Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/57mz_-PwaIFAO06vCLq6Wd-vkfM.roa
File:                     57mz_-PwaIFAO06vCLq6Wd-vkfM.roa (raw, json)
Hash identifier:          RrvS9cRbWb2IAG7KfoHJVTp15ADcpAVNHT9R2YvFwd0=
Subject key identifier:   E7:B9:B3:FF:E3:F0:68:81:40:3B:4E:AF:08:BA:BA:59:DF:AF:91:F3
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       3B
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/57mz_-PwaIFAO06vCLq6Wd-vkfM.roa
Signing time:             Wed 31 Jul 2024 01:28:44 +0000
ROA not before:           Wed 31 Jul 2024 01:28:44 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     131921
IP address blocks:        153.122.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Jul 31 01:28:44 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=E7B9B3FFE3F06881403B4EAF08BABA59DFAF91F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:0c:60:a8:8a:fe:b0:a0:58:f8:b9:54:d5:
                    2e:fe:fe:13:5b:97:ab:82:71:e1:48:39:64:4f:94:
                    da:72:57:eb:8c:18:b1:df:84:e3:33:ae:30:9f:a2:
                    dc:7c:1d:25:26:2b:fc:68:6d:1b:05:c2:21:29:2b:
                    b0:7a:1a:be:09:49:02:34:13:9b:99:6a:38:42:49:
                    22:02:01:91:af:9a:14:83:fa:18:14:74:b9:04:3d:
                    f8:c1:72:d2:ab:5d:b5:c8:96:2e:1a:bf:b5:14:c8:
                    d0:e9:f8:00:5c:0a:2b:1f:84:e8:f0:93:2c:79:7a:
                    80:30:5a:ff:8e:a3:5c:52:5e:ca:9b:ca:e0:2a:0a:
                    0a:b6:57:f0:a3:c7:ac:09:0e:f3:ff:e1:38:ea:c4:
                    16:42:02:79:1f:e0:6b:d8:12:cb:8c:1b:20:2f:63:
                    d7:b7:32:ce:6c:63:49:21:9d:12:52:9e:56:d0:1a:
                    67:8b:47:ed:fe:e8:27:a9:8c:87:7a:a5:ce:74:4e:
                    c8:68:b2:96:a1:c4:90:fb:44:77:75:9a:dd:6c:9d:
                    b7:be:e2:ab:6a:53:da:8c:b5:83:f2:cb:45:12:9a:
                    2a:d9:ca:5e:d3:61:1c:79:b0:01:0a:fb:07:d0:f2:
                    f1:fa:93:e3:f6:28:9c:44:1e:af:3a:ad:7e:07:48:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B9:B3:FF:E3:F0:68:81:40:3B:4E:AF:08:BA:BA:59:DF:AF:91:F3
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/57mz_-PwaIFAO06vCLq6Wd-vkfM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:c3:c5:04:d5:58:a2:54:69:3f:1c:20:d9:cb:81:ac:5c:
         8d:3c:45:50:a8:be:18:85:a7:f1:9d:18:95:fc:51:ee:b1:d7:
         16:f6:dd:5c:ae:20:0d:33:ed:7d:59:c4:74:c0:af:e1:69:b0:
         5f:89:3d:bc:3a:2f:96:0c:4f:02:71:55:65:14:c9:60:4f:85:
         de:cd:0c:bb:8a:90:4d:75:00:a4:43:e7:69:55:0a:b6:ff:6b:
         cd:05:83:2b:3b:38:8d:0e:fb:0c:f4:3a:b3:95:cb:d8:ad:ec:
         a8:1d:5a:33:59:bf:13:ab:2e:87:ce:ed:0a:3d:0b:fa:52:ff:
         3d:9b:0c:59:b3:38:98:8c:32:04:a5:5c:13:61:28:c3:8a:f7:
         98:d1:a6:b3:90:fe:26:6b:65:ed:0f:94:70:db:af:9d:98:25:
         6e:fb:9e:bc:a8:47:3a:b0:db:75:20:3a:36:c4:61:85:60:50:
         71:cb:7a:18:77:21:bf:b3:16:d6:d0:f8:31:61:cf:9b:40:e2:
         b7:59:e7:5d:ee:f3:2a:dc:36:fb:19:66:6b:d7:2a:aa:bf:d7:
         0a:a3:d2:67:40:ef:ad:30:74:a9:b2:7d:4e:55:5c:c8:cf:4d:
         01:b3:7b:b3:2f:0f:8e:82:c3:eb:66:61:c4:0f:60:28:b2:79:
         77:96:a1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:01 2025 by rpki-client