Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/iYMBTw8YNPHgHrVu3IfQapGFCuA.roa
File:                     iYMBTw8YNPHgHrVu3IfQapGFCuA.roa (raw, json)
Hash identifier:          NkDpgQ1a4Ap8rngvwEijZejxbZxujdoEEcx3vXyGVwE=
Subject key identifier:   89:83:01:4F:0F:18:34:F1:E0:1E:B5:6E:DC:87:D0:6A:91:85:0A:E0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0184
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iYMBTw8YNPHgHrVu3IfQapGFCuA.roa
Signing time:             Sat 31 Aug 2024 01:29:11 +0000
ROA not before:           Sat 31 Aug 2024 01:29:11 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        133.110.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 31 01:29:11 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8983014F0F1834F1E01EB56EDC87D06A91850AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:f9:a3:75:e4:53:e3:08:8a:a8:f5:b1:50:
                    f8:d7:43:9e:21:38:f9:ec:15:b0:e5:81:81:20:67:
                    14:ba:17:11:59:4e:3a:66:fa:d7:c4:c0:40:3b:24:
                    ea:26:eb:3b:6f:c8:77:87:0a:d9:8d:7b:fd:bf:01:
                    b8:9f:c5:02:d6:5b:fd:96:2d:d2:91:fe:db:f8:4a:
                    7a:3a:ce:3c:87:ba:b6:f1:f3:54:bc:18:6d:f9:c5:
                    5e:6e:7f:d1:64:ae:84:af:9e:56:73:c3:45:14:ca:
                    b6:61:c1:57:07:f4:c5:a0:e8:91:f5:e9:9f:d6:f7:
                    6b:21:5a:61:1f:b9:4c:d0:8d:c9:8e:fc:5c:88:ef:
                    da:be:35:0b:36:56:51:95:50:de:d8:96:7f:96:8e:
                    ac:43:c4:ee:b5:80:d3:e7:54:7a:42:a0:1a:98:7e:
                    e6:88:e0:10:b3:70:78:71:46:5e:55:31:a2:2a:55:
                    18:0a:f9:3c:ee:44:11:f4:ee:23:93:8e:27:2a:13:
                    d2:51:16:1c:2c:47:cf:26:93:fb:bb:ac:5a:44:9a:
                    50:5f:d7:b3:df:73:3d:6e:2a:87:03:fd:47:16:b8:
                    41:30:14:8f:74:6b:52:4e:33:cf:ad:76:24:cb:c0:
                    b0:b7:45:49:58:51:ca:b5:5c:ad:82:f4:a0:c7:ac:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:01:4F:0F:18:34:F1:E0:1E:B5:6E:DC:87:D0:6A:91:85:0A:E0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iYMBTw8YNPHgHrVu3IfQapGFCuA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:2a:92:23:98:1c:17:a7:fb:bf:79:e1:25:43:db:d5:bd:
         e5:6f:b4:7b:80:dc:4b:9f:10:35:8f:cb:c0:e4:42:29:d2:5e:
         b6:bb:2d:5c:50:ab:e9:b3:dd:6d:15:15:2d:a3:65:c4:4f:6e:
         c7:1c:5b:1d:cf:da:09:37:fc:31:d1:7e:af:a3:2a:2d:38:f3:
         6c:50:54:5a:dd:5c:fc:0d:99:4b:f6:51:7d:77:a9:df:72:16:
         04:ab:ef:89:e3:ef:07:56:21:d5:24:cc:e3:5f:9f:93:c1:a0:
         e0:65:d2:fc:04:bb:f7:dd:79:69:d2:d0:1b:00:30:21:52:82:
         bb:b5:b4:e9:48:dd:e8:6f:f0:9a:88:47:64:85:4f:59:64:c5:
         9f:c5:c6:24:88:1d:0b:44:78:ab:69:ed:8f:8e:68:d1:9a:9a:
         40:78:dc:b7:82:19:6b:87:d5:e9:e1:61:16:bb:1d:af:f3:eb:
         44:b8:3a:af:a3:80:10:0e:d4:db:3f:92:fe:c3:b1:d3:2e:ed:
         82:f2:53:f8:f9:66:9a:4d:05:77:30:05:17:86:90:f4:3c:64:
         07:80:7d:73:cf:4b:c7:cb:a5:ce:a0:d1:f1:2f:a2:a7:80:4a:
         41:0f:60:fc:2a:39:69:c2:fc:17:f6:e2:38:b6:43:9d:15:7f:
         4c:3c:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org