Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/tfLES7hTWd1TaXsYzEBRPn3sNJ0.roa
File:                     tfLES7hTWd1TaXsYzEBRPn3sNJ0.roa (raw, json)
Hash identifier:          wchRxoow5syL2Neknaip1qcn3FB9V+vTaJzywp7XiRE=
Subject key identifier:   B5:F2:C4:4B:B8:53:59:DD:53:69:7B:18:CC:40:51:3E:7D:EC:34:9D
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0185
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tfLES7hTWd1TaXsYzEBRPn3sNJ0.roa
Signing time:             Sat 31 Aug 2024 01:29:11 +0000
ROA not before:           Sat 31 Aug 2024 01:29:11 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        133.137.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 31 01:29:11 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=B5F2C44BB85359DD53697B18CC40513E7DEC349D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:8f:ac:39:bf:7e:e5:9d:04:4e:5c:ef:d2:
                    cf:e6:03:c9:69:ee:ad:09:82:4d:8c:d6:25:af:b6:
                    62:4b:88:86:56:fb:24:10:df:be:44:b6:00:28:0f:
                    f9:2d:c4:e3:d2:cd:c3:ab:42:95:d7:b7:8b:23:a5:
                    85:85:ee:85:de:73:0b:b2:91:02:0d:1f:0c:2f:ad:
                    24:d5:9c:a3:be:68:73:1d:35:e2:19:67:5a:a9:6b:
                    e8:02:6f:ea:79:69:45:8a:46:27:c4:e0:2e:41:21:
                    fa:9c:a2:3d:6c:02:a2:47:53:38:0d:4c:45:3b:92:
                    ca:97:44:56:ac:a7:2a:c2:3c:82:f2:8f:82:e0:16:
                    f4:d2:a0:41:e4:9f:93:eb:07:9b:42:71:17:74:cd:
                    60:6a:7f:5e:fe:0a:9c:be:ff:1b:b8:76:ab:1d:fd:
                    34:fa:34:dc:28:1d:89:4d:79:7c:05:ab:3a:cf:94:
                    c3:c7:13:0c:68:38:ea:43:f5:0e:d4:8d:cd:27:76:
                    98:9d:2a:da:75:e4:d0:57:3f:90:76:a0:0c:71:92:
                    d5:c2:39:66:e3:38:e6:d9:e6:47:1d:0a:90:79:cc:
                    ba:e6:ac:83:fa:54:c4:b7:f8:da:af:7e:a5:5a:bc:
                    b0:ad:19:d8:9d:37:5a:16:fe:42:d5:21:f9:d2:b0:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:C4:4B:B8:53:59:DD:53:69:7B:18:CC:40:51:3E:7D:EC:34:9D
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tfLES7hTWd1TaXsYzEBRPn3sNJ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:8f:14:74:59:be:8e:a4:90:5d:0c:cb:cb:13:41:a4:aa:
         29:9b:15:e0:2e:47:ab:fd:00:85:e7:71:5e:96:98:30:98:b2:
         c5:60:ab:56:eb:5b:dd:6d:cf:76:f1:74:de:d3:33:c5:cd:9a:
         d0:0c:85:b5:dc:22:7b:e1:2d:48:17:33:f4:96:53:e4:8d:65:
         90:a3:3a:e1:11:f5:d7:11:5c:16:83:16:8a:8a:4b:6c:ae:09:
         f9:9c:32:7f:6d:09:20:45:7b:4a:05:99:8e:dd:7c:e8:25:0f:
         1b:28:7f:39:9f:7b:bd:14:37:ac:2f:f7:ef:1d:04:16:c1:6e:
         77:62:2e:7b:cc:0c:46:b8:1e:c8:ee:ec:f5:65:c5:bd:4d:bd:
         41:a9:09:94:ac:9a:c8:30:ae:64:b3:48:de:f4:36:4c:80:55:
         c6:63:f6:ea:0b:1f:9e:af:8c:9a:9f:de:af:3f:73:9b:5f:63:
         1d:68:a6:77:8e:32:1b:55:ff:d1:91:58:ba:39:1e:ed:96:d9:
         ab:f7:b9:bf:62:87:b3:fe:67:06:6c:df:01:f1:67:d5:9a:33:
         93:65:47:3b:55:6c:f6:a4:4d:5a:0d:9c:d3:0e:0c:61:2b:62:
         77:b8:8c:86:34:12:1f:b1:d1:75:83:76:d8:5e:d2:6c:24:c7:
         c8:2f:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org