Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/LAUMjPelZQrvZ41jdQLcbvcS8uA.roa
File:                     LAUMjPelZQrvZ41jdQLcbvcS8uA.roa (raw, json)
Hash identifier:          X9SlYNAEbAhHo9wgS73MfkHrHkGnFKlY6aySb26m8XI=
Subject key identifier:   2C:05:0C:8C:F7:A5:65:0A:EF:67:8D:63:75:02:DC:6E:F7:12:F2:E0
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       E3
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LAUMjPelZQrvZ41jdQLcbvcS8uA.roa
Signing time:             Thu 29 Feb 2024 01:29:42 +0000
ROA not before:           Thu 29 Feb 2024 01:29:42 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        211.14.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Feb 29 01:29:42 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=2C050C8CF7A5650AEF678D637502DC6EF712F2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:c3:47:ae:dd:c7:9c:ed:e8:08:2d:06:a3:
                    67:4d:06:79:60:06:de:96:fa:f9:1e:80:b0:40:77:
                    fd:bc:6f:5c:38:1e:fd:2a:48:d9:bb:48:d8:a1:d0:
                    eb:1e:d5:be:ad:40:08:3a:6f:1f:ca:e4:ff:13:b6:
                    08:de:3d:02:9f:6e:36:4a:85:64:d6:ba:41:8d:53:
                    74:4f:09:c4:ad:bc:65:21:95:b7:48:d2:00:9d:a2:
                    89:12:cb:4b:22:62:8f:d6:2e:80:28:84:fc:77:1c:
                    3a:24:f0:f5:47:26:e1:7c:da:46:a3:07:3b:2c:d7:
                    a1:07:7b:0e:a6:56:e0:8d:a0:55:9f:3d:3b:c7:44:
                    c3:31:9f:1b:a0:c1:2a:75:d0:87:25:a7:c2:b5:71:
                    4b:cc:79:86:24:20:60:a7:d5:d5:2a:8e:04:63:d4:
                    fe:e9:4b:f5:14:36:f2:1f:7b:78:a8:96:94:5a:eb:
                    8e:8a:39:de:7d:09:09:be:69:84:5a:2f:4a:e3:b6:
                    6a:66:c2:c0:b4:84:29:e3:b8:90:87:c1:e4:7a:54:
                    fe:28:67:ab:c7:ed:7a:a0:00:f4:49:c8:80:e4:a1:
                    88:f0:3b:4b:2a:7a:f6:6e:fb:12:87:db:e1:ae:68:
                    9a:9d:0e:d7:91:cb:4e:1f:a9:42:bc:c1:ad:75:bf:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:05:0C:8C:F7:A5:65:0A:EF:67:8D:63:75:02:DC:6E:F7:12:F2:E0
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LAUMjPelZQrvZ41jdQLcbvcS8uA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:fc:b6:aa:88:2a:38:0e:bf:b2:0c:20:f9:69:e7:bb:d2:
         4a:40:f9:7f:75:41:22:1d:65:88:1a:cf:a2:ab:1e:38:f5:88:
         34:d6:d7:89:1e:bd:97:df:68:15:0c:0d:ac:69:a6:f9:99:eb:
         a9:9a:78:3a:1a:08:48:f0:b4:1b:78:e6:ac:02:db:26:4e:09:
         e5:fe:c8:9c:89:42:ce:02:4e:e0:a5:fd:8f:e9:64:fa:f0:6e:
         f2:0d:12:36:b9:d4:38:5d:89:0e:6a:6c:e8:81:6e:e3:12:33:
         0b:2d:f4:12:4d:90:b3:b0:a5:20:64:04:bf:44:34:9d:fc:a8:
         a8:82:ff:01:89:08:6e:0e:49:3f:7b:b5:24:b3:c8:f5:4b:9c:
         33:3a:bb:ad:66:b6:4c:51:26:a5:6b:7d:92:60:a7:a7:67:cf:
         74:02:15:0a:9e:48:4f:e4:30:6a:ed:7b:3e:fc:d6:47:45:a9:
         1c:0b:be:99:97:14:7a:f6:e6:5a:60:02:85:2f:c0:ce:de:40:
         43:ee:5b:fe:ec:13:95:61:62:3f:dd:90:5a:df:47:4b:1e:db:
         be:e6:16:a8:b8:f8:f3:7c:05:0c:60:75:aa:29:00:a6:1b:ad:
         73:ff:29:d8:66:70:9d:c0:a6:af:14:83:8e:15:c9:4a:15:d3:
         66:30:6d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org