Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/8ln8PDd27d6HQS5aQEhVcE3LKe4.roa
File:                     8ln8PDd27d6HQS5aQEhVcE3LKe4.roa (raw, json)
Hash identifier:          rIiTlZgPk1Abmi0e6/DGzberkJvXuomiu8+Ny935r8c=
Subject key identifier:   F2:59:FC:3C:37:76:ED:DE:87:41:2E:5A:40:48:55:70:4D:CB:29:EE
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       23
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/8ln8PDd27d6HQS5aQEhVcE3LKe4.roa
Signing time:             Fri 02 Feb 2024 07:37:00 +0000
ROA not before:           Fri 02 Feb 2024 07:37:00 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb  2 07:37:00 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=F259FC3C3776EDDE87412E5A404855704DCB29EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:aa:88:89:d0:20:81:d1:10:ae:ad:2b:1b:
                    a8:7f:dd:60:06:cd:89:e3:59:b8:9b:69:90:2c:d7:
                    f9:49:8f:de:d7:5f:9f:85:57:b9:bb:e1:ee:f6:d4:
                    0d:21:df:1e:b1:e3:76:70:ed:3f:a2:56:a6:c1:dc:
                    de:f6:a1:55:18:1a:74:ca:7f:e9:69:de:fc:12:c8:
                    04:50:17:df:9f:15:90:5a:7c:ad:95:a2:31:4b:b4:
                    01:38:a9:be:d0:31:fb:c2:a3:6b:c6:82:b6:da:02:
                    d3:8f:a7:82:a5:60:6d:c3:a2:f4:89:fd:29:23:ea:
                    39:fd:0d:dc:4b:e3:b6:02:24:e1:7c:0c:0e:f3:5d:
                    de:09:7a:75:6e:27:bc:16:15:ed:d3:16:3a:7b:b0:
                    fe:58:2c:f3:97:08:10:ac:34:ce:6e:e7:5b:11:b2:
                    06:91:0c:07:ff:fd:86:71:7f:ce:9d:58:1d:c3:0a:
                    60:a0:ef:a5:9f:97:f6:b8:7e:79:43:91:d6:af:20:
                    f7:2d:a9:97:d0:87:e5:f5:5e:0e:e4:50:91:99:4a:
                    46:2a:0a:2c:ac:ae:d8:64:24:f1:07:d0:45:46:b3:
                    5b:4c:ef:3f:59:47:40:f5:7f:88:02:b0:26:cd:3c:
                    9d:af:e1:68:f4:c6:34:0c:e5:85:d3:fa:68:12:f8:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:FC:3C:37:76:ED:DE:87:41:2E:5A:40:48:55:70:4D:CB:29:EE
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/8ln8PDd27d6HQS5aQEhVcE3LKe4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:63:93:22:06:40:ac:8d:2e:52:c3:58:a7:2e:cd:6f:5e:03:
         3b:90:6b:3c:9a:d0:9e:67:57:35:c7:da:03:21:e9:b2:66:7d:
         a1:83:de:1c:5f:7f:cf:68:b4:01:98:d7:1b:d0:c3:eb:42:35:
         4e:03:b9:25:ac:e0:81:a4:dc:a2:ee:01:4c:bd:62:d9:db:7e:
         bb:3c:9c:b1:90:76:02:a2:43:e8:6e:a2:b2:00:8c:50:43:b2:
         9e:36:79:5d:b0:9f:21:21:65:a7:21:ea:9b:71:96:43:a4:0c:
         bc:f4:62:c6:12:84:e2:61:78:a0:45:28:ee:af:72:2a:c7:67:
         c1:5d:f7:13:1a:f9:fa:59:b7:b6:68:3b:b1:c0:15:30:d8:3e:
         3f:d3:15:c8:b7:4b:05:ff:ae:bf:44:cc:0c:77:d0:62:2b:d9:
         1f:ea:2c:f6:b3:9c:1c:ee:8e:c2:b5:0d:c8:f8:ae:f6:be:b3:
         19:6c:8a:c7:2a:14:0a:a9:d5:80:4b:f4:22:f9:fd:58:f9:d2:
         2d:74:87:d7:cd:d1:be:34:26:25:a3:39:65:73:e7:64:28:a0:
         50:09:ac:24:b7:8c:31:51:b4:51:2b:95:78:6d:0f:e3:a4:65:
         99:19:de:61:37:0f:07:76:45:96:90:b1:25:06:f6:f9:04:dd:
         84:47:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org