Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqJXiTO0AC14fOcjKE6PT-RfOSY.roa
File:                     kqJXiTO0AC14fOcjKE6PT-RfOSY.roa (raw, json)
Hash identifier:          0VZin01P9hIfE2R8k8W0H5cvEMAzY1Nm41tB95RMAoc=
Subject key identifier:   92:A2:57:89:33:B4:00:2D:78:7C:E7:23:28:4E:8F:4F:E4:5F:39:26
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       3F
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqJXiTO0AC14fOcjKE6PT-RfOSY.roa
Signing time:             Wed 31 Jul 2024 01:00:55 +0000
ROA not before:           Wed 31 Jul 2024 01:00:55 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        133.130.128.0/17 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul 31 01:00:55 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=92A2578933B4002D787CE723284E8F4FE45F3926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:77:66:bf:ca:20:21:43:89:4e:2a:b5:ed:2a:
                    34:8f:d6:14:23:be:a1:75:b6:d4:73:18:f2:09:24:
                    f7:7e:5f:e0:5b:e5:2b:0e:a5:c1:0d:0b:c1:7f:7e:
                    fe:b4:49:a0:b3:27:cd:84:70:01:70:20:30:e6:0d:
                    a6:d4:ed:37:10:0c:d3:af:78:ba:62:9f:36:58:a2:
                    35:ae:45:23:ec:6a:2d:7b:c9:7a:f2:e3:0d:c6:c7:
                    97:64:30:f0:fc:df:3a:a2:70:82:38:8e:67:48:5e:
                    1e:9f:ed:65:96:66:f7:11:82:71:0d:6f:4c:c0:10:
                    8a:11:0f:9e:39:72:ee:13:4a:86:d4:3e:ea:bf:66:
                    5d:72:ed:29:db:2e:76:6a:21:43:b3:87:1a:fb:96:
                    17:e4:8f:53:67:89:68:b4:e8:67:c0:45:a7:8b:b7:
                    62:ac:f7:89:d3:9f:89:a6:84:3f:58:f6:0e:6f:48:
                    d2:f3:90:cc:99:50:75:66:c9:b8:35:01:c7:c3:a2:
                    29:e5:9d:e4:44:d6:95:c6:dc:4c:b5:9c:e3:6a:20:
                    8a:72:30:ca:53:9b:69:ff:2a:2a:96:ce:bb:fc:c9:
                    2b:bf:26:20:1d:9c:2a:0b:70:92:ff:ed:bc:db:38:
                    01:bc:10:7a:12:45:b1:49:60:aa:64:d2:69:b3:59:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A2:57:89:33:B4:00:2D:78:7C:E7:23:28:4E:8F:4F:E4:5F:39:26
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqJXiTO0AC14fOcjKE6PT-RfOSY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.130.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         69:15:7b:cc:34:d1:22:72:2a:17:4a:91:66:6c:44:d4:26:ce:
         24:20:7b:b5:22:76:3f:5e:00:aa:a4:35:2f:ba:ef:68:9c:1b:
         0d:09:3e:b0:a5:c7:20:76:c2:d7:a1:1b:0e:2d:78:b7:c6:51:
         e7:eb:70:6b:b6:92:a3:d9:ae:f0:ae:81:45:17:bd:f1:bb:9c:
         a4:92:8c:3d:3d:b9:e5:81:71:9c:ca:ba:69:b5:60:b3:44:86:
         80:ce:df:17:8e:f0:35:64:73:c3:6d:50:2b:94:64:5a:be:70:
         16:68:9e:4e:2d:75:b7:5d:f2:d0:73:b0:a9:01:15:df:69:74:
         a6:00:b6:a6:c1:ad:ae:74:7e:0f:5b:c1:7c:4c:57:f5:0a:8c:
         38:0b:1c:f7:1c:6d:8e:36:7d:0a:52:5f:90:9a:c5:06:24:1e:
         de:be:41:33:ef:ae:76:c7:53:b7:3d:2d:ec:ed:d2:c3:d1:e5:
         fb:a8:76:19:ff:77:dd:a3:1a:26:01:99:67:a0:85:36:53:39:
         33:9d:9d:a2:9e:5e:f3:a8:66:5d:e4:2c:b4:f0:f2:23:1f:e7:
         6a:eb:f7:26:3c:88:f5:e3:5e:ff:07:02:23:31:73:fb:ee:ec:
         c6:a4:9c:aa:3b:4a:41:74:9e:10:9f:4e:73:db:41:a6:9c:8b:
         dc:a1:6e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:06 2024 by rpki-client on console-fra.rpki-client.org