Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/Rlmlih9ikCJ8tYUyD0Mb017swSc.roa
File:                     Rlmlih9ikCJ8tYUyD0Mb017swSc.roa (raw, json)
Hash identifier:          Rt79P0YqhssuJ4uBakrW+7PI9yaAh63w8jQmHlYWMbk=
Subject key identifier:   46:59:A5:8A:1F:62:90:22:7C:B5:85:32:0F:43:1B:D3:5E:EC:C1:27
Certificate issuer:       /CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Certificate serial:       4A
Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/Rlmlih9ikCJ8tYUyD0Mb017swSc.roa
Signing time:             Sat 31 Aug 2024 01:29:00 +0000
ROA not before:           Sat 31 Aug 2024 01:29:00 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2907
IP address blocks:        133.37.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D
        Validity
            Not Before: Aug 31 01:29:00 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4659A58A1F6290227CB585320F431BD35EECC127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:8c:ea:9b:37:eb:6d:5b:f5:19:16:83:2f:
                    e4:a3:32:11:8d:02:bf:01:c4:f1:28:ce:9d:c3:21:
                    b5:b3:ac:16:8a:76:dc:39:8c:d8:93:98:c0:96:a5:
                    fd:d5:69:c6:bd:38:67:9c:d4:cd:e1:b2:75:7c:da:
                    e5:1f:67:74:5e:6b:58:97:fb:de:b3:ee:80:1a:79:
                    d3:3e:c5:80:61:cb:aa:d8:45:68:7a:3b:8d:05:4d:
                    67:0a:d8:ab:87:ad:a0:e8:60:38:bf:40:a9:96:cc:
                    57:4f:02:bf:ea:11:87:2f:95:f9:e2:65:0c:11:cb:
                    25:89:4e:28:74:56:b8:8d:8b:c0:bd:f6:94:ee:35:
                    97:6f:a6:cf:7f:76:5b:e1:40:5d:f0:10:2d:be:49:
                    9d:d8:6a:38:6e:86:66:de:15:b5:6c:fe:bf:a3:6e:
                    5d:cf:bd:54:dc:44:b9:82:b9:df:40:dd:84:78:e0:
                    75:ae:54:88:00:34:09:1b:bf:df:3c:b2:78:e5:2d:
                    6c:9a:a4:12:d3:df:06:21:92:54:e5:92:25:de:6e:
                    9d:81:8a:21:8e:aa:33:bb:bb:c6:2d:2f:cd:c3:a6:
                    bb:7d:d9:0f:7f:a2:97:c7:ac:d2:4b:49:12:e3:64:
                    a0:53:b0:c4:b0:cd:e2:08:35:73:9e:e1:75:e3:a2:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:59:A5:8A:1F:62:90:22:7C:B5:85:32:0F:43:1B:D3:5E:EC:C1:27
            X509v3 Authority Key Identifier:
                keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/Rlmlih9ikCJ8tYUyD0Mb017swSc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:2c:6d:e9:a6:f6:fe:2b:c3:9b:ea:3a:0b:75:9a:f6:fc:
         24:a3:a6:ea:be:25:16:89:c6:45:4c:37:0e:95:d4:d1:4c:3e:
         a8:48:2b:51:ca:c9:3e:0e:04:48:03:83:15:97:00:24:b9:7d:
         ac:16:5d:b1:74:40:83:b0:3f:38:ed:18:85:c0:e9:c6:f1:ee:
         67:12:af:04:e6:27:11:4a:0e:ad:12:33:4c:5a:10:7c:79:09:
         52:8f:96:25:2e:35:7a:f0:ce:45:fc:27:4d:4f:6d:ab:5f:40:
         bf:48:16:37:f4:75:92:0f:f3:1c:2f:88:db:0f:bd:80:f1:0a:
         ba:ec:6e:65:e7:53:27:12:eb:35:37:c9:47:a7:16:b1:b1:1e:
         83:a5:d4:43:50:78:6c:4e:97:66:1a:c4:0a:3f:ad:05:5a:92:
         3e:31:14:75:1f:ed:c4:83:60:0f:1e:5a:6d:2e:42:bf:6e:d6:
         c0:9f:f9:8a:04:71:90:72:55:6a:5f:1d:bc:dc:13:46:0c:9f:
         2c:a0:34:be:ba:a0:2a:7b:ce:f3:1a:04:71:d4:b2:37:f7:9c:
         a7:a2:e4:d6:d3:7d:66:26:57:c0:d0:ec:01:dd:1c:6d:28:ba:
         ec:e6:17:96:18:c0:47:61:e5:dc:34:b8:7e:fe:23:ea:fd:3c:
         01:a7:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:32 2024 by rpki-client on console-ams.rpki-client.org