Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/pK5ORJyQra70KPhT3ZuBPqDufgE.roa
File:                     pK5ORJyQra70KPhT3ZuBPqDufgE.roa (raw, json)
Hash identifier:          629Jxos22A6ztCh9zYacrIGPj7clhy3DxBKjJUtH74o=
Subject key identifier:   A4:AE:4E:44:9C:90:AD:AE:F4:28:F8:53:DD:9B:81:3E:A0:EE:7E:01
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       1F
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/pK5ORJyQra70KPhT3ZuBPqDufgE.roa
Signing time:             Wed 18 Sep 2024 07:59:02 +0000
ROA not before:           Wed 18 Sep 2024 07:59:02 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     18068
IP address blocks:        133.88.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Sep 18 07:59:02 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=A4AE4E449C90ADAEF428F853DD9B813EA0EE7E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:3d:36:95:1c:b3:42:f1:3c:c7:ab:05:22:
                    f4:08:b9:54:d3:ae:4a:cf:53:6c:18:96:45:aa:88:
                    e5:64:62:80:52:ba:58:27:84:c2:bf:00:d0:10:f9:
                    d8:7a:bc:d5:4a:64:c2:c1:1f:4b:d0:75:9a:3c:ff:
                    4f:40:47:02:48:55:7f:24:a8:f1:b7:1b:c2:b4:3a:
                    9f:a7:60:6b:ac:88:6b:4b:df:3d:59:b9:17:de:ab:
                    e1:98:df:b2:6a:5e:24:5d:f8:92:7d:f5:00:15:d8:
                    83:93:54:a5:37:42:47:4e:ce:a3:ac:75:7c:fe:e5:
                    21:32:09:7b:4e:96:3f:a1:b2:9a:b4:6d:82:75:70:
                    7e:ce:f1:c2:01:e8:32:fe:c9:04:24:fb:5e:fe:e2:
                    f3:bf:08:b1:d7:8f:9c:03:d8:77:47:d4:2d:08:55:
                    c6:bf:92:25:d7:d0:28:6d:68:4d:b5:32:20:7f:d6:
                    96:c6:fc:b7:06:b8:e1:7e:d1:e0:9d:37:3b:7b:64:
                    ab:0c:ae:5b:9a:03:0f:17:12:28:3b:00:7f:97:3f:
                    cd:08:d6:cc:ef:79:36:83:45:0b:a5:f6:cc:20:1d:
                    7c:96:88:59:d8:4e:0b:81:ac:85:cb:3d:c2:07:52:
                    1c:9f:f0:d1:38:f8:0b:00:10:c0:80:74:c4:51:5b:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AE:4E:44:9C:90:AD:AE:F4:28:F8:53:DD:9B:81:3E:A0:EE:7E:01
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/pK5ORJyQra70KPhT3ZuBPqDufgE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:52:8d:49:4f:44:82:fc:90:01:73:b1:a0:eb:3e:47:00:
         da:55:dc:d3:72:1b:bc:9a:7e:30:4b:70:79:4a:ad:87:30:30:
         14:30:28:f3:da:d4:47:66:58:99:2f:5d:54:79:d3:c8:5b:b4:
         f2:ec:4e:b5:0f:48:c7:b1:77:3b:c5:e9:01:f1:ca:9d:2d:2f:
         c8:7f:a3:33:f4:e0:aa:5a:11:82:a5:e5:81:6f:7f:08:0e:43:
         44:f4:de:1f:52:78:71:48:e5:b2:49:3e:ae:6a:2b:3b:79:62:
         16:9a:b4:c3:45:f5:ee:08:e3:41:4d:f5:ce:dd:52:e8:34:dd:
         79:2a:77:7c:ff:38:dc:70:3c:42:b6:e0:44:9a:91:22:79:d7:
         05:2b:1d:3a:b5:c0:25:a9:0e:ac:83:d5:51:c4:8e:69:96:bc:
         60:47:7b:1e:80:fd:60:37:c9:5c:aa:61:16:51:98:bc:67:e9:
         40:7a:31:a4:b8:62:b0:5c:d0:80:e1:cd:9a:8f:22:1d:a6:12:
         3c:cf:4e:b6:13:b0:67:93:69:b6:a8:8e:d1:e3:36:77:0d:08:
         bb:f1:10:a9:c6:cd:8a:67:2a:a1:cd:8d:b2:da:40:a6:40:95:
         81:06:e6:f6:d9:f8:31:52:fe:7f:c3:59:a0:f7:bc:39:05:ba:
         52:a8:51:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:47:48 2024 by rpki-client on console-fra.rpki-client.org