Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/kli7G8D_2RNIBStyXSbXW8Z0zxo.roa
File:                     kli7G8D_2RNIBStyXSbXW8Z0zxo.roa (raw, json)
Hash identifier:          J1zdt+NW/EjOb9UzfmJwbcSO18RsKklhwYzwL30UmM0=
Subject key identifier:   92:58:BB:1B:C0:FF:D9:13:48:05:2B:72:5D:26:D7:5B:C6:74:CF:1A
Certificate issuer:       /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial:       11
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/kli7G8D_2RNIBStyXSbXW8Z0zxo.roa
Signing time:             Tue 13 Aug 2024 18:58:42 +0000
ROA not before:           Tue 13 Aug 2024 18:58:42 +0000
ROA not after:            Thu 07 Aug 2025 09:46:37 +0000
asID:                     151382
IP address blocks:        157.15.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Validity
            Not Before: Aug 13 18:58:42 2024 GMT
            Not After : Aug  7 09:46:37 2025 GMT
        Subject: CN=9258BB1BC0FFD91348052B725D26D75BC674CF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:67:20:ae:ce:d5:d3:c2:a4:0f:32:62:a2:e6:
                    57:76:20:53:8e:54:b3:15:86:f1:b5:43:cd:a7:e1:
                    fe:45:58:21:67:60:8a:7a:46:db:db:f4:b0:f1:32:
                    ec:0f:87:8a:1f:08:d4:1c:29:11:d1:4f:4b:43:61:
                    74:ef:6f:8e:db:66:d0:ef:b9:a3:a9:07:9c:7d:be:
                    2c:4b:94:52:f6:27:ae:32:24:6f:01:71:e9:4f:25:
                    f6:b8:50:25:ac:ab:f1:0c:75:95:fc:6d:ef:34:c9:
                    05:2d:c3:b4:4f:c0:03:75:94:e2:ab:ac:9c:da:43:
                    7d:46:31:23:6d:fa:17:0b:57:6f:da:db:74:e4:30:
                    99:52:11:95:11:3d:4c:7f:51:bc:ac:23:5c:66:9a:
                    1f:3b:89:b5:0d:e4:43:93:5c:e0:ce:31:64:67:a4:
                    b1:d9:ab:aa:3c:42:dc:a9:d8:f1:b0:38:7c:23:70:
                    4a:21:3e:70:57:09:a8:87:d0:44:80:d6:32:b9:02:
                    58:d6:2c:f6:25:82:47:a2:4a:75:ce:31:d5:f5:85:
                    4b:30:95:f1:b0:6b:d9:19:eb:78:2b:09:b6:91:ea:
                    b4:85:b9:23:28:e6:14:67:cb:42:5e:ac:45:1e:1a:
                    52:f7:5a:8d:3b:ea:8c:84:c6:15:39:d2:57:01:e7:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:58:BB:1B:C0:FF:D9:13:48:05:2B:72:5D:26:D7:5B:C6:74:CF:1A
            X509v3 Authority Key Identifier:
                keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/kli7G8D_2RNIBStyXSbXW8Z0zxo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:62:a0:d8:f0:dc:52:31:bd:12:00:8a:8c:56:a6:2a:0b:5e:
         83:9c:9c:3e:b5:76:76:a6:22:5b:40:2d:f0:e9:f3:40:d9:e1:
         43:9b:6f:a3:22:01:6f:93:94:eb:ba:21:52:de:ae:52:4a:ee:
         43:93:b1:d8:a3:a6:64:81:11:af:ec:73:51:b7:a7:27:13:8e:
         fb:c8:19:fb:3a:60:23:5e:ff:a8:28:24:e3:e5:b6:09:db:9f:
         a7:3e:46:26:bb:0d:c7:72:1b:27:56:e4:00:74:7d:81:ef:68:
         ce:00:25:b7:f4:c8:98:5a:cf:80:4b:23:4e:4c:1d:5a:5b:67:
         4d:c5:c2:76:71:1b:dd:89:ae:28:59:4c:8e:fe:a6:48:bf:32:
         09:9f:6c:41:18:ab:18:26:ce:95:49:98:e4:6b:89:2f:6c:e8:
         54:75:0d:9d:da:36:1d:b1:99:e2:18:d1:97:c1:f5:51:9f:52:
         5b:a1:32:69:47:36:9a:66:f1:69:48:03:d7:07:b6:f2:dc:60:
         8c:93:71:c4:aa:74:e0:b4:67:7c:bb:2d:bf:e7:58:9d:28:76:
         0c:c5:2c:e4:84:1f:aa:59:e4:e9:f1:b2:93:a0:3f:e3:22:47:
         3c:83:ce:fc:75:cd:5b:bf:0b:86:6d:2a:95:1b:bb:19:5f:8e:
         36:da:71:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org