Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/BbexY_AJTzojwkg6tLA4pav1pzw.roa
File:                     BbexY_AJTzojwkg6tLA4pav1pzw.roa (raw, json)
Hash identifier:          rtuNLfwGkLuC3Gf1Bbg+QiufxbeqSRAk5B5+0GlvwdM=
Subject key identifier:   05:B7:B1:63:F0:09:4F:3A:23:C2:48:3A:B4:B0:38:A5:AB:F5:A7:3C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0126
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/BbexY_AJTzojwkg6tLA4pav1pzw.roa
Signing time:             Sun 01 Oct 2023 01:28:37 +0000
ROA not before:           Sun 01 Oct 2023 01:28:37 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2497
IP address blocks:        133.137.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:28:37 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=05B7B163F0094F3A23C2483AB4B038A5ABF5A73C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:a1:fc:a1:f1:42:31:30:af:92:53:85:f0:
                    5b:f9:70:bd:1f:07:0e:33:95:63:f4:17:e2:f0:9e:
                    19:4c:b1:d2:79:45:c0:6b:7b:db:27:18:61:f5:29:
                    e0:33:98:59:ef:cc:57:49:48:eb:05:80:b6:65:3e:
                    29:4f:73:bf:fa:a3:f0:30:02:6a:a7:24:79:52:36:
                    fc:73:fa:76:13:4e:ea:d8:31:5d:a0:94:6d:63:dc:
                    53:3d:db:7d:7f:3d:93:ef:04:f7:26:d7:a9:af:5e:
                    d5:40:d3:03:7b:7c:48:17:38:89:75:5a:71:d3:d4:
                    27:88:12:ba:dc:7a:29:45:17:7c:7e:83:7b:c3:ec:
                    97:43:2c:76:aa:c3:c0:0d:b2:ca:da:aa:9c:b3:28:
                    f5:a4:86:44:1c:9e:33:a8:d3:c7:97:e5:92:4f:e1:
                    7c:da:a6:88:ff:55:6c:59:c1:49:41:b7:c3:c1:74:
                    36:ae:2f:1c:fd:c0:95:19:48:33:fc:fa:af:80:f9:
                    a0:ff:38:20:39:38:2b:25:6b:8b:cb:f8:23:71:b6:
                    51:b2:c3:f1:68:4e:87:4e:5d:fd:b1:97:4c:6f:e2:
                    63:4f:b8:cb:44:aa:f4:24:52:ad:8c:d5:7f:55:0a:
                    7e:f1:1d:eb:3e:fe:42:d1:6a:e9:fa:0d:ac:b3:37:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B7:B1:63:F0:09:4F:3A:23:C2:48:3A:B4:B0:38:A5:AB:F5:A7:3C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/BbexY_AJTzojwkg6tLA4pav1pzw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:b2:fb:8f:81:1a:45:ba:fc:04:b0:01:2c:0e:40:9b:eb:
         68:03:12:a3:f8:33:21:c1:5a:b6:b1:b2:b8:b8:88:1b:5a:39:
         e2:d5:09:82:6f:ce:32:66:ac:59:bb:be:a3:7e:ca:7b:6c:e2:
         b5:b5:38:d2:e3:54:6c:46:e2:6a:17:bc:16:f4:cc:e6:ef:a2:
         e0:16:52:fc:f3:71:5b:f6:03:3c:81:ac:36:e4:fd:fc:cb:2f:
         20:03:b1:c4:3e:2c:34:d4:e1:9b:19:a1:52:f7:41:d9:40:24:
         53:d9:55:ec:b6:d5:3e:56:c8:e0:0e:e0:37:1a:27:e5:02:6c:
         69:6a:10:65:31:10:27:52:e0:c0:7e:fe:b9:1b:12:17:86:9b:
         ac:8d:a7:38:2a:8c:e7:26:a3:51:46:dd:72:67:1c:49:c0:06:
         3b:2e:9b:83:df:aa:1d:23:30:eb:25:c4:a5:46:0c:e6:66:be:
         bc:0c:2d:46:a9:3f:9f:a5:b9:2d:03:cb:4a:f3:53:92:3d:34:
         ae:33:46:bb:ca:37:6f:01:94:06:93:05:17:76:cc:61:d8:a9:
         9e:ea:35:60:ce:ef:d7:6c:14:5b:95:b0:a7:84:5c:e9:bb:41:
         bb:3c:83:e9:46:09:f0:a0:98:ab:21:a6:b6:d7:c8:91:4e:c3:
         f4:ad:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:46 2024 by rpki-client on console-fra.rpki-client.org