Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/tRcZ2EGp5wd47wwC2CGS94yLIuU.roa
File:                     tRcZ2EGp5wd47wwC2CGS94yLIuU.roa (raw, json)
Hash identifier:          KWSXZxLbl3eeVtQ+LICNDqMBWAnYAICdNm+9N0iMCCY=
Subject key identifier:   B5:17:19:D8:41:A9:E7:07:78:EF:0C:02:D8:21:92:F7:8C:8B:22:E5
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       25
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/tRcZ2EGp5wd47wwC2CGS94yLIuU.roa
Signing time:             Fri 02 Feb 2024 07:37:01 +0000
ROA not before:           Fri 02 Feb 2024 07:37:01 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb  2 07:37:01 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=B51719D841A9E70778EF0C02D82192F78C8B22E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:59:00:93:5d:21:02:ea:f1:24:02:34:5c:
                    f1:eb:88:01:6b:4b:8f:ec:71:70:c6:1a:ab:07:e1:
                    d4:4a:b8:14:3c:24:0a:c3:56:af:61:f2:11:60:c5:
                    ed:2b:75:30:2c:fb:51:01:ca:65:d0:e6:71:d4:27:
                    7c:92:a5:9b:81:f5:94:9a:d6:ed:23:1d:93:c1:80:
                    52:1f:00:4e:52:2c:aa:a8:ec:ee:f1:fd:b1:fb:d3:
                    1c:ee:7a:82:a1:81:5e:df:23:23:b1:32:69:35:ab:
                    34:71:ee:7b:57:3e:48:f6:69:f5:1d:da:43:04:4b:
                    d4:83:91:a5:6e:50:8a:19:eb:91:3d:ac:fe:89:b9:
                    45:a6:cb:18:4a:ce:05:56:b6:73:d7:0f:17:cb:ec:
                    98:ef:36:33:b0:ac:86:31:3b:67:0b:8d:d0:5d:5a:
                    69:3f:c1:4a:de:98:9f:59:82:bf:88:f4:7e:6c:7e:
                    31:bb:9e:44:33:08:b2:17:eb:f4:e5:a8:a5:13:95:
                    01:93:6f:3e:fb:cf:d2:44:11:c3:3d:b7:ec:df:49:
                    d8:19:f5:82:c8:de:ff:d1:28:f3:e9:c2:d5:69:45:
                    61:d6:25:43:ed:32:89:ab:9b:06:aa:28:ec:aa:d7:
                    50:00:ec:8c:44:f5:43:bc:70:e0:5c:ff:05:11:b5:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:17:19:D8:41:A9:E7:07:78:EF:0C:02:D8:21:92:F7:8C:8B:22:E5
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/tRcZ2EGp5wd47wwC2CGS94yLIuU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:85:bc:03:4e:cd:8a:3f:0b:dc:17:d2:a5:3f:9c:0a:66:
         bb:07:bf:39:1c:65:1d:a9:bb:b5:f2:df:19:8a:d4:1d:ca:41:
         42:7b:75:60:b4:1d:4e:33:ca:ee:76:1e:53:e8:f2:51:96:39:
         d9:29:63:45:a5:dc:f2:be:fb:63:7b:ec:ab:cd:90:54:21:e4:
         c0:72:60:04:7c:17:5d:11:7f:14:0e:8f:90:e4:4b:e7:16:e8:
         5d:a3:2e:f4:e5:d3:4c:b8:7d:84:10:25:35:89:90:03:9b:5a:
         71:12:83:81:5f:31:4f:ff:aa:e8:b8:4d:b6:2c:2b:b8:18:49:
         e9:da:1f:ec:0a:f1:32:e0:60:1e:53:e7:e8:bf:65:53:66:21:
         95:c7:16:1e:ec:17:9f:d2:b5:12:83:44:bf:f6:6a:f3:d5:09:
         49:aa:03:4a:e9:95:3a:cc:d4:ae:73:2e:4b:67:d4:11:c7:61:
         eb:2f:be:d0:2e:4f:f5:14:7a:5b:ff:37:f7:e3:67:92:a6:41:
         8d:00:a9:54:f9:e5:02:f9:a4:0a:78:91:d9:e1:c5:61:fe:6b:
         66:0f:b3:55:e0:8c:aa:8e:09:e8:49:e9:61:15:ec:45:86:26:
         33:23:31:dc:46:a2:cf:ca:6c:0f:76:50:f3:f6:1a:40:fe:68:
         7a:f5:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:46 2024 by rpki-client on console-ams.rpki-client.org