Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/Zb5pMXfg--CmManj5Qwpn5CKkos.roa
File:                     Zb5pMXfg--CmManj5Qwpn5CKkos.roa (raw, json)
Hash identifier:          eIV46twY5i9xSkrwsrHFEFZ9zt5eGM2y2+fF5jawtIw=
Subject key identifier:   65:BE:69:31:77:E0:FB:E0:A6:31:A9:E3:E5:0C:29:9F:90:8A:92:8B
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       EF
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Zb5pMXfg--CmManj5Qwpn5CKkos.roa
Signing time:             Fri 31 May 2024 01:30:25 +0000
ROA not before:           Fri 31 May 2024 01:30:25 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        124.147.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: May 31 01:30:25 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=65BE693177E0FBE0A631A9E3E50C299F908A928B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:3b:0e:6c:34:49:82:dd:18:26:ec:93:98:
                    03:b6:c8:ff:01:d8:af:aa:f1:90:4e:95:59:6f:61:
                    1e:1d:e1:24:3d:b1:d0:29:d8:fd:fd:50:d7:e9:ea:
                    53:59:e7:3a:f7:60:34:be:a9:8c:f6:94:3a:98:8b:
                    9e:e5:f1:6f:0c:75:d4:95:68:58:1f:72:fb:7c:c3:
                    00:34:32:e9:6e:0b:63:c9:64:b8:6f:58:2a:aa:b0:
                    e0:77:f7:6a:7b:07:a1:b4:57:32:db:b3:5b:88:db:
                    d9:13:10:ed:6a:f7:a3:c9:26:56:cf:d8:3f:a4:ca:
                    93:6e:02:0f:3c:13:e9:b0:d1:9e:d1:b5:b1:93:41:
                    ef:0d:4c:39:9f:9a:ca:77:0c:65:32:9f:d1:7c:35:
                    42:e3:6d:11:a2:02:99:69:72:fa:20:4c:5a:f1:7a:
                    45:28:7d:2e:e6:06:b0:3c:70:5a:ca:67:d2:df:8f:
                    37:0b:98:a5:69:c9:f0:0b:ac:e5:c2:2f:34:4e:0a:
                    ff:84:5f:62:6c:51:d8:cc:2d:e2:69:ce:e2:14:82:
                    0a:7a:83:3a:c9:88:4b:5f:70:da:7c:81:e5:1e:93:
                    e4:3f:9f:be:16:d0:09:91:28:c5:a4:94:5b:8b:10:
                    d5:78:23:22:cf:e8:bd:eb:75:7c:a6:92:bc:7b:ea:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BE:69:31:77:E0:FB:E0:A6:31:A9:E3:E5:0C:29:9F:90:8A:92:8B
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Zb5pMXfg--CmManj5Qwpn5CKkos.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:24:7c:e3:b8:84:ff:ab:9f:7a:d4:a1:f4:af:5b:6e:87:
         c1:a9:ad:40:77:e7:d0:af:f3:55:fe:a3:84:ae:8e:fa:20:3d:
         a0:4a:a8:81:60:b7:6e:70:e3:ee:75:c2:3c:d5:04:a4:37:96:
         c8:2e:28:77:38:6e:b4:d1:78:35:3f:a9:87:58:7d:59:83:8d:
         61:04:5b:e5:6c:4c:e4:3d:19:17:9c:77:64:e8:b3:9f:cd:d9:
         13:41:ba:d3:76:88:57:43:79:49:0c:b1:0a:9b:01:7c:12:1e:
         03:c6:09:d6:c9:40:7d:af:8d:e6:37:8b:bb:08:23:66:9d:b0:
         02:c4:64:13:43:9e:47:0d:73:75:9a:ad:a7:20:53:62:e5:cb:
         5a:53:28:3a:ee:d9:42:4d:b3:51:aa:c1:f3:f3:cf:71:36:b7:
         60:c8:44:88:28:15:ef:ca:0c:0e:5d:ed:ba:7c:5f:b5:44:17:
         01:15:fd:38:01:e5:3d:5d:2e:3a:bd:48:af:29:6c:e5:6c:fe:
         a6:96:86:bb:09:51:8f:c2:c4:16:df:f1:08:47:75:39:c7:2c:
         6f:a5:3e:70:81:ee:e8:ee:7d:62:9d:b3:74:e3:97:76:0d:f5:
         1b:9a:fe:35:bf:06:12:57:1a:b9:df:06:0e:89:c1:ca:98:0c:
         d5:eb:a2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:13 2024 by rpki-client on console-fra.rpki-client.org