Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/52497COl931g2k2VBJFOt-NY-vg.roa
File:                     52497COl931g2k2VBJFOt-NY-vg.roa (raw, json)
Hash identifier:          wyf0GpGMEhlKgtCP4RfuSzWyQ+1LwpQWic9+0RVSgEM=
Subject key identifier:   E7:6E:3D:EC:23:A5:F7:7D:60:DA:4D:95:04:91:4E:B7:E3:58:FA:F8
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       1C
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/52497COl931g2k2VBJFOt-NY-vg.roa
Signing time:             Thu 18 Jul 2024 01:47:17 +0000
ROA not before:           Thu 18 Jul 2024 01:47:17 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     24259
IP address blocks:        133.88.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jul 18 01:47:17 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=E76E3DEC23A5F77D60DA4D9504914EB7E358FAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:39:c0:df:cb:e3:c9:0d:04:bd:f5:a1:bf:
                    22:27:ed:a3:d7:ae:7f:2b:2d:69:f8:95:76:57:01:
                    18:21:b4:42:fd:28:f9:32:c8:8e:01:c3:38:69:16:
                    96:dc:da:c0:96:8e:a5:5b:e7:a5:1e:a8:70:d3:5c:
                    bc:77:87:29:8b:df:a4:a5:4f:a0:2a:81:1e:84:a8:
                    40:96:d7:f8:27:6d:aa:f9:a2:3b:40:f7:76:32:d5:
                    89:07:24:ca:81:4c:a7:13:d8:1e:61:ce:3a:a0:64:
                    e5:98:7f:31:67:00:02:31:94:cb:19:d6:ea:58:79:
                    5b:08:bc:fd:fb:53:7a:01:ec:b5:2e:f4:88:f2:7b:
                    7f:a1:e7:43:4a:9b:49:a4:4e:7a:e2:77:f9:93:49:
                    f0:c2:96:e2:91:2b:f0:f2:df:15:a7:aa:99:19:c0:
                    97:6c:a1:90:37:34:5f:c6:5e:3f:b5:de:63:ce:ed:
                    1d:f5:08:18:9e:dc:8d:02:53:0c:ba:5a:2d:f8:0e:
                    a3:d8:bd:50:b8:90:cb:ef:0d:b6:55:8d:da:39:ef:
                    78:d0:c0:58:35:56:a4:b8:48:77:24:a1:61:46:29:
                    96:ed:8f:2d:cf:95:f2:c9:13:78:16:f0:80:63:e9:
                    e7:4c:1c:52:d7:50:46:f2:e8:44:f7:eb:64:b4:0f:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6E:3D:EC:23:A5:F7:7D:60:DA:4D:95:04:91:4E:B7:E3:58:FA:F8
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/52497COl931g2k2VBJFOt-NY-vg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:6b:5c:07:2d:73:20:e7:90:e8:24:ea:85:02:47:e0:73:e0:
         eb:87:fa:83:c1:be:9e:c9:f0:62:30:1d:70:2b:96:ef:59:56:
         e7:3b:99:12:60:95:4f:cf:f7:1b:36:1b:e0:d9:96:40:45:3d:
         5a:98:61:b1:65:68:76:af:5f:82:79:0d:b9:24:6e:61:0a:26:
         c8:c1:82:2d:32:d9:1b:1a:4a:fc:3d:3c:0b:49:60:d6:f5:64:
         28:5b:87:fc:23:52:8c:a4:32:a6:9e:4e:15:79:a3:77:79:c3:
         63:3c:b6:c1:d3:3e:06:b1:8d:1f:28:9f:98:57:7e:5a:96:22:
         01:84:06:8b:36:12:10:17:cd:97:84:77:89:cc:18:8b:1e:b4:
         3b:9c:42:25:94:18:76:40:1b:a6:a4:95:e7:53:f3:8a:93:12:
         fd:e6:18:ae:a7:d4:06:53:a3:0d:61:bc:b7:89:63:f6:b9:5f:
         4d:52:07:2c:13:04:1f:62:d9:b3:9e:2f:3e:10:f0:72:84:0c:
         22:bb:ac:24:96:4e:35:21:fc:48:1f:91:0e:fe:e0:9f:0c:37:
         6c:cc:fd:f3:1a:91:7b:98:fe:18:0b:d6:86:b7:7c:81:4d:ee:
         51:1b:9f:ac:44:f5:eb:8e:a4:29:3b:a7:db:a2:ad:f2:ee:ed:
         c3:e1:b4:52
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC
REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI0MDcxODAx
NDcxN1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoRTc2RTNERUMyM0E1Rjc3
RDYwREE0RDk1MDQ5MTRFQjdFMzU4RkFGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM1BOcDfy+PJDQS99aG/Iifto9eufystafiVdlcBGCG0Qv0o+TLI
jgHDOGkWltzawJaOpVvnpR6ocNNcvHeHKYvfpKVPoCqBHoSoQJbX+CdtqvmiO0D3
djLViQckyoFMpxPYHmHOOqBk5Zh/MWcAAjGUyxnW6lh5Wwi8/ftTegHstS70iPJ7
f6HnQ0qbSaROeuJ3+ZNJ8MKW4pEr8PLfFaeqmRnAl2yhkDc0X8ZeP7XeY87tHfUI
GJ7cjQJTDLpaLfgOo9i9ULiQy+8NtlWN2jnveNDAWDVWpLhIdyShYUYplu2PLc+V
8skTeBbwgGPp50wcUtdQRvLoRPfrZLQPSO8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTnbj3sI6X3fWDaTZUEkU6341j6+DAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ
gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3
ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDYvNTI0OTdDT2w5MzFnMmsyVkJKRk90LU5ZLXZnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAIVYTzANBgkqhkiG9w0BAQsFAAOCAQEAwWtcBy1zIOeQ6CTqhQJH4HPg64f6
g8G+nsnwYjAdcCuW71lW5zuZEmCVT8/3GzYb4NmWQEU9WphhsWVodq9fgnkNuSRu
YQomyMGCLTLZGxpK/D08C0lg1vVkKFuH/CNSjKQypp5OFXmjd3nDYzy2wdM+BrGN
HyifmFd+WpYiAYQGizYSEBfNl4R3icwYix60O5xCJZQYdkAbpqSV51PzipMS/eYY
rqfUBlOjDWG8t4lj9rlfTVIHLBMEH2LZs54vPhDwcoQMIrusJJZONSH8SB+RDv7g
nww3bMz98xqRe5j+GAvWhrd8gU3uURufrET1646kKTun26Kt8u7tw+G0Ug==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:17 2025 by rpki-client