Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa
File:                     oiwawvL7X3ScShAYfH-xkFiQRZQ.roa (raw, json)
Hash identifier:          hKRb+bu3Q1UuzYCHymjXdRBhAO2Qtuiiox8/2pvD+tI=
Subject key identifier:   A2:2C:1A:C2:F2:FB:5F:74:9C:4A:10:18:7C:7F:B1:90:58:90:45:94
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       1B
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa
Signing time:             Wed 18 Sep 2024 07:50:59 +0000
ROA not before:           Wed 18 Sep 2024 07:50:59 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        133.88.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Sep 18 07:50:59 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=A22C1AC2F2FB5F749C4A10187C7FB19058904594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:42:97:4f:cb:75:14:39:5b:e6:2b:14:7a:
                    27:bf:36:20:f4:8e:fe:58:18:4f:a5:45:41:a7:a5:
                    c2:7c:0c:2b:5a:99:d7:08:2a:49:7b:eb:14:ff:23:
                    6d:df:6d:a5:47:0a:0e:7c:d2:bd:9e:79:cd:4a:d0:
                    e2:92:37:3c:77:78:85:97:0e:b1:85:aa:f5:e9:41:
                    b1:d2:f3:9d:42:bd:4c:fb:cf:7b:be:41:69:36:f8:
                    8d:11:b5:bc:32:81:db:54:c1:5d:13:47:22:51:62:
                    4f:02:a1:0e:11:b6:49:6c:36:74:d8:6f:5e:c6:22:
                    b3:67:07:38:5c:9b:88:23:14:5e:4d:1f:dd:a2:b8:
                    a8:94:50:76:fc:99:8d:fd:95:27:4b:a5:ef:74:02:
                    67:55:0c:19:37:41:3f:2b:de:7f:52:3b:30:c8:89:
                    79:47:f1:02:01:7e:95:17:56:ba:5b:d4:51:ec:da:
                    5d:84:a5:86:74:b5:60:4c:1e:04:b1:3b:4f:c0:8a:
                    8c:c0:36:38:cf:f5:2b:f5:6c:dd:a5:a5:07:82:22:
                    a2:ca:51:a8:fb:30:91:f7:4a:a3:e2:71:68:7d:56:
                    a6:14:4b:67:96:38:e1:e5:3b:bd:8e:8f:42:37:d9:
                    67:c9:19:8a:1f:be:16:1d:53:93:96:b8:7d:3b:49:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2C:1A:C2:F2:FB:5F:74:9C:4A:10:18:7C:7F:B1:90:58:90:45:94
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/oiwawvL7X3ScShAYfH-xkFiQRZQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:0d:f7:5a:74:1c:11:a3:0e:53:b1:90:e2:27:d5:93:23:
         11:61:eb:2f:dc:ba:6e:34:2a:d9:46:0a:da:ca:e2:6f:80:98:
         ef:f0:26:f3:b2:6a:62:92:01:c2:fa:b3:90:7b:61:83:ec:b2:
         68:1b:61:e6:36:55:3c:2c:a8:50:4a:f9:9c:50:b2:be:5a:ff:
         45:49:d8:44:a5:5d:55:0d:49:1e:93:80:29:51:b7:c2:38:ed:
         4e:56:3a:10:8e:b2:22:4d:19:c8:3c:93:fa:8c:6a:16:8d:50:
         b4:bd:e4:02:0e:f7:6d:dc:8f:81:13:59:77:61:2f:b5:65:97:
         5a:f9:bb:22:c3:3d:0c:17:25:bc:73:03:f0:df:52:cc:89:42:
         55:30:dc:cd:c3:bf:87:13:cf:52:4b:08:bf:13:2f:eb:bb:6c:
         96:4d:17:ca:77:f2:3c:f8:f7:35:16:c9:41:23:9d:2a:4e:33:
         90:ce:db:c0:78:33:e3:64:62:cf:59:2f:4a:60:74:32:82:94:
         f2:7d:af:c1:24:e1:c7:f7:c5:9b:34:95:d6:04:92:02:94:fb:
         45:66:e0:66:85:d7:de:38:a2:d5:1a:a2:32:2a:cb:fe:05:9b:
         a9:10:12:6a:22:00:95:d3:66:dd:4e:1e:b0:3c:d1:91:8f:6a:
         be:61:64:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:17 2024 by rpki-client on console-ams.rpki-client.org