Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/lzA5ljH63_UWJ2J7rslWRZbrvqo.roa
File:                     lzA5ljH63_UWJ2J7rslWRZbrvqo.roa (raw, json)
Hash identifier:          IpX1jYCWw7yogL8FgmJQA1YJJ9AomOsXikhetMjD6tY=
Subject key identifier:   97:30:39:96:31:FA:DF:F5:16:27:62:7B:AE:C9:56:45:96:EB:BE:AA
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       1E
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/lzA5ljH63_UWJ2J7rslWRZbrvqo.roa
Signing time:             Fri 12 Jan 2024 04:06:18 +0000
ROA not before:           Fri 12 Jan 2024 04:06:18 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     131923
IP address blocks:        133.88.94.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 12 04:06:18 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=9730399631FADFF51627627BAEC9564596EBBEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e4:15:a7:2f:ea:c4:e1:44:3a:be:d7:1f:aa:
                    e5:c7:50:56:08:82:30:0e:fc:ea:b2:15:62:73:00:
                    3d:ac:de:85:65:12:08:ad:35:79:68:7a:d4:c2:47:
                    a0:31:0d:d1:9d:6a:69:89:73:f2:62:53:41:a4:ae:
                    cc:4e:c8:d5:1a:5c:8e:b2:83:60:b2:6d:17:2d:e4:
                    52:e3:47:96:b7:4f:33:bb:bc:d3:1a:6e:90:2f:b6:
                    a7:21:4e:d7:65:36:98:6b:07:a4:c2:71:fb:91:a3:
                    94:4e:99:9c:87:ac:1a:4f:58:d9:3d:b4:98:e5:54:
                    28:56:a3:70:e8:64:16:01:03:f6:7f:d2:0e:7a:c1:
                    79:e6:20:51:21:a4:c3:50:eb:21:e4:ef:9e:07:e3:
                    0d:4d:30:9f:15:e3:37:cd:f0:c3:63:b1:b3:71:a1:
                    e0:0d:11:5c:05:10:1b:ee:04:56:74:64:be:35:46:
                    a9:29:dd:e5:c3:1b:ac:2d:4e:6f:56:47:fb:16:fd:
                    ab:f5:3f:5f:86:5a:7b:e4:a9:b4:47:ee:e8:8b:10:
                    8a:c5:2a:89:5e:1b:97:62:dc:0d:94:84:86:9c:ef:
                    e0:cd:43:2d:57:c1:17:a3:35:ee:ab:93:ea:ee:8f:
                    90:0c:ba:3a:04:1c:cc:12:47:e1:fa:4a:dd:59:01:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:39:96:31:FA:DF:F5:16:27:62:7B:AE:C9:56:45:96:EB:BE:AA
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/lzA5ljH63_UWJ2J7rslWRZbrvqo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:6b:3a:bb:67:cb:c2:9e:93:76:00:50:97:e6:c6:3f:42:
         d0:eb:ad:8d:b7:73:04:64:1d:bc:4e:6b:83:c3:b7:e0:2e:d9:
         a1:c5:81:e4:da:9f:24:e4:51:6c:8c:4a:cf:e5:16:bc:82:d6:
         ff:b0:46:ad:64:d1:68:5b:f6:2d:47:fe:e1:f6:0b:f3:62:2e:
         4b:dc:ae:cf:60:04:1c:4f:05:07:0d:07:df:b5:17:1f:d3:7a:
         fe:d9:04:dd:2b:7a:c4:39:2e:af:61:21:b5:18:1f:ca:a5:df:
         f3:69:17:7c:3f:17:95:83:b9:0a:bb:9d:08:5e:15:b0:3e:49:
         0b:f7:e2:ef:6f:58:60:45:4e:9c:a3:47:89:93:bd:f2:75:11:
         34:89:03:e8:ec:e0:a0:24:44:d5:dd:18:d9:d9:9b:6a:29:7a:
         f6:29:0f:36:d5:fb:e9:8d:88:8a:0a:24:1d:d3:ee:65:c4:d8:
         3f:b4:a6:34:65:da:44:17:10:c0:6e:3d:c0:ad:d5:03:e1:28:
         69:82:91:20:97:2d:91:c9:95:53:dc:37:62:05:95:6a:2a:1b:
         5a:5b:e4:eb:84:ca:3d:45:ff:94:02:c2:bb:44:0d:b0:b4:6e:
         3c:83:99:d1:ae:68:ec:8e:a1:ef:e0:bd:02:82:ad:fd:74:aa:
         e0:02:3f:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org