Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/yfOe6TrCsHEKAglZSBCKujAoVnQ.roa
File:                     yfOe6TrCsHEKAglZSBCKujAoVnQ.roa (raw, json)
Hash identifier:          TRBwz50+Nyq6XGS/r1HTo4+KO0usd8Ye/VUAdu74ozU=
Subject key identifier:   C9:F3:9E:E9:3A:C2:B0:71:0A:02:09:59:48:10:8A:BA:30:28:56:74
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       FC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/yfOe6TrCsHEKAglZSBCKujAoVnQ.roa
Signing time:             Tue 25 Jul 2023 03:13:38 +0000
ROA not before:           Tue 25 Jul 2023 03:13:38 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        133.165.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jul 25 03:13:38 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C9F39EE93AC2B0710A02095948108ABA30285674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:29:99:70:56:ed:19:0e:3a:2e:2f:2b:b5:
                    3f:84:fa:23:0d:f8:21:b7:7c:62:99:fd:66:24:69:
                    cf:7d:5b:b2:bc:1c:82:29:3c:f4:87:3e:9a:a6:eb:
                    73:36:20:e7:46:e1:40:b2:c6:2e:70:28:fc:72:82:
                    27:a1:79:9f:0f:f5:c6:e9:11:54:a2:f6:a3:d7:df:
                    1a:9b:77:e5:0f:3e:00:ec:7f:8a:f5:a0:05:0e:c0:
                    ea:b8:95:46:8e:9e:73:59:88:9c:cb:f8:6a:70:59:
                    59:90:27:ed:99:3e:e7:d2:b5:9e:fa:d7:64:b3:5b:
                    98:c0:4f:1a:62:86:27:79:37:f6:45:77:7b:73:33:
                    d6:05:66:1a:f7:0c:7e:74:dd:df:e9:65:66:f7:88:
                    09:d5:ad:2a:fd:32:68:ef:28:62:51:46:ae:1b:9d:
                    01:a3:90:af:9a:04:49:88:23:a0:ee:e3:24:96:52:
                    25:15:5e:eb:46:1d:f7:71:c6:e2:74:90:7b:21:64:
                    8c:ec:68:df:57:27:b3:f6:50:93:b2:47:2e:76:f2:
                    a5:ff:77:83:77:d0:e8:b0:6f:f8:14:d0:85:65:5f:
                    59:77:5b:65:a6:d6:a0:6e:83:66:d6:c9:ba:9d:62:
                    b0:0a:9a:1e:da:7d:08:5e:38:43:97:dd:d0:af:46:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F3:9E:E9:3A:C2:B0:71:0A:02:09:59:48:10:8A:BA:30:28:56:74
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/yfOe6TrCsHEKAglZSBCKujAoVnQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.165.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:38:bb:8b:4a:81:a8:30:ff:4c:8d:f1:12:fc:64:04:39:62:
         56:66:32:5f:b0:6c:e0:b7:82:4b:11:98:e8:33:dc:20:63:5e:
         72:39:36:18:fa:8b:e1:9a:f7:9d:35:88:eb:f4:62:7b:c0:85:
         1e:2e:3a:c6:06:5f:ef:f5:df:ad:16:f9:05:41:e5:28:d2:6f:
         63:36:73:15:ff:22:91:95:b9:c2:31:87:bb:d3:b9:7d:fd:31:
         2b:39:18:3a:d1:be:f6:f2:6b:4d:bf:4a:67:2f:6d:90:7e:e9:
         b6:e9:c3:f9:9a:31:9e:2d:9f:1c:ac:a6:2f:7b:f6:77:ed:2b:
         18:2c:50:59:9e:12:07:85:8b:c8:73:50:f3:c9:42:c0:f2:50:
         0f:58:ff:c3:61:79:93:69:b0:3d:1a:55:79:d4:97:e8:a6:77:
         08:e3:e0:aa:e0:11:50:ca:c2:6b:2f:b7:bc:98:38:77:89:99:
         7b:bb:38:26:6e:ce:f0:9d:7c:83:09:04:6d:ad:16:37:c3:fb:
         b2:28:aa:8e:ba:7b:45:eb:18:f4:61:b8:f7:7f:61:09:b8:8f:
         6f:1c:b1:2f:0b:42:93:b3:f5:bd:69:78:21:e6:2f:d5:1d:76:
         1a:e8:ef:c9:6d:61:74:5b:b3:db:3a:a2:1e:bc:aa:2c:cc:c3:
         6f:1d:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org