A7
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hDv2Q91XqE5z09qgrb20t1vX96c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.102.0/26

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:da:ed:47:91:9c:25:ad:8b:a7:35:e4:70:48:45:6e:dd:
         b3:38:ab:e8:bf:74:dd:8c:74:04:b2:b5:9b:cc:03:ad:24:a3:
         5d:bf:62:16:02:71:9a:bf:93:b3:20:72:c6:3a:5b:d0:53:1f:
         89:21:81:68:ed:38:cf:7c:d4:84:44:71:6f:84:5c:a6:09:a8:
         99:76:c9:4b:ce:92:8f:fd:98:83:cc:aa:c2:71:1c:1a:54:13:
         2e:1b:ce:c2:af:5f:c8:b3:58:61:7e:37:5d:64:16:66:1f:91:
         f3:72:96:bb:81:3a:e7:cd:a9:1a:b4:50:f2:fd:23:32:b0:ae:
         a8:64:dc:51:10:fc:3c:0a:60:dd:06:66:6f:7c:b9:ee:a4:39:
         0f:ed:20:ca:5a:f4:f0:ed:ea:ee:e5:66:8b:80:b7:51:d6:96:
         e3:c2:5e:4c:76:37:36:4e:a8:8e:72:14:cc:b5:31:9a:54:4d:
         03:82:e0:a5:2d:55:a0:db:bf:63:d8:a0:8f:cf:db:29:d2:a8:
         a8:4c:1c:53:c1:5b:6e:82:7d:c2:74:e1:ea:b9:82:d6:5b:dd:
         3a:6d:e2:66:cb:80:31:33:4b:6e:96:fa:f9:99:cc:ca:91:0f:
         a2:1b:32:83:df:3b:07:e2:79:99:8e:72:eb:a6:fc:4a:b3:eb:
         98:49:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:49:51 2024 by rpki-client on console-fra.rpki-client.org