Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/TuyFxiKsEDyX5GgDtgGG75pHnqg.roa
File:                     TuyFxiKsEDyX5GgDtgGG75pHnqg.roa (raw, json)
Hash identifier:          w681eDhAQ6RgwU34gDsIHOE+sGoGTxTMSHn+xtMojAw=
Subject key identifier:   4E:EC:85:C6:22:AC:10:3C:97:E4:68:03:B6:01:86:EF:9A:47:9E:A8
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       71
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/TuyFxiKsEDyX5GgDtgGG75pHnqg.roa
Signing time:             Sat 31 Aug 2024 01:29:08 +0000
ROA not before:           Sat 31 Aug 2024 01:29:08 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     7684
IP address blocks:        133.242.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug 31 01:29:08 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4EEC85C622AC103C97E46803B60186EF9A479EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:0b:91:d0:d0:49:07:cd:bc:95:40:cd:9f:
                    9f:97:70:48:1d:58:4b:a6:d1:c6:a2:cd:db:14:87:
                    8d:8e:9e:13:91:ab:70:46:45:6c:99:f5:1f:d0:db:
                    3f:3b:17:3f:f3:11:3d:53:1b:cf:5f:e3:cc:3d:e1:
                    35:55:69:43:df:10:26:b1:b5:bd:02:4e:6b:61:f8:
                    52:6d:29:4d:f4:04:0e:8c:76:c3:62:fe:ee:06:21:
                    c7:7e:79:f1:8f:7d:3d:27:27:b7:28:e5:65:f3:44:
                    15:86:c8:55:fc:fe:d7:b8:5e:50:bd:0f:85:80:ea:
                    9b:36:e4:00:0b:d6:b2:fe:a0:f1:1f:0c:10:8a:68:
                    73:56:93:72:4f:9c:b8:53:5e:64:49:86:4a:94:ca:
                    5e:a1:af:88:d5:bc:f0:26:d9:b0:5d:db:0c:0d:99:
                    f2:48:17:40:f0:fb:ad:84:16:08:de:5b:fd:9b:4e:
                    cf:df:61:22:21:72:63:26:c7:41:52:ed:62:1c:4a:
                    5a:c4:e0:f9:c3:e5:06:8c:ce:65:36:46:56:18:58:
                    4c:af:29:6c:84:17:92:ab:85:1e:2f:29:4a:90:89:
                    72:94:df:1b:af:72:5b:28:f3:56:d9:cd:d7:85:72:
                    33:85:d9:a7:ab:08:ab:82:2a:e8:a8:55:45:6e:da:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:85:C6:22:AC:10:3C:97:E4:68:03:B6:01:86:EF:9A:47:9E:A8
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/TuyFxiKsEDyX5GgDtgGG75pHnqg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:90:65:3e:46:8e:9a:1a:01:ac:14:91:0e:e3:7f:ca:39:b4:
         7a:09:22:a3:1f:b5:18:05:07:9e:d1:83:48:06:02:50:80:bd:
         0b:07:fb:8c:f6:35:85:cc:de:e1:1b:1f:2b:54:7d:bc:d0:34:
         dc:ef:5a:e3:d0:b8:f1:7e:d4:b3:b8:54:97:1a:2f:7d:a7:75:
         40:8c:ec:40:1d:ab:ee:93:84:af:5b:23:76:ea:13:92:c4:22:
         ca:c7:76:54:f6:2d:ff:81:83:dc:47:87:fb:05:5f:00:00:8d:
         73:9f:89:13:0f:d4:f0:8d:86:21:8f:c1:13:0b:38:4d:2d:1a:
         2b:d9:17:77:8b:e0:10:7d:32:43:ad:33:47:c8:28:48:a3:f0:
         89:76:0d:e1:a6:08:ae:bc:c2:2b:1c:68:1e:7d:bd:34:76:29:
         48:af:79:88:89:91:55:69:7c:07:24:d0:de:2b:49:8b:c5:15:
         e1:a3:91:0e:0a:69:66:c8:91:97:2f:bb:c2:4c:90:78:56:92:
         69:d7:19:71:4e:04:98:5a:d9:90:a5:5a:f3:2e:45:8b:3f:59:
         80:ad:e2:74:d7:d7:b8:a7:23:05:83:a5:98:93:28:30:1d:4a:
         d0:6f:e2:42:a1:df:90:12:36:48:7a:5f:81:8b:2a:42:5e:21:
         84:c2:fd:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:35 2025 by rpki-client