Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LKUBNiSAwAVr_VakupXY7j80sM4.roa
File:                     LKUBNiSAwAVr_VakupXY7j80sM4.roa (raw, json)
Hash identifier:          H7xeEWQe5DKiOjxv/04HG960dhUy4MjddlkEKML7DHQ=
Subject key identifier:   2C:A5:01:36:24:80:C0:05:6B:FD:56:A4:BA:95:D8:EE:3F:34:B0:CE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02ED
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LKUBNiSAwAVr_VakupXY7j80sM4.roa
Signing time:             Fri 11 Oct 2024 01:16:50 +0000
ROA not before:           Fri 11 Oct 2024 01:16:50 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        36.52.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 11 01:16:50 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=2CA501362480C0056BFD56A4BA95D8EE3F34B0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:8d:37:1e:39:2d:87:9e:8a:82:fa:0f:fc:
                    db:3f:d3:64:6a:22:db:95:3b:f9:d3:2d:5c:38:22:
                    25:b5:6c:1e:a2:88:ea:98:4d:f3:08:58:64:c6:01:
                    8e:5c:9f:97:9d:47:3a:81:df:7a:1b:4a:05:ef:32:
                    84:8f:dc:7a:67:74:92:26:4b:c8:67:2d:1b:63:11:
                    80:8f:f5:8f:53:66:b4:aa:a9:46:68:dc:b0:94:48:
                    80:ec:1b:f9:11:b7:bd:e8:e8:88:30:6e:be:96:4a:
                    aa:3d:bd:df:6e:7b:cd:f9:e6:92:0e:2b:43:10:99:
                    98:45:61:6f:e6:1b:e9:f7:c5:dc:4b:cc:af:44:ed:
                    c0:04:95:9f:69:3d:60:4e:ec:de:c9:93:25:30:b6:
                    4b:c8:10:b6:ed:c7:8f:7a:d2:86:b0:a4:00:75:8d:
                    c9:11:3f:7d:e6:c6:39:3c:07:4e:96:ef:88:11:67:
                    37:70:ec:08:e2:10:61:25:05:42:56:07:22:d0:ca:
                    4e:b1:82:bd:ac:92:3f:32:79:f5:44:af:0f:09:2a:
                    79:87:a5:e0:e6:46:f1:96:a4:05:ec:35:72:27:38:
                    d4:4e:2c:5f:d1:cf:ea:30:aa:5a:7a:29:d4:8c:92:
                    10:d9:2c:e0:e2:b6:49:60:94:b8:3b:5e:4a:f6:ce:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A5:01:36:24:80:C0:05:6B:FD:56:A4:BA:95:D8:EE:3F:34:B0:CE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LKUBNiSAwAVr_VakupXY7j80sM4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:49:db:90:cc:f1:eb:4c:c4:37:40:b3:75:7c:7a:15:ad:
         df:5c:bc:14:c2:73:af:6c:69:98:f0:e9:3f:99:ae:54:eb:d1:
         14:4d:76:0c:5d:3b:2d:d9:6c:7f:af:35:8c:6e:e3:06:80:b1:
         ef:f4:f7:fc:3d:1d:8f:00:ce:54:b4:e8:3e:c7:b8:f0:67:9e:
         00:05:3c:21:c4:f1:64:11:d1:30:dd:e9:d0:f5:8f:33:fa:3f:
         8b:11:21:52:c2:a2:c4:07:96:7a:a6:90:2f:83:1c:27:af:b7:
         f3:06:8c:15:7c:34:d2:02:df:f9:5d:56:eb:08:81:52:59:d0:
         52:b2:90:58:fa:a0:0a:b2:5b:68:e6:e8:df:b2:90:5b:96:b0:
         32:9c:bf:43:6b:f0:26:e3:f1:02:b8:a0:54:1c:9d:17:28:11:
         f1:01:db:e2:2a:f5:0c:0a:01:90:5e:c0:0d:d0:2e:d2:65:99:
         1d:00:6a:f5:a0:d8:3f:e9:b9:a6:5f:38:72:3f:63:12:c5:fe:
         74:e7:61:55:9f:e7:6f:21:39:51:e3:61:8b:67:09:f2:e0:8d:
         4a:65:aa:2b:76:e1:b6:f4:60:e6:14:e2:b8:08:1d:79:44:c5:
         a6:05:7d:fd:58:6a:5f:7a:d7:4a:51:e1:ee:77:8d:77:0f:09:
         1b:55:0b:63
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDEwMTEw
MTE2NTBaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJDQTUwMTM2MjQ4MEMw
MDU2QkZENTZBNEJBOTVEOEVFM0YzNEIwQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpto03Hjkth56KgvoP/Ns/02RqItuVO/nTLVw4IiW1bB6iiOqY
TfMIWGTGAY5cn5edRzqB33obSgXvMoSP3HpndJImS8hnLRtjEYCP9Y9TZrSqqUZo
3LCUSIDsG/kRt73o6Igwbr6WSqo9vd9ue8355pIOK0MQmZhFYW/mG+n3xdxLzK9E
7cAElZ9pPWBO7N7JkyUwtkvIELbtx4960oawpAB1jckRP33mxjk8B06W74gRZzdw
7AjiEGElBUJWByLQyk6xgr2skj8yefVErw8JKnmHpeDmRvGWpAXsNXInONROLF/R
z+owqlp6KdSMkhDZLODitklglLg7Xkr2zvORAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULKUBNiSAwAVr/VakupXY7j80sM4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0xLVUJOaVNBd0FWcl9WYWt1cFhZN2o4MHNNNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAkNN4wDQYJKoZIhvcNAQELBQADggEBAC8ySduQzPHrTMQ3QLN1fHoVrd9c
vBTCc69saZjw6T+ZrlTr0RRNdgxdOy3ZbH+vNYxu4waAse/09/w9HY8AzlS06D7H
uPBnngAFPCHE8WQR0TDd6dD1jzP6P4sRIVLCosQHlnqmkC+DHCevt/MGjBV8NNIC
3/ldVusIgVJZ0FKykFj6oAqyW2jm6N+ykFuWsDKcv0Nr8Cbj8QK4oFQcnRcoEfEB
2+Iq9QwKAZBewA3QLtJlmR0AavWg2D/puaZfOHI/YxLF/nTnYVWf528hOVHjYYtn
CfLgjUplqit24bb0YOYU4rgIHXlExaYFff1Yal9610pR4e53jXcPCRtVC2M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org