Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/iID3qatTo4RCMNP4kQPlqiUs9U8.roa
File:                     iID3qatTo4RCMNP4kQPlqiUs9U8.roa (raw, json)
Hash identifier:          MKZiqxJEJ9e/oZGk4afoe3vViXVoqR3AQEAceqoGw1Q=
Subject key identifier:   88:80:F7:A9:AB:53:A3:84:42:30:D3:F8:91:03:E5:AA:25:2C:F5:4F
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       26
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/iID3qatTo4RCMNP4kQPlqiUs9U8.roa
Signing time:             Fri 02 Feb 2024 07:37:02 +0000
ROA not before:           Fri 02 Feb 2024 07:37:02 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb  2 07:37:02 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=8880F7A9AB53A3844230D3F89103E5AA252CF54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:a8:6b:bc:d3:1f:15:0d:34:db:53:3d:28:
                    c4:d7:19:0f:14:ae:45:84:d7:6f:2d:9f:3c:87:d5:
                    97:01:22:94:12:f4:4a:d8:13:fe:21:44:95:82:73:
                    2a:e5:72:b2:d8:f1:73:0b:56:57:af:b2:c9:68:30:
                    81:a4:b8:d5:25:48:a9:43:2e:c7:9f:19:46:d8:cd:
                    c2:ca:3b:32:3a:e5:4e:ed:2d:ff:da:32:aa:f1:ed:
                    16:a0:14:e9:d6:80:6c:e2:7a:00:2e:f7:36:2b:e2:
                    8a:ff:4f:09:4c:2b:a0:7f:57:6f:bd:b4:d9:2d:a7:
                    59:f3:c0:1e:cb:92:bf:98:eb:4a:f2:fc:e2:db:c6:
                    0a:90:f9:5d:60:bc:13:02:f7:19:d1:52:12:3f:10:
                    ef:25:6e:55:ed:78:a5:45:a0:36:6f:30:b0:f0:fb:
                    34:52:b3:9f:16:00:0d:45:ce:6a:b7:ae:06:30:d4:
                    6e:c9:6d:48:59:f3:bd:24:29:e2:7f:f8:d2:ed:9d:
                    21:6a:65:94:bc:1b:21:9c:24:ec:55:69:e0:cb:c6:
                    5a:ef:4a:75:21:eb:1b:a3:41:9d:ef:1b:35:cf:f3:
                    68:3a:b3:06:8a:46:86:af:15:79:4a:75:b6:7a:63:
                    8e:14:7b:34:72:b1:95:26:b5:e4:f0:21:a1:59:4c:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:F7:A9:AB:53:A3:84:42:30:D3:F8:91:03:E5:AA:25:2C:F5:4F
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/iID3qatTo4RCMNP4kQPlqiUs9U8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:90:9f:e2:50:7f:c1:53:2a:9c:6a:c8:e2:e9:ad:4d:21:59:
         72:70:a4:2e:c3:60:f9:cc:a6:55:6d:c5:34:8f:05:d0:78:2c:
         e2:c7:3a:ad:d9:39:9f:c9:6f:a6:ac:8f:13:8d:12:e6:61:14:
         a4:64:a7:00:06:4e:62:e2:fa:b2:d9:81:d2:88:e6:63:a7:ec:
         4a:5f:1d:fb:13:cf:7b:2a:17:1e:a9:a7:05:dd:82:a2:c8:76:
         39:e7:66:e4:1f:14:df:ba:bc:06:9c:13:5d:13:66:8b:3a:56:
         80:95:fc:b8:7d:f5:2a:b3:40:3f:5a:32:2e:ec:cf:a2:5c:6b:
         61:e8:23:dd:c1:3e:fa:a0:30:bf:54:c1:d4:fd:a7:6d:e5:9b:
         62:4e:fa:76:f4:26:56:59:64:ed:2f:a1:12:52:1c:13:be:5a:
         f8:f2:df:7c:d4:e9:5b:08:b1:4e:de:c7:da:df:ed:7e:8a:09:
         e0:e5:15:52:87:17:e4:29:93:74:fc:60:c1:00:91:c4:4c:8e:
         23:64:a0:23:2a:b8:2c:c3:21:e5:3d:df:de:63:63:b8:b7:f4:
         f5:32:bd:18:2c:66:4e:77:ef:55:1f:b8:12:81:ae:21:26:41:
         d0:6a:9f:12:87:c1:89:07:ad:2f:54:4d:0c:4e:21:e7:7c:f6:
         0c:b5:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org