Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/fEgnLn25duPyZjAVozs_UO7SWAE.roa
File:                     fEgnLn25duPyZjAVozs_UO7SWAE.roa (raw, json)
Hash identifier:          5qCRMOhaRsRlb3h02RwgowJHAVnXRTiKIuroZFag2pM=
Subject key identifier:   7C:48:27:2E:7D:B9:76:E3:F2:66:30:15:A3:3B:3F:50:EE:D2:58:01
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       58
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/fEgnLn25duPyZjAVozs_UO7SWAE.roa
Signing time:             Sun 01 Oct 2023 01:28:35 +0000
ROA not before:           Sun 01 Oct 2023 01:28:35 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        133.242.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Oct  1 01:28:35 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7C48272E7DB976E3F2663015A33B3F50EED25801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:33:3e:0d:a0:3a:61:3d:04:45:ae:e0:75:
                    2e:35:c5:85:5a:ce:0e:7d:48:08:01:d6:d4:09:91:
                    e4:71:cc:ec:dc:93:e1:8b:0e:91:53:98:38:5a:13:
                    74:70:ae:1c:b7:3c:ae:bb:fe:26:6f:89:73:ed:89:
                    56:ff:b1:7c:b2:7f:8b:97:88:8a:ed:6e:73:a2:c5:
                    72:24:17:ab:ad:52:a9:62:52:0e:8a:11:61:d4:c5:
                    6e:df:f6:30:39:99:b0:52:bd:fe:e8:56:5b:95:ef:
                    7b:51:91:a2:9f:a0:2f:08:2a:64:32:ab:36:12:82:
                    17:d1:ca:7b:d0:4b:6f:19:1c:cc:d3:4c:43:cf:e1:
                    a3:79:56:a8:3b:11:a2:85:2a:49:e3:d0:a4:f3:77:
                    9b:2e:67:f8:98:9a:63:8c:61:1e:95:f8:12:bc:f6:
                    a2:0f:57:2c:f3:2b:c3:31:43:ed:ea:3e:f5:16:a1:
                    8b:92:ec:27:d9:6a:59:51:5b:3a:ff:f5:f8:64:c1:
                    75:c8:aa:cd:b1:63:cc:c6:94:02:69:d1:4c:c8:0b:
                    9a:20:95:3f:94:d8:bd:a4:3c:ae:2d:2c:87:40:07:
                    3b:e5:44:d5:7a:61:c7:26:a4:43:c6:3a:2e:b0:5f:
                    3b:29:06:90:6f:57:be:9a:71:7d:a3:50:b2:80:60:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:48:27:2E:7D:B9:76:E3:F2:66:30:15:A3:3B:3F:50:EE:D2:58:01
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/fEgnLn25duPyZjAVozs_UO7SWAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:e5:a8:b0:b7:ca:ab:54:92:b4:4d:b3:07:a5:83:60:74:0d:
         1d:ff:fe:ac:9b:3b:e6:e6:3c:c0:d1:5e:23:51:13:5b:04:76:
         17:93:9a:ee:6c:4d:63:11:e3:1d:6b:d2:06:3d:eb:12:bd:8e:
         75:3a:a9:a8:93:61:5a:2a:ee:87:b0:8d:61:cf:38:d5:15:c2:
         90:8f:da:fc:6a:e4:41:7e:34:c3:82:b4:68:4c:26:82:47:91:
         68:e9:12:bd:f7:6e:b3:fd:d7:5a:50:77:c8:f6:51:59:00:71:
         0d:8b:93:96:4a:43:ac:1a:9a:27:5f:2e:16:b7:f7:5a:55:ae:
         08:98:f4:ee:2f:4d:23:1e:32:35:2e:50:08:3f:9e:d5:1d:27:
         5a:d1:8c:5f:21:a9:2b:53:23:f7:27:6d:17:d4:e9:a7:7d:7c:
         b2:70:04:17:ef:1c:c2:94:7f:49:a7:63:f1:42:13:6c:9c:ac:
         8f:5c:cc:35:c8:c8:86:bf:f2:ca:a3:7d:85:3b:89:6c:af:34:
         e0:b6:4a:35:7e:fb:6f:28:e7:03:cc:c5:81:ba:a7:f8:19:fb:
         5b:b8:70:5b:06:69:64:b7:62:65:76:21:1f:dd:b8:e6:18:cf:
         c6:3b:c0:b2:ab:20:a3:6e:70:15:de:21:f1:e4:2a:a0:61:55:
         90:de:bf:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon May 20 02:37:12 2024 by rpki-client on console-fra.rpki-client.org