Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/L1aoPhmfbS4Ba2Vgx2MOprMQriQ.roa
File:                     L1aoPhmfbS4Ba2Vgx2MOprMQriQ.roa (raw, json)
Hash identifier:          iX2p4BJ690D2C3Q5MrBP28bASs0kSVzXs4TK44fXiXc=
Subject key identifier:   2F:56:A8:3E:19:9F:6D:2E:01:6B:65:60:C7:63:0E:A6:B3:10:AE:24
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       23
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/L1aoPhmfbS4Ba2Vgx2MOprMQriQ.roa
Signing time:             Sat 03 Aug 2024 02:01:45 +0000
ROA not before:           Sat 03 Aug 2024 02:01:45 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        115.146.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:45 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=2F56A83E199F6D2E016B6560C7630EA6B310AE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:dc:cd:7d:19:88:43:37:31:5c:24:c1:bd:
                    ab:af:1d:1e:84:eb:a7:2c:eb:ed:ed:9b:27:0c:77:
                    d6:03:2c:46:39:b7:50:ca:2d:6e:1e:e9:e0:ba:12:
                    65:c6:20:77:a1:ad:15:e6:70:a5:1f:13:fd:c4:14:
                    6e:fa:16:48:df:68:3b:7e:6d:69:8b:e3:52:e3:5e:
                    43:f0:2d:e4:27:88:77:8c:f4:af:bb:44:94:df:31:
                    77:47:98:ed:c5:6d:f4:20:7f:08:bb:3c:f4:24:7b:
                    00:9e:10:2e:b3:bf:f0:71:e4:f0:64:b8:f3:c5:f3:
                    ad:a1:bc:84:b2:f4:64:d0:03:64:e2:d3:a7:db:49:
                    fe:67:d0:f4:0a:93:9d:7a:46:25:1a:eb:63:37:29:
                    82:1a:0c:54:ef:18:cf:75:7e:6f:34:bc:fd:dd:58:
                    64:01:e4:f3:35:72:1e:b1:f3:cc:2a:b4:21:14:43:
                    ea:5f:3c:17:8c:58:75:5d:ca:04:c4:a2:8f:5b:6a:
                    07:b2:f9:46:7f:d0:cd:79:58:f0:fa:64:29:63:6e:
                    97:23:da:9b:56:28:9c:d8:ab:66:03:6c:7a:69:19:
                    02:09:fe:3e:d9:09:90:61:6d:d8:e5:f9:aa:29:a2:
                    0f:8f:42:be:81:23:db:f7:8f:2f:26:7e:26:59:a8:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:56:A8:3E:19:9F:6D:2E:01:6B:65:60:C7:63:0E:A6:B3:10:AE:24
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/L1aoPhmfbS4Ba2Vgx2MOprMQriQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.146.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:08:2e:9a:04:ea:ff:70:1e:fd:c0:18:18:1b:f1:f0:43:3f:
         c0:d1:2d:3d:5c:6d:d0:fb:2e:ef:86:f9:c7:35:fc:27:4c:7e:
         e2:e4:d8:a0:31:f9:58:87:4c:5d:e2:66:85:70:4a:26:7b:b9:
         3e:b7:75:1b:67:cf:ab:1a:e4:1d:b3:55:87:51:fc:a1:8a:a5:
         74:81:36:cc:a7:86:24:ea:8d:a3:97:e6:25:aa:4b:d8:8f:9b:
         fd:37:63:a6:c9:ba:4b:9e:e1:13:b3:21:b5:2f:ad:5b:5d:ed:
         25:b0:81:ed:60:ea:b9:57:e4:9a:9a:19:88:58:78:79:57:db:
         3b:de:af:4d:58:4c:90:dd:f9:7d:07:fe:09:25:82:4e:94:b1:
         19:a9:5c:10:47:92:aa:05:dd:56:5e:71:3c:33:f3:b1:d3:2d:
         85:66:1c:ae:cb:77:ff:0a:88:7c:03:fe:c9:39:d2:3e:b5:f2:
         6d:d4:3c:c9:9f:a5:29:85:26:56:07:f6:29:23:94:7e:cf:d1:
         6c:2f:e0:31:45:41:cb:7b:ca:3a:3a:15:cd:6d:a2:b2:e1:57:
         de:01:a3:93:0d:8d:c4:08:70:22:24:42:29:a8:9f:9d:c2:62:
         b5:bf:af:9d:4b:3b:2f:30:7b:66:81:d5:7f:15:de:b5:a0:83:
         b9:60:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org