Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/LVdnVF1qedAFHPXxu1Y0AC0Df7c.roa
File:                     LVdnVF1qedAFHPXxu1Y0AC0Df7c.roa (raw, json)
Hash identifier:          0ffNEtEj5MwcT9SWgwFRFR4s2cKXLRhjIAhK4A8HBAs=
Subject key identifier:   2D:57:67:54:5D:6A:79:D0:05:1C:F5:F1:BB:56:34:00:2D:03:7F:B7
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       06
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/LVdnVF1qedAFHPXxu1Y0AC0Df7c.roa
Signing time:             Wed 02 Aug 2023 02:02:57 +0000
ROA not before:           Wed 02 Aug 2023 02:02:57 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        133.88.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Aug  2 02:02:57 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=2D5767545D6A79D0051CF5F1BB5634002D037FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:32:13:da:6e:05:5d:4d:2a:c6:93:77:36:
                    4c:a9:29:22:55:c7:00:36:6e:dd:c4:96:06:b1:fa:
                    ac:22:08:dd:1d:4b:26:9a:9b:46:37:c7:b4:a6:2d:
                    06:0d:c6:04:1f:4d:63:66:11:3d:b7:ab:b0:d0:65:
                    5d:d0:28:50:61:ed:76:11:33:61:ee:11:72:2b:9c:
                    aa:a9:3c:f7:71:8a:84:30:e3:bf:52:f6:b4:ea:fc:
                    7a:12:38:fa:3b:e5:41:94:0b:7f:4b:49:6f:12:1c:
                    34:4b:55:a6:50:01:4b:62:88:95:04:75:95:c9:68:
                    94:b4:10:13:88:95:ce:25:14:42:63:5f:6f:ad:8b:
                    a9:64:82:a9:40:e3:33:97:a1:b5:dd:7a:80:f9:af:
                    57:8e:e0:b0:f6:33:a6:e1:22:38:24:af:0e:7e:84:
                    82:10:7b:16:77:69:1b:e1:30:86:ba:03:d9:53:b4:
                    20:c8:8c:fa:39:82:de:9f:d4:cf:3f:20:07:81:2e:
                    42:94:4d:40:05:58:4e:07:e1:04:82:cb:11:11:ad:
                    b0:09:89:9f:46:f7:97:59:b7:19:e3:a6:20:78:55:
                    4e:a9:3a:ae:49:13:7a:4f:36:09:15:a3:a9:29:39:
                    d8:d1:6c:76:73:03:5f:aa:e1:d8:db:02:be:5e:a3:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:67:54:5D:6A:79:D0:05:1C:F5:F1:BB:56:34:00:2D:03:7F:B7
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/LVdnVF1qedAFHPXxu1Y0AC0Df7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f1:91:16:4a:19:35:06:28:03:c1:b5:d5:aa:64:7b:af:dc:
         32:63:bf:ed:59:dd:63:55:d6:64:66:73:cc:f1:22:35:a2:a0:
         1b:5c:4e:3d:a4:a8:30:ac:ec:17:d1:67:8a:f4:d6:44:0a:d1:
         d3:08:ea:55:a8:47:c8:55:e5:8a:fc:11:25:d0:12:50:1e:c3:
         92:c6:42:a1:18:9c:cb:59:0c:4a:bd:a8:57:48:8c:78:4e:5d:
         e5:89:e7:c5:79:c8:80:f7:a0:04:69:88:10:a2:c7:d2:2b:5d:
         f6:96:71:b6:02:ce:fb:71:88:44:b9:fc:a8:3f:88:2e:3d:ce:
         14:83:cf:cb:78:f3:8f:9a:3c:68:2e:4f:76:e9:91:ae:48:e5:
         71:46:c7:82:07:86:ef:e7:33:aa:75:82:91:d2:19:84:b1:1a:
         42:b5:18:3c:4b:5f:5e:2c:8a:8d:74:ad:e5:01:e8:32:2d:b3:
         85:38:d5:34:a7:dc:6f:53:2d:05:34:c3:9a:8a:ae:7e:ed:da:
         b0:b5:2d:d9:6a:c8:0e:e2:5d:24:2b:1b:48:24:a8:26:01:c7:
         77:47:40:0b:11:72:2b:77:27:c0:44:01:3d:1b:d1:19:17:01:
         42:37:90:d8:0e:75:24:97:90:20:5c:1b:7e:de:41:a4:18:49:
         f5:7e:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org