Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa
File:                     sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa (raw, json)
Hash identifier:          k+RsemLKymCwofhpR+XHPUn5bUGfTYzvVcbFANDFfYQ=
Subject key identifier:   B0:D8:07:67:73:34:06:F4:8E:42:0E:FB:06:E0:B1:A6:7B:F9:41:AE
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       59
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa
Signing time:             Mon 08 Jul 2024 15:28:28 +0000
ROA not before:           Mon 08 Jul 2024 15:28:28 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     17476
IP address blocks:        153.254.87.136/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Jul  8 15:28:28 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B0D80767733406F48E420EFB06E0B1A67BF941AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:37:87:6f:c4:f8:f3:66:4f:b4:db:e7:6b:
                    2c:5b:9a:7f:f4:d4:7b:90:d7:03:ae:70:2b:a7:8e:
                    2f:e6:d8:e1:cb:16:bb:3f:17:76:16:4f:02:56:df:
                    e4:84:34:f9:cf:d7:6c:27:a8:a4:02:d1:79:4c:d9:
                    1e:bb:32:22:49:c5:17:7b:8f:82:aa:b3:36:ca:0f:
                    dc:c7:39:14:58:f8:89:c7:c8:bb:e2:a0:8e:80:12:
                    35:97:b1:56:96:52:38:59:bc:7d:00:48:ef:a7:a9:
                    34:22:3b:24:6d:4b:c1:6a:7d:f9:9f:4e:52:c7:07:
                    6c:64:e0:e9:86:d2:69:2e:08:ff:da:e3:a8:66:04:
                    93:66:bc:95:f2:4d:72:6d:7c:34:dd:0c:2b:03:00:
                    91:f9:1e:39:fc:da:4c:b3:33:a7:43:e5:4b:72:11:
                    d8:b2:f2:df:b4:dd:82:e6:36:be:73:22:0b:35:b2:
                    bd:e3:74:f8:cc:56:8c:5e:ca:8f:85:de:0d:da:f8:
                    21:48:1e:48:aa:c6:47:e0:82:69:43:c7:8d:ac:74:
                    3f:d7:14:fd:ee:64:7a:e9:f4:af:a4:cc:6b:81:6d:
                    7f:49:24:67:bf:03:8d:cd:4c:c0:b9:38:b6:51:12:
                    9c:62:7b:1f:de:c6:2c:1c:67:80:ce:2e:5c:9e:41:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D8:07:67:73:34:06:F4:8E:42:0E:FB:06:E0:B1:A6:7B:F9:41:AE
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.87.136/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:72:5c:cc:fd:36:b6:aa:8a:af:50:06:a0:cf:54:c6:b5:
         bc:f1:f8:c7:99:6b:5e:6a:cf:09:b3:15:c6:64:f2:ef:3d:fa:
         1a:69:04:7f:44:4b:f5:bf:a1:f3:5e:d1:30:7c:e8:ac:ec:30:
         09:b0:87:8c:54:fb:fe:3c:6d:04:53:54:85:c8:6a:c9:4a:d8:
         c9:96:7f:36:bd:31:1f:03:02:e1:b3:b6:5a:38:13:81:f2:51:
         2a:8b:d1:78:aa:b6:56:3a:34:49:a9:e2:83:59:95:ee:23:e8:
         10:c9:01:73:4a:0a:9f:4c:71:df:2e:1c:ff:43:9c:04:42:79:
         c6:4c:b9:67:cf:fa:d2:ae:a7:71:56:5c:99:52:3b:d4:88:c2:
         c2:91:bd:d6:0d:23:2c:83:48:08:77:7b:52:9d:bb:2e:37:06:
         46:b5:7d:b0:fe:f6:56:1e:35:5c:3e:ac:6e:33:b0:89:7c:fd:
         57:b6:ba:c3:ed:92:c0:dd:1d:ba:27:fe:89:50:80:d8:af:5c:
         7b:89:68:f3:b3:19:95:82:76:db:f1:72:32:48:15:10:6d:d4:
         e4:f7:d1:7a:9e:c3:d7:47:6d:42:1c:ba:88:1f:c3:e6:69:28:
         f8:99:ec:06:76:dc:02:ae:cb:6e:b2:98:20:d2:16:7b:fc:86:
         00:4b:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 16:41:18 2024 by rpki-client on console-ams.rpki-client.org