Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/2zinTuMIZL5lgGAcCpLQIrNVBhg.roa
File:                     2zinTuMIZL5lgGAcCpLQIrNVBhg.roa (raw, json)
Hash identifier:          /zYjlL2IN82GCgUnl+2cQ8t8MCnxRE9WWOG/cxKbkfU=
Subject key identifier:   DB:38:A7:4E:E3:08:64:BE:65:80:60:1C:0A:92:D0:22:B3:55:06:18
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       92
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2zinTuMIZL5lgGAcCpLQIrNVBhg.roa
Signing time:             Thu 31 Oct 2024 01:34:20 +0000
ROA not before:           Thu 31 Oct 2024 01:34:20 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        131.213.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct 31 01:34:20 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=DB38A74EE30864BE6580601C0A92D022B3550618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:75:d6:d8:4b:76:cf:f1:dd:83:ed:9f:aa:
                    3d:7d:51:78:22:d1:e5:0a:1f:17:eb:ed:f6:c4:4c:
                    e8:20:73:88:4f:cb:8f:2d:bf:35:7d:94:d2:66:f3:
                    8a:1b:cf:d8:12:32:1e:d9:95:07:ec:7d:cb:9b:88:
                    bf:ac:0e:68:1f:c2:ce:4a:14:9f:58:b4:fd:17:0a:
                    74:fe:50:65:85:0e:47:e6:88:32:e4:3f:75:57:0d:
                    ef:93:ff:90:0e:bb:c4:6d:b1:7a:58:59:bc:bf:be:
                    41:7f:7e:39:67:80:03:06:3b:9f:6b:4e:da:29:62:
                    2c:35:cf:f0:85:c8:74:19:e7:87:8e:dc:e0:9c:ef:
                    4d:87:7c:69:cd:e7:9c:19:2f:16:76:36:9d:59:10:
                    57:fe:5b:c4:41:ba:2c:b5:b7:5f:d7:31:74:78:9f:
                    06:68:6b:91:fa:f6:ca:39:d3:bd:51:6f:c2:60:cf:
                    59:e8:b3:9c:3e:db:6e:2e:11:38:e6:f6:a5:48:7a:
                    08:d6:13:76:01:42:08:a0:c3:b4:de:70:6c:36:56:
                    7d:58:60:c1:69:56:02:4f:34:3e:70:10:53:9d:2a:
                    83:e9:af:6c:0f:88:d5:04:7a:48:d3:19:99:fb:56:
                    ce:bb:e4:37:0b:4e:b8:25:c3:66:e6:09:a3:4e:81:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:A7:4E:E3:08:64:BE:65:80:60:1C:0A:92:D0:22:B3:55:06:18
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2zinTuMIZL5lgGAcCpLQIrNVBhg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:12:3d:e5:7a:ce:60:c5:ed:77:4b:85:be:3d:15:19:47:
         b7:7a:c0:a5:d6:3b:16:e7:cb:9d:a3:9e:9b:c1:7e:0e:6a:50:
         d0:77:a2:2f:9c:49:86:25:10:a7:95:ff:84:38:8e:59:f0:7c:
         cc:f5:b3:8a:80:60:8a:30:06:97:70:2e:c5:21:fe:be:43:2c:
         b4:dd:db:58:82:73:5e:f4:9a:80:20:16:ba:e3:c4:60:6a:6a:
         76:ba:81:85:ba:54:a3:4b:97:f2:e9:9e:69:82:36:cc:bf:e6:
         01:38:45:ab:86:0c:4d:73:df:d7:b6:76:cd:d9:85:93:e5:d3:
         8b:bc:07:30:28:7e:2b:ab:f0:f4:9a:80:5d:e4:c3:57:fa:8f:
         42:61:f5:7a:9f:54:1c:80:8e:7b:b6:45:e6:17:a8:73:ff:0d:
         38:02:fc:82:71:34:2a:f0:c3:a6:4d:ba:ad:a0:94:e2:f4:e4:
         03:96:17:44:8e:b3:6d:60:22:74:65:1f:3e:83:cf:d0:a0:3a:
         34:c0:9e:a2:83:1a:bf:6d:b5:38:0a:f3:5a:9a:30:a3:39:18:
         81:32:b1:87:b9:2b:b1:d4:52:76:67:44:ee:7b:f3:54:86:5d:
         02:80:a0:df:69:12:4b:80:a8:c8:94:f0:e4:67:3d:e8:b2:cf:
         c1:56:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org