Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/pEQLe7ALiIMjRtAR-UiwOGiau-o.roa
File:                     pEQLe7ALiIMjRtAR-UiwOGiau-o.roa (raw, json)
Hash identifier:          emj7t64fTKgFFOxO4/4zQrX0eFJiLjfmI/nWQ0AfXDg=
Subject key identifier:   A4:44:0B:7B:B0:0B:88:83:23:46:D0:11:F9:48:B0:38:68:9A:BB:EA
Certificate issuer:       /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Certificate serial:       06
Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/pEQLe7ALiIMjRtAR-UiwOGiau-o.roa
Signing time:             Wed 22 May 2024 01:41:27 +0000
ROA not before:           Wed 22 May 2024 01:41:27 +0000
ROA not after:            Wed 21 May 2025 06:22:50 +0000
asID:                     131960
IP address blocks:        123.108.152.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
        Validity
            Not Before: May 22 01:41:27 2024 GMT
            Not After : May 21 06:22:50 2025 GMT
        Subject: CN=A4440B7BB00B88832346D011F948B038689ABBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:3f:2e:f0:ed:41:02:e4:fd:b8:85:6f:d3:
                    13:b6:0f:3b:94:15:52:70:3d:1b:16:9f:d0:b4:b0:
                    a6:81:46:04:a8:5c:b2:a2:1a:31:91:a9:01:82:9b:
                    7d:2d:0b:6c:1d:be:bd:b0:6e:3a:22:52:35:4b:d5:
                    95:ed:ae:73:fa:92:3e:a5:88:05:4a:bc:91:c5:b4:
                    68:c0:56:25:d0:41:6d:48:c8:8a:16:07:4d:8a:da:
                    5e:38:cd:03:f2:dd:54:62:05:1d:90:12:ed:55:6d:
                    03:78:24:98:d2:b8:f2:63:26:bb:a8:92:de:29:1c:
                    8f:79:da:bc:dc:48:11:ac:73:89:a2:23:12:02:4a:
                    83:38:b8:31:cd:a7:be:eb:7e:8b:ba:df:54:57:21:
                    73:e6:9d:74:8c:cc:29:a0:4a:1b:b9:f6:b5:36:bb:
                    24:5e:ec:41:96:ac:de:4d:23:05:51:a3:b1:d9:1f:
                    e7:16:a7:9e:9b:24:c1:f9:bf:7e:03:bb:ae:6c:90:
                    2a:69:48:33:6d:bb:f6:e0:e1:a3:7d:b4:7a:a6:77:
                    16:57:b3:b8:51:15:c6:f1:2d:08:7c:c5:ee:3b:60:
                    6c:0a:4c:b2:61:54:d6:bd:89:9f:9a:f9:45:08:62:
                    ec:e7:99:56:c6:45:a6:20:43:68:a1:6c:b6:d9:45:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:44:0B:7B:B0:0B:88:83:23:46:D0:11:F9:48:B0:38:68:9A:BB:EA
            X509v3 Authority Key Identifier:
                keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/pEQLe7ALiIMjRtAR-UiwOGiau-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.108.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:26:dc:3f:3b:d0:02:ce:9b:30:3a:00:16:0f:66:63:30:
         f2:d3:a7:fa:eb:3a:d4:fa:da:e5:a8:4f:6d:56:a2:c8:aa:96:
         2e:08:18:8a:6e:6f:38:d3:dc:bd:be:e4:b5:56:87:34:44:23:
         0c:47:3b:fe:c9:07:99:30:00:38:45:e1:b6:55:e3:22:ee:4b:
         d5:a5:77:53:77:21:a3:52:7b:74:dd:45:e4:e5:64:86:13:c9:
         68:e6:e0:c2:26:2a:85:d2:6a:af:61:f5:f9:a4:ed:e1:60:6e:
         3b:17:8e:80:07:6b:6e:a9:ca:07:39:f7:77:9f:e8:5d:46:04:
         63:46:07:2d:77:41:53:ff:57:21:59:bd:f0:55:fc:7e:a8:87:
         98:88:38:6d:eb:31:24:94:0c:9b:cf:cb:52:80:8a:49:71:5f:
         18:e3:4d:f2:94:51:e2:8a:f6:0c:26:a6:36:46:6d:82:47:80:
         80:d6:9c:9e:c1:a4:24:03:c2:49:56:00:53:58:9c:5a:f9:ce:
         27:75:e2:98:e1:11:6e:b4:b4:46:c8:08:75:bc:63:97:93:b3:
         37:16:4f:f7:fa:00:ed:b1:e2:03:cd:a7:03:cc:27:e0:1f:25:
         7f:c6:a5:eb:35:ae:0d:d4:62:ee:80:db:ae:81:c5:cf:5f:b6:
         04:07:67:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:39 2024 by rpki-client on console-fra.rpki-client.org