Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/CkNXygqC3AyDaWEcQas9Ydj0V_8.roa
File:                     CkNXygqC3AyDaWEcQas9Ydj0V_8.roa (raw, json)
Hash identifier:          VMUHx0aBm+eliv6gC59f6sziaecsLoWU430wez2hoIE=
Subject key identifier:   0A:43:57:CA:0A:82:DC:0C:83:69:61:1C:41:AB:3D:61:D8:F4:57:FF
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       F1
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/CkNXygqC3AyDaWEcQas9Ydj0V_8.roa
Signing time:             Fri 31 May 2024 01:30:27 +0000
ROA not before:           Fri 31 May 2024 01:30:27 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        124.147.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 31 01:30:27 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=0A4357CA0A82DC0C8369611C41AB3D61D8F457FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:35:dc:70:92:8d:a4:81:69:2e:85:b3:82:
                    59:76:03:51:13:7e:e7:16:c6:b1:87:2e:ad:f3:c7:
                    7c:41:b3:e8:0e:83:6e:3e:b2:e3:91:51:3a:95:aa:
                    e9:d2:d6:31:f7:26:c3:90:71:90:6d:52:8b:cc:69:
                    3a:2a:b3:7d:9e:1b:13:37:71:c7:1d:88:f7:25:12:
                    6b:8a:85:08:9b:76:ba:7c:20:53:d1:04:47:0c:ed:
                    ef:7e:60:d2:03:4b:4d:ae:81:60:c3:72:03:fe:9e:
                    ae:cf:bb:6a:53:5b:dc:9b:00:28:96:73:50:dd:63:
                    62:9a:46:77:9d:b4:eb:5b:44:d8:e5:2f:ae:d3:73:
                    2d:29:4d:48:3e:db:45:e1:9a:70:54:e4:ff:37:74:
                    c9:8e:c7:8d:45:fc:35:4f:cc:87:e1:aa:1e:b8:8d:
                    0b:2d:80:e4:4d:d0:ba:5f:36:5b:e3:a2:ec:0e:5b:
                    cb:8c:0b:9b:02:75:34:ef:14:99:80:cf:00:cd:64:
                    04:cc:34:2b:0a:b8:2c:5a:88:9e:89:83:17:5b:7c:
                    42:39:ae:91:5f:d6:d0:c0:b4:02:5e:dc:2c:d2:55:
                    20:30:c1:0e:4e:d1:69:11:53:93:16:a6:d2:aa:4a:
                    e6:25:4d:b1:05:c7:2a:fc:17:18:81:bf:9a:1d:1c:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:43:57:CA:0A:82:DC:0C:83:69:61:1C:41:AB:3D:61:D8:F4:57:FF
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/CkNXygqC3AyDaWEcQas9Ydj0V_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:79:3b:b0:59:c1:df:97:c1:0a:d9:d9:ba:6c:fd:f4:d6:de:
         89:45:31:70:94:f1:53:29:69:ef:7c:15:88:9a:bc:2d:dc:01:
         a9:05:52:9e:a5:96:53:d3:95:68:62:93:90:84:f1:89:39:cd:
         91:42:66:97:d8:38:e2:ab:82:59:ec:0b:d8:9a:f5:29:f4:c3:
         10:77:a2:34:7b:47:c9:f3:f1:d5:65:45:8e:48:fa:1b:05:34:
         3b:2e:91:bf:4d:e9:aa:53:36:43:89:4d:bc:43:14:52:b3:44:
         8a:63:b3:3f:99:2e:4a:82:89:37:ac:7d:31:04:e7:8d:df:d8:
         86:30:19:ce:bc:0d:7e:68:15:6d:ed:47:50:68:5f:46:8b:09:
         85:99:4b:ff:64:a0:12:22:47:12:e0:44:3c:85:ac:d3:df:18:
         6a:bc:8b:da:c7:6e:ac:bc:c1:e5:09:f2:3a:8b:b4:cc:b3:98:
         49:97:0c:8e:3f:a5:db:73:8d:4d:d9:73:3f:9f:98:9d:41:c9:
         19:54:f2:d3:cb:f0:d9:f6:41:73:bf:79:f7:50:43:bb:4d:65:
         8a:f5:7f:84:dd:ee:16:e3:f0:05:df:36:0f:25:87:5a:66:fc:
         6c:d9:9b:85:ec:14:26:f3:b9:8e:ff:d1:a7:6d:a5:89:e8:c8:
         cc:0c:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:25 2024 by rpki-client on console-ams.rpki-client.org