Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/_Up6fTewJeGmPIbMoLtT9wUw3tc.roa
File:                     _Up6fTewJeGmPIbMoLtT9wUw3tc.roa (raw, json)
Hash identifier:          zfprxkEFbds6T2EuFkrYwmRPpB4l3TDJja9UNsAAyGU=
Subject key identifier:   FD:4A:7A:7D:37:B0:25:E1:A6:3C:86:CC:A0:BB:53:F7:05:30:DE:D7
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       1D
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/_Up6fTewJeGmPIbMoLtT9wUw3tc.roa
Signing time:             Wed 18 Sep 2024 07:54:57 +0000
ROA not before:           Wed 18 Sep 2024 07:54:57 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        133.88.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Sep 18 07:54:57 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=FD4A7A7D37B025E1A63C86CCA0BB53F70530DED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:68:8b:79:c1:13:c1:3b:67:4e:f2:8b:d4:
                    e5:36:2a:2c:47:70:05:43:7b:a8:22:09:46:2b:98:
                    0b:05:88:f5:bb:46:30:e9:b9:76:09:54:bf:ff:4e:
                    f1:bd:3f:3e:1c:9f:84:bd:50:08:e0:f9:44:ba:4f:
                    b8:bb:82:1a:2c:97:b4:d8:d3:0f:e0:5d:b7:7a:46:
                    17:b5:63:a8:20:e3:73:88:77:bd:7f:45:01:b7:ea:
                    d1:a8:10:b5:37:fd:0e:ce:43:64:83:c7:a8:b1:b0:
                    a4:cc:90:fd:bf:a7:9b:43:9d:48:e1:1d:89:f9:b6:
                    8c:48:62:22:f5:88:98:e2:c6:bd:5d:db:b0:2b:66:
                    4c:32:b0:bc:dd:f9:9a:2a:0a:1b:de:bc:04:65:31:
                    07:b9:e3:16:77:ce:27:ab:55:54:21:68:e8:59:f1:
                    ad:cd:d4:10:ee:47:4d:12:c9:03:41:44:1d:87:a7:
                    ee:0d:51:71:d9:80:63:6f:00:ea:ea:b5:22:01:d1:
                    70:74:e5:39:9f:69:92:0f:eb:df:12:d0:47:49:4f:
                    e5:76:25:9e:a1:52:e3:ae:59:71:6a:f0:02:67:9a:
                    0a:56:8e:63:41:10:9b:3e:92:d8:94:97:a6:27:cb:
                    f0:7a:27:f0:e7:d9:70:e4:49:22:50:4c:71:17:ff:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4A:7A:7D:37:B0:25:E1:A6:3C:86:CC:A0:BB:53:F7:05:30:DE:D7
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/_Up6fTewJeGmPIbMoLtT9wUw3tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:f2:a4:9b:83:2a:75:b8:61:48:6a:1f:6a:fd:d4:70:35:
         fb:41:7c:dd:ca:68:8f:c8:a5:6c:bb:98:0a:bc:d2:37:b6:ab:
         2d:43:eb:a1:ca:c2:21:2e:e4:f5:05:ab:66:72:ab:9c:f3:12:
         20:52:27:74:ba:c1:9e:d2:70:d7:07:5d:76:68:41:29:ff:c3:
         f7:e2:fa:6e:74:19:61:d5:d1:f6:c0:61:0f:ef:2b:c6:59:1f:
         12:4b:73:6f:61:aa:a1:30:d4:91:5d:55:f0:55:44:8a:d0:3f:
         27:bb:26:d1:30:e3:e7:a6:78:74:cb:78:dc:13:c3:20:a7:cb:
         88:25:75:fa:3e:17:91:88:0f:21:e1:fb:df:17:f5:33:b4:ad:
         a2:e8:b9:97:b4:9c:1c:34:2c:59:7d:df:11:3a:cc:b7:3d:ed:
         85:b5:ff:66:14:3e:69:fb:0d:f1:7d:94:3a:43:17:42:dc:df:
         da:a6:13:4f:2a:8a:85:27:d5:3e:f1:e5:7b:40:d1:19:fc:da:
         9a:45:af:39:21:67:28:6d:40:d9:4d:c0:45:94:86:d0:4f:15:
         31:91:8e:c4:77:7c:55:42:3e:96:25:60:7c:3b:e6:56:d1:3f:
         5b:00:30:fd:94:cf:77:20:36:5a:4e:4a:67:30:6c:ab:ef:b3:
         c6:d2:c4:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:30 2024 by rpki-client on console-ams.rpki-client.org