Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Eox1nji8fpqJEUovMFtdcid8DBc.roa
File:                     Eox1nji8fpqJEUovMFtdcid8DBc.roa (raw, json)
Hash identifier:          5LYQxslI3sBN068WCe4qzTDuvM7yRpE70QMyCy5eiW8=
Subject key identifier:   12:8C:75:9E:38:BC:7E:9A:89:11:4A:2F:30:5B:5D:72:27:7C:0C:17
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       1B
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Eox1nji8fpqJEUovMFtdcid8DBc.roa
Signing time:             Fri 12 Jan 2024 04:06:17 +0000
ROA not before:           Fri 12 Jan 2024 04:06:17 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     131923
IP address blocks:        133.88.87.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 12 04:06:17 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=128C759E38BC7E9A89114A2F305B5D72277C0C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:15:c1:8d:58:3f:e4:72:a2:36:2c:68:65:
                    1b:73:15:42:da:ab:0c:40:cf:71:a4:5a:ad:84:42:
                    53:c8:3a:0c:95:12:bd:ae:65:c9:00:3b:f9:34:af:
                    5b:2e:73:15:48:8a:d9:d0:44:7d:06:18:20:e3:68:
                    91:f1:01:1e:4e:be:7c:e3:51:9f:72:3b:b5:5a:dc:
                    85:72:3d:3a:86:a2:68:93:4e:0b:59:ff:25:af:c7:
                    16:bb:43:ea:ec:a5:cd:3a:f8:21:25:d8:26:90:c6:
                    14:1f:9d:04:6a:7a:36:e6:b6:5b:f5:e1:2b:ec:74:
                    20:b8:15:17:a0:af:46:c0:fb:a3:b1:5e:8e:01:7b:
                    b4:ea:5b:76:a4:fb:58:ed:a1:d6:b1:d3:f9:51:8b:
                    cd:dc:27:aa:78:b9:3a:20:ed:8b:8f:5c:b4:01:90:
                    de:c6:e0:05:e0:a2:58:30:6d:13:37:21:fd:20:20:
                    5a:e1:b3:53:76:33:03:4f:e3:4c:22:13:d2:dd:fe:
                    b3:78:cf:0e:f4:a9:b6:3e:04:9c:e8:d3:a1:b3:b7:
                    b8:11:f2:eb:47:49:f1:a6:7f:65:16:b7:42:49:20:
                    de:a3:eb:15:40:86:e5:69:5c:12:55:a7:22:6d:e9:
                    b6:08:d2:1d:74:14:28:80:04:40:7f:eb:72:92:78:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8C:75:9E:38:BC:7E:9A:89:11:4A:2F:30:5B:5D:72:27:7C:0C:17
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/Eox1nji8fpqJEUovMFtdcid8DBc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0e:eb:a5:67:c7:14:70:a6:c4:ef:ed:35:96:8c:68:d4:e5:
         d1:e2:32:6d:92:bb:88:bc:f0:45:c0:8a:05:37:3c:3d:24:50:
         ff:af:45:d9:e4:17:38:6c:3a:ed:87:47:40:2e:5c:38:21:76:
         70:7b:ee:34:31:83:b5:36:94:c8:54:2c:e5:23:58:7e:6c:77:
         97:13:05:a1:ec:92:e0:59:9c:56:43:72:d7:eb:ac:f4:db:e4:
         c0:40:d3:2f:37:08:dd:cf:83:1a:4b:10:80:b7:6d:b1:82:54:
         08:62:cd:ce:a2:fa:af:d0:09:df:c6:ed:5c:28:fd:96:94:ce:
         ad:83:7f:98:a8:80:71:66:6f:c3:fc:9c:8d:78:6e:61:39:c4:
         7b:3b:6b:6b:81:8c:a9:43:e7:45:64:2b:5b:72:b8:a0:ca:0b:
         6f:87:f9:98:52:4b:87:f6:c6:a3:6a:19:9d:bd:09:9f:4a:67:
         54:68:a1:76:17:ab:27:20:d1:92:58:6e:07:99:6c:3d:80:97:
         df:62:79:24:9a:91:ae:38:27:12:c6:6a:41:f4:92:f6:6a:ae:
         e1:69:c6:4b:1b:5b:26:40:82:4d:9c:d2:8f:e3:55:f2:0f:df:
         52:c6:34:e0:2e:d9:64:0a:ac:f7:10:09:75:4d:4e:b8:7c:40:
         fd:a4:ae:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org