Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/EZGJUZMxecgVBgYpp1v1bvFC-cs.roa
File:                     EZGJUZMxecgVBgYpp1v1bvFC-cs.roa (raw, json)
Hash identifier:          Bl6fumidjjSnksDoTeFPgRX0X3vswHQgyHxb26f0ktk=
Subject key identifier:   11:91:89:51:93:31:79:C8:15:06:06:29:A7:5B:F5:6E:F1:42:F9:CB
Certificate issuer:       /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial:       15
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/EZGJUZMxecgVBgYpp1v1bvFC-cs.roa
Signing time:             Wed 07 Aug 2024 06:09:27 +0000
ROA not before:           Wed 07 Aug 2024 06:09:27 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23784
IP address blocks:        124.150.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
        Validity
            Not Before: Aug  7 06:09:27 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=11918951933179C815060629A75BF56EF142F9CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:5a:af:28:36:dd:e1:22:48:88:17:a4:72:
                    69:b6:1a:27:1d:51:c2:e0:d1:e1:e0:2b:67:d0:de:
                    c2:16:c3:a8:53:06:68:b4:52:16:28:de:26:45:02:
                    28:08:8b:66:20:41:82:3e:2b:d5:c4:e2:3f:b5:48:
                    c1:9d:ec:2b:90:aa:d5:7c:7e:64:1c:51:93:75:38:
                    2c:3d:3e:34:37:8e:88:09:87:79:1d:61:67:32:d1:
                    c5:44:19:18:11:c6:db:7f:6f:bf:ca:2f:d8:d9:c8:
                    5b:24:a6:f5:51:bc:bd:9f:84:01:cb:43:11:74:e2:
                    1b:00:b9:9f:74:d8:8e:e5:b4:21:b9:e3:49:5a:2c:
                    6d:13:1e:03:dd:02:e4:d5:2f:80:e3:a0:16:38:9a:
                    ee:8a:3b:91:4f:e5:52:92:9d:e2:66:f2:eb:ff:ce:
                    29:69:91:7c:cf:02:aa:3d:6e:f1:5a:0d:e8:96:a2:
                    e1:5a:d6:55:0b:7e:62:2e:5a:f6:1f:b5:69:92:cb:
                    bc:d5:88:a1:28:1c:6c:af:43:da:d6:4f:b6:58:42:
                    7b:de:fd:af:34:7d:a3:c4:9f:bc:68:80:31:ec:e8:
                    d4:75:cf:65:25:2b:f5:17:cd:48:b2:e4:22:d3:85:
                    b5:2e:ce:86:1d:45:fe:71:aa:3f:d8:06:bf:38:d6:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:89:51:93:31:79:C8:15:06:06:29:A7:5B:F5:6E:F1:42:F9:CB
            X509v3 Authority Key Identifier:
                keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/EZGJUZMxecgVBgYpp1v1bvFC-cs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:6a:96:ee:5b:48:57:51:25:f5:9c:49:27:81:d0:a1:85:
         f0:de:c6:f0:01:e7:be:9b:4c:c9:02:7d:bf:47:b0:24:3e:31:
         17:fe:f1:c8:2b:11:96:7b:88:2f:62:7a:73:40:5a:b1:59:a5:
         46:a1:43:68:80:07:02:ad:3c:7d:ba:7f:62:0b:d7:04:17:60:
         d9:8a:84:24:d4:d0:87:f2:9d:2c:07:f9:76:11:26:3c:ff:33:
         76:23:fe:f7:1d:72:0a:7d:e8:66:59:94:2f:1d:df:3f:dd:1a:
         2c:40:a6:f5:4d:89:4e:a8:c2:8d:31:78:be:57:4c:c2:81:8b:
         9c:8c:2b:af:2d:64:4c:8c:34:3e:19:aa:9b:e4:a8:20:24:01:
         d7:a0:df:85:dd:77:da:4f:8f:2f:80:a1:da:dc:61:58:8e:be:
         54:c7:a7:a6:a8:83:70:12:df:ae:0e:72:7a:ff:f6:03:e3:75:
         af:fe:af:7e:14:b6:ae:33:f0:95:66:f1:48:1d:f8:26:4a:51:
         32:ae:55:09:cb:56:38:af:f3:09:20:77:08:1a:65:2e:1d:65:
         80:69:fe:fb:6b:92:14:31:02:75:2c:2e:55:ad:f0:e2:95:11:
         b0:be:0d:8b:61:b9:42:13:ff:a7:50:b0:ad:5e:0e:65:8a:72:
         d2:55:7b:c2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRDY5
MDAyRDBFOEI3RUQyQzNEMUQ1RDA3QUU2OTIyQzc0OTdGMDJEMB4XDTI0MDgwNzA2
MDkyN1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMTE5MTg5NTE5MzMxNzlD
ODE1MDYwNjI5QTc1QkY1NkVGMTQyRjlDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ3hWq8oNt3hIkiIF6RyabYaJx1RwuDR4eArZ9DewhbDqFMGaLRS
FijeJkUCKAiLZiBBgj4r1cTiP7VIwZ3sK5Cq1Xx+ZBxRk3U4LD0+NDeOiAmHeR1h
ZzLRxUQZGBHG239vv8ov2NnIWySm9VG8vZ+EActDEXTiGwC5n3TYjuW0IbnjSVos
bRMeA90C5NUvgOOgFjia7oo7kU/lUpKd4mby6//OKWmRfM8Cqj1u8VoN6Jai4VrW
VQt+Yi5a9h+1aZLLvNWIoSgcbK9D2tZPtlhCe979rzR9o8SfvGiAMezo1HXPZSUr
9RfNSLLkItOFtS7Ohh1F/nGqP9gGvzjWrpECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQRkYlRkzF5yBUGBimnW/Vu8UL5yzAfBgNVHSMEGDAWgBS9aQAtDot+0sPR1dB6
5pIsdJfwLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTc3L3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhTWDhDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhT
WDhDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NzcvRVpHSlVaTXhlY2dWQmdZcHAxdjFidkZDLWNzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3yWmDANBgkqhkiG9w0BAQsFAAOCAQEAGX9qlu5bSFdRJfWcSSeB0KGF8N7G
8AHnvptMyQJ9v0ewJD4xF/7xyCsRlnuIL2J6c0BasVmlRqFDaIAHAq08fbp/YgvX
BBdg2YqEJNTQh/KdLAf5dhEmPP8zdiP+9x1yCn3oZlmULx3fP90aLECm9U2JTqjC
jTF4vldMwoGLnIwrry1kTIw0Phmqm+SoICQB16Dfhd132k+PL4Ch2txhWI6+VMen
pqiDcBLfrg5yev/2A+N1r/6vfhS2rjPwlWbxSB34JkpRMq5VCctWOK/zCSB3CBpl
Lh1lgGn++2uSFDECdSwuVa3w4pURsL4Ni2G5QhP/p1CwrV4OZYpy0lV7wg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:49 2024 by rpki-client on console-ams.rpki-client.org