Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa
File:                     WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa (raw, json)
Hash identifier:          z7p0VvxSka2hM/Ozdcw7v+pMyPnfbKhJ6cq84HfPvqo=
Subject key identifier:   59:B2:0A:48:18:9A:2C:E2:74:D0:ED:C8:CB:FC:87:2A:B0:51:A9:18
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       21
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa
Signing time:             Wed 10 Jan 2024 00:59:01 +0000
ROA not before:           Wed 10 Jan 2024 00:59:01 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        133.232.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 10 00:59:01 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=59B20A48189A2CE274D0EDC8CBFC872AB051A918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:b7:6b:a4:e9:f0:96:d0:eb:b2:6d:2f:fd:
                    d3:90:e0:1a:a5:8c:ab:be:de:a7:22:49:bc:af:81:
                    05:d4:0b:9b:5e:d7:b5:a9:f4:07:b3:ec:ae:20:c3:
                    f7:b5:84:8e:de:0c:39:81:dc:2a:7c:7a:d0:68:a2:
                    5a:2d:20:4c:15:2e:31:23:9a:f4:a1:37:08:66:56:
                    6b:00:6c:66:a4:c0:4f:6f:88:3e:0f:0c:8d:3d:38:
                    ee:c9:27:06:38:bd:85:fc:23:55:c9:55:2a:0d:78:
                    9b:f7:a7:94:66:ad:7e:0d:04:64:59:49:29:39:e2:
                    85:92:4d:fb:9c:31:30:a4:3d:9a:56:fd:63:d9:36:
                    d2:1b:00:86:90:b3:fc:40:89:82:f0:94:b7:d9:35:
                    69:2e:a4:f8:a1:00:8b:70:1e:7e:5d:8b:3e:42:ab:
                    8c:e8:9d:9c:4c:e3:b6:6b:5b:f0:38:6a:ec:7a:33:
                    29:02:13:58:d3:90:25:2f:11:55:a9:dc:67:2d:b4:
                    ad:5a:33:01:b9:a9:e4:1e:30:63:8d:17:fe:db:28:
                    8f:ed:df:6f:39:36:e4:97:ee:74:56:4d:20:06:2a:
                    15:92:58:0b:01:9c:b3:16:51:3b:75:82:57:52:69:
                    de:9c:b5:1e:2f:49:53:31:d6:18:a8:23:b4:68:62:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B2:0A:48:18:9A:2C:E2:74:D0:ED:C8:CB:FC:87:2A:B0:51:A9:18
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WbIKSBiaLOJ00O3Iy_yHKrBRqRg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.232.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:7c:b9:a4:64:76:c5:ad:74:09:39:6a:42:0a:c0:32:a6:
         be:a8:da:56:30:7b:aa:d9:52:71:45:00:94:55:b8:aa:88:1f:
         1a:3b:16:b5:83:ed:2d:7d:66:ad:5d:c3:0e:01:56:4f:90:dd:
         fe:4c:2b:e0:5f:0b:87:21:e0:b9:79:13:a6:08:40:de:6a:6b:
         c3:17:d8:00:f4:c9:eb:d0:36:6a:c9:f7:70:0e:c9:56:cb:ea:
         b1:1c:e3:83:31:da:04:8b:b9:0a:74:25:77:c9:c6:3e:39:50:
         91:c1:2f:e1:44:4b:4a:5a:f4:c2:cc:86:da:16:56:f6:85:e3:
         ae:c3:4b:ca:fe:13:a8:9c:e8:9e:a2:d8:25:b1:6c:01:9c:57:
         fe:26:31:97:e5:7f:0c:b4:f7:ac:71:ee:96:16:e5:77:0b:7a:
         4f:61:93:0c:08:ae:87:a8:60:3d:56:79:f1:c2:45:eb:f8:89:
         1c:0f:35:3f:90:61:2d:bd:cc:9c:03:79:16:2c:6a:a0:7e:fb:
         6c:1b:6d:ba:7a:97:ef:b6:bd:97:73:ae:ee:2c:99:e2:d9:5e:
         d0:7a:43:88:eb:4b:56:71:84:8b:43:49:7b:11:5d:e5:29:da:
         4c:ad:91:97:26:91:12:31:39:ad:c9:b6:ed:1c:77:b5:bb:ff:
         74:02:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org