Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/NPbv5Y53Y9q4ZrWaVWAiTuot0-g.roa
File:                     NPbv5Y53Y9q4ZrWaVWAiTuot0-g.roa (raw, json)
Hash identifier:          jWUGi5sBEqS5eJDPVinJlCfBAxK6+KZlIUyKOyEND5k=
Subject key identifier:   34:F6:EF:E5:8E:77:63:DA:B8:66:B5:9A:55:60:22:4E:EA:2D:D3:E8
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       26
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/NPbv5Y53Y9q4ZrWaVWAiTuot0-g.roa
Signing time:             Sat 31 Aug 2024 01:31:11 +0000
ROA not before:           Sat 31 Aug 2024 01:31:11 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     63782
IP address blocks:        133.186.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: Aug 31 01:31:11 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=34F6EFE58E7763DAB866B59A5560224EEA2DD3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:ce:7f:6d:75:31:96:82:64:ff:be:ca:3e:
                    af:9f:cc:22:5b:77:76:02:79:1f:3b:be:88:94:d6:
                    89:9b:c0:9e:05:5d:9d:48:1b:c2:61:f6:e2:1f:a2:
                    26:22:ae:ad:e1:f4:84:95:bd:0a:11:5e:0f:1f:c3:
                    25:24:9a:4e:29:77:68:4e:34:f4:fe:3a:84:16:51:
                    74:29:17:52:f4:04:e2:f4:dd:d3:43:70:98:7c:ab:
                    05:19:94:34:8f:4a:06:fb:3f:be:30:6a:fc:d6:e3:
                    45:ef:34:46:1b:01:c1:a9:c1:a9:4f:bf:5b:74:3e:
                    09:74:a6:14:14:5f:4f:f9:00:7a:c8:d6:6c:65:84:
                    9b:da:74:85:98:6c:a8:9b:ef:3d:c7:05:34:d4:f4:
                    26:fe:f1:73:b2:92:00:2a:49:74:c7:05:66:88:25:
                    ce:87:7f:86:bc:bb:61:64:bc:7f:d5:7e:26:a4:72:
                    5d:7f:32:e7:25:71:38:db:8e:ef:12:bf:c9:b9:d4:
                    6d:ce:1c:ee:03:59:ba:9e:1c:5d:53:44:a3:3f:2c:
                    14:ea:bc:6d:65:e1:60:00:c3:0d:6d:04:e0:45:93:
                    6a:3b:8e:58:9b:1e:ad:0e:7a:ac:cb:d4:29:23:7b:
                    3e:f0:08:bd:5f:1b:0f:16:4e:2e:b8:3f:40:5d:09:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F6:EF:E5:8E:77:63:DA:B8:66:B5:9A:55:60:22:4E:EA:2D:D3:E8
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/NPbv5Y53Y9q4ZrWaVWAiTuot0-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:99:ec:79:de:38:be:18:69:d0:5d:d9:a9:22:5b:7c:d5:32:
         81:e9:ed:d5:f2:18:7f:08:86:a8:ff:0c:a7:c3:a5:d2:3d:01:
         3b:4b:f0:07:49:0b:c1:6e:4a:4f:7d:86:ad:2d:28:92:d2:f5:
         39:6b:a5:ea:ce:e2:55:99:ff:e1:6e:a7:3a:93:b8:e3:aa:b6:
         94:2f:d6:54:8e:b3:60:fb:02:46:f9:12:f4:98:4a:49:09:8c:
         c0:4d:74:a3:de:cb:f5:4b:22:4b:f6:0f:fb:16:a6:a5:22:01:
         74:ee:b7:90:d6:ed:72:bf:77:de:3f:a0:d4:d8:07:fa:76:7a:
         ab:a7:81:71:76:73:67:2a:33:52:e9:50:b6:d7:ce:4f:9f:08:
         d0:ff:50:d0:8f:14:17:10:6a:fc:21:a2:2c:57:f7:3b:1e:af:
         f9:03:0b:29:2f:1d:3b:19:ba:dd:87:7a:f7:33:ad:06:0b:4c:
         d8:fe:14:d6:4d:de:40:ce:7d:b4:77:46:09:2c:04:50:00:5b:
         31:3b:fa:cf:5a:bf:a8:a6:1d:2e:71:64:c5:33:10:c4:71:94:
         63:15:2a:e2:14:b3:58:fc:8d:80:97:7c:02:9a:61:33:5d:6b:
         6e:a2:59:9d:79:a5:ac:41:6c:16:df:d2:6c:5a:b8:cb:e5:54:
         91:35:4d:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:04 2024 by rpki-client on console-fra.rpki-client.org