Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/6w8IYpbISe_HzHFPBs-h8gjzpH8.roa
File:                     6w8IYpbISe_HzHFPBs-h8gjzpH8.roa (raw, json)
Hash identifier:          HsiScO8zHYefkhs8jfjN8LAaAAuc4DG1sVizBR0w1NM=
Subject key identifier:   EB:0F:08:62:96:C8:49:EF:C7:CC:71:4F:06:CF:A1:F2:08:F3:A4:7F
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       1E
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/6w8IYpbISe_HzHFPBs-h8gjzpH8.roa
Signing time:             Thu 18 Jul 2024 01:47:18 +0000
ROA not before:           Thu 18 Jul 2024 01:47:18 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     24259
IP address blocks:        133.88.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jul 18 01:47:18 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=EB0F086296C849EFC7CC714F06CFA1F208F3A47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:01:70:83:2e:e0:f2:f3:86:be:63:36:cc:
                    38:26:a0:8f:14:bf:b7:fd:a4:57:3c:a5:b4:13:20:
                    0f:51:dc:f4:a6:29:be:65:8d:ab:02:1d:23:12:ce:
                    ae:83:f1:d0:61:d7:a2:08:27:bd:dc:04:e4:51:58:
                    8c:81:56:3b:22:d1:e7:2b:76:b4:85:cb:7c:d6:1c:
                    11:79:2d:57:ae:7f:0e:ce:68:9d:cb:7f:f2:ec:83:
                    6c:18:3d:a4:b3:6f:5c:c2:16:53:1e:7f:a7:94:fa:
                    37:a2:ec:7d:4e:ac:fe:51:34:a4:1b:8f:02:75:96:
                    18:da:42:fc:f7:94:60:c6:4a:87:45:e8:66:e1:eb:
                    01:5a:1e:ac:90:40:eb:c5:76:0c:44:78:15:31:60:
                    55:e8:f8:56:bc:ad:33:b6:79:18:de:c1:b0:ac:37:
                    96:80:7c:4f:f3:13:bc:4a:8a:f5:81:1e:c8:ee:79:
                    78:20:dc:ec:c4:ed:02:bb:12:a1:04:e6:79:15:9a:
                    c7:ca:41:5f:b7:2d:b7:31:90:5b:05:ce:6f:0c:7d:
                    8b:6b:f5:49:48:04:81:a2:7e:97:21:7f:84:22:36:
                    d0:39:8b:e0:ff:6a:10:f2:37:bb:14:32:92:64:fc:
                    7c:1b:d4:86:5a:79:3c:9d:c7:49:19:58:73:6a:9a:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0F:08:62:96:C8:49:EF:C7:CC:71:4F:06:CF:A1:F2:08:F3:A4:7F
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/6w8IYpbISe_HzHFPBs-h8gjzpH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:09:39:b0:e0:63:15:09:f9:79:cb:58:7e:90:91:14:03:74:
         43:41:67:f8:a2:c1:fc:03:fd:4a:4e:9f:a4:1f:57:12:cd:ff:
         64:cb:9f:d3:2f:cb:39:e0:a8:e8:d8:f0:c2:4d:a2:b3:10:1c:
         9d:ab:eb:31:48:28:92:5d:d3:50:7c:8b:3e:d6:d0:cc:97:89:
         b3:aa:c9:2a:9e:a9:a5:3e:9d:6e:94:c0:5b:22:1f:7d:e7:f9:
         e6:a7:69:05:c7:6d:45:72:ae:a3:c4:d8:0a:a6:29:ba:cf:95:
         99:22:f0:7e:08:77:4a:6b:6e:89:41:63:49:06:bc:f2:f9:e4:
         e4:4c:af:9c:c3:31:8e:a8:e1:b1:28:bd:99:c5:9c:ec:12:38:
         1f:83:19:89:0f:b2:02:06:f6:e1:28:b8:88:43:f1:ad:05:0e:
         17:03:39:14:54:ec:44:b4:f3:b7:6e:84:d0:b1:51:86:e9:17:
         5e:28:dd:2d:bb:07:52:af:2e:a6:40:dd:80:71:3b:8f:08:25:
         8b:a2:34:be:6a:ad:5e:6d:91:87:bd:f4:1c:59:ab:4a:f4:df:
         0b:54:a9:33:b6:fb:ae:da:a9:e9:64:71:15:d6:1c:f0:f6:fb:
         59:1a:f7:af:60:8b:a1:01:f2:b2:2f:40:3d:5b:ba:fb:ff:f9:
         a5:89:e1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:09 2025 by rpki-client