Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/gqvhCX_JMSY71hVvf4CTrV30PJs.roa
File:                     gqvhCX_JMSY71hVvf4CTrV30PJs.roa (raw, json)
Hash identifier:          gaOVKksi0h6zEQcoxo6xEWyrn4ZZeYYXw4d/GWkhiiA=
Subject key identifier:   82:AB:E1:09:7F:C9:31:26:3B:D6:15:6F:7F:80:93:AD:5D:F4:3C:9B
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       1C
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/gqvhCX_JMSY71hVvf4CTrV30PJs.roa
Signing time:             Wed 18 Sep 2024 07:54:57 +0000
ROA not before:           Wed 18 Sep 2024 07:54:57 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        133.88.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Sep 18 07:54:57 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=82ABE1097FC931263BD6156F7F8093AD5DF43C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:cf:49:7e:f6:fe:ca:7b:5d:e6:e3:66:2d:
                    20:6f:a7:c7:9b:c3:4e:b7:53:86:50:cd:d7:75:fd:
                    61:d0:ab:53:ee:46:44:6b:3a:28:84:6b:0c:b1:6a:
                    f8:97:e8:78:41:4c:1d:30:59:ee:cc:4a:5f:7f:e8:
                    41:47:36:f6:9c:5b:de:45:10:87:82:79:4f:3e:d4:
                    dc:32:9e:8e:d3:8b:ce:6e:38:69:9e:bc:2d:ea:1c:
                    c7:b7:60:40:63:57:75:dd:ca:a7:2a:b4:8a:e5:ed:
                    83:0c:44:86:b0:46:75:13:92:f6:5e:2e:16:a4:a6:
                    51:22:d0:2c:bb:37:16:fe:68:a3:3c:60:9b:d0:03:
                    00:79:59:ad:cc:2a:74:8a:db:87:51:b6:71:e8:79:
                    70:bc:de:56:1f:b8:34:48:d4:e4:82:74:04:c9:5b:
                    6d:d3:08:22:c7:38:29:8e:8c:29:36:2a:ca:36:65:
                    52:ad:09:7e:47:3f:89:fa:9a:09:b2:9b:44:8d:82:
                    1d:c8:c3:76:37:d3:3e:9a:72:51:85:bd:6d:00:67:
                    9e:89:2d:a8:c2:2e:a1:26:77:b7:2c:ca:05:76:f8:
                    c7:c7:3a:c4:f9:28:44:f7:ad:9b:ab:35:12:7a:64:
                    1f:02:98:29:f0:11:06:f1:b2:bb:51:2f:5c:d0:98:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AB:E1:09:7F:C9:31:26:3B:D6:15:6F:7F:80:93:AD:5D:F4:3C:9B
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/gqvhCX_JMSY71hVvf4CTrV30PJs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:51:d1:22:79:55:68:97:e4:f7:65:73:17:a9:c2:6e:95:
         f0:63:68:e9:f3:11:3e:9e:41:21:28:4a:a5:1f:6a:7c:b3:40:
         84:06:c0:17:55:1a:51:3a:e5:36:17:82:b4:a9:5a:34:32:81:
         cd:ee:ae:fb:7e:ee:ef:ca:30:3f:0d:e7:28:48:ba:6f:c8:eb:
         9a:90:e5:9b:65:57:fa:26:37:f5:7b:0c:b0:f1:53:8b:bf:bf:
         f8:16:55:43:9e:ee:6b:d5:00:f4:a0:97:64:a8:78:f4:dc:e2:
         20:b8:39:62:71:f8:e8:60:b5:4b:7c:85:f6:f2:8c:9a:a2:ad:
         cc:91:80:30:c2:7e:8c:d2:96:ec:30:1c:20:6d:c9:3d:50:ba:
         df:b8:95:01:4b:2f:4d:27:c1:0f:c6:36:4a:19:47:1d:5b:63:
         51:26:21:ea:f8:fb:07:63:c1:58:7b:8b:4f:5d:c3:95:1b:09:
         ac:fa:34:3c:ca:64:74:ab:04:94:a0:66:e6:a5:fd:88:e9:a7:
         24:cc:c4:03:f7:fe:25:3c:27:ef:32:13:7d:6a:8d:6f:1c:bf:
         2a:4a:d4:0f:e8:22:c6:14:2b:8a:0b:8b:73:f7:f5:6f:dd:86:
         55:c8:08:90:79:4f:3f:02:c0:eb:f0:9d:3f:4b:78:37:6d:bd:
         71:76:87:d9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw
N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI0MDkxODA3
NTQ1N1oXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoODJBQkUxMDk3RkM5MzEy
NjNCRDYxNTZGN0Y4MDkzQUQ1REY0M0M5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMLRz0l+9v7Ke13m42YtIG+nx5vDTrdThlDN13X9YdCrU+5GRGs6
KIRrDLFq+JfoeEFMHTBZ7sxKX3/oQUc29pxb3kUQh4J5Tz7U3DKejtOLzm44aZ68
Leocx7dgQGNXdd3Kpyq0iuXtgwxEhrBGdROS9l4uFqSmUSLQLLs3Fv5oozxgm9AD
AHlZrcwqdIrbh1G2ceh5cLzeVh+4NEjU5IJ0BMlbbdMIIsc4KY6MKTYqyjZlUq0J
fkc/ifqaCbKbRI2CHcjDdjfTPppyUYW9bQBnnoktqMIuoSZ3tyzKBXb4x8c6xPko
RPetm6s1EnpkHwKYKfARBvGyu1EvXNCYO6UCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSCq+EJf8kxJjvWFW9/gJOtXfQ8mzAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0
fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY
blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDc1L2dxdmhDWF9KTVNZNzFoVnZmNENUclYzMFBKcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAKFWBgwDQYJKoZIhvcNAQELBQADggEBADunUdEieVVol+T3ZXMXqcJu
lfBjaOnzET6eQSEoSqUfanyzQIQGwBdVGlE65TYXgrSpWjQygc3urvt+7u/KMD8N
5yhIum/I65qQ5ZtlV/omN/V7DLDxU4u/v/gWVUOe7mvVAPSgl2SoePTc4iC4OWJx
+OhgtUt8hfbyjJqircyRgDDCfozSluwwHCBtyT1Qut+4lQFLL00nwQ/GNkoZRx1b
Y1EmIer4+wdjwVh7i09dw5UbCaz6NDzKZHSrBJSgZual/YjppyTMxAP3/iU8J+8y
E31qjW8cvypK1A/oIsYUK4oLi3P39W/dhlXICJB5Tz8CwOvwnT9LeDdtvXF2h9k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:10 2024 by rpki-client on console-fra.rpki-client.org