Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/ma6JiwYues_fCcLxKQnVd9N90T0.roa
File:                     ma6JiwYues_fCcLxKQnVd9N90T0.roa (raw, json)
Hash identifier:          BiUN/P4hJxsdsJdGCYidTKuM4dDsvRH+aQT2mxJCEPo=
Subject key identifier:   99:AE:89:8B:06:2E:7A:CF:DF:09:C2:F1:29:09:D5:77:D3:7D:D1:3D
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       2F
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/ma6JiwYues_fCcLxKQnVd9N90T0.roa
Signing time:             Thu 31 Oct 2024 01:28:26 +0000
ROA not before:           Thu 31 Oct 2024 01:28:26 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     55385
IP address blocks:        133.247.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Oct 31 01:28:26 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=99AE898B062E7ACFDF09C2F12909D577D37DD13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:da:36:12:0f:90:52:f4:69:60:a3:4a:e1:
                    ec:7a:20:bf:09:3c:02:28:1b:b7:2e:ab:4f:57:df:
                    5b:aa:59:a2:77:09:0d:43:46:83:e1:e4:35:15:1d:
                    60:29:7f:8e:94:ef:f6:bb:d4:a2:a1:72:f2:69:5a:
                    7b:cd:88:48:14:66:dc:72:a5:3e:d8:46:38:60:cc:
                    30:26:cd:6d:45:a0:27:1c:75:b6:1c:5d:17:a6:f9:
                    1d:2c:61:fc:8a:49:1a:e8:89:3c:42:31:95:ea:a2:
                    d9:87:43:69:1c:b4:48:d1:ef:99:06:d4:a4:c1:b8:
                    a0:e0:b3:4a:77:c5:d8:6e:58:f6:c0:d9:9a:28:73:
                    d7:97:ca:75:a0:3e:a2:9e:fa:3f:97:bc:fc:67:9c:
                    6b:2b:5a:97:8c:70:c1:90:a1:a6:38:f9:e6:24:04:
                    03:26:7f:44:33:fb:f0:f3:53:0d:50:1e:b3:d5:4b:
                    80:5a:06:25:4d:06:e3:96:cc:f5:f6:9e:98:18:29:
                    1b:4a:e6:07:c6:e1:91:d0:3f:37:2e:3c:aa:6f:fd:
                    2b:bb:69:c8:01:54:f1:8a:d3:07:69:77:ea:02:e4:
                    55:61:a5:c3:26:ba:fb:1c:b7:95:6f:a1:48:11:da:
                    a0:2d:4c:81:79:d4:41:ab:a8:e2:6e:c4:ee:89:1d:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:89:8B:06:2E:7A:CF:DF:09:C2:F1:29:09:D5:77:D3:7D:D1:3D
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/ma6JiwYues_fCcLxKQnVd9N90T0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:30:5f:fc:c5:1b:90:6a:7a:08:e0:1f:a9:ca:e1:f5:de:e5:
         68:3d:33:b7:ee:a2:e5:53:22:86:94:09:f9:8d:e6:b5:3a:98:
         95:ee:29:9d:44:06:7a:d5:84:96:24:e9:a8:20:d7:90:9c:cb:
         c0:cb:5b:63:38:c8:56:1a:87:9c:d4:f7:df:ba:65:01:f1:04:
         3b:5c:93:49:8f:72:e4:94:b1:0a:94:27:09:a6:c7:33:3d:4a:
         00:2f:94:8e:be:b6:77:ff:4d:24:bd:0b:1f:e6:22:7f:a7:84:
         61:60:8e:31:df:05:f8:7d:5a:75:70:b3:b4:d8:2c:6a:96:2d:
         f5:31:3a:7c:2f:d1:dd:13:d9:cb:8f:cf:78:99:41:12:de:6e:
         72:94:af:ed:78:58:13:cf:1b:5d:8b:40:4a:24:b7:82:d1:54:
         b8:16:25:8c:30:dd:cb:c2:e9:9e:6a:7b:a6:0a:55:ad:8b:85:
         7a:aa:ba:6b:a5:3a:68:aa:60:1a:c2:f6:d7:1e:87:e6:c2:04:
         f7:03:63:39:8c:dc:15:dd:f5:56:02:a5:43:a4:d6:54:8a:74:
         2e:69:50:d6:0f:94:a4:fe:42:cd:83:91:28:9c:57:e2:77:94:
         99:fc:fb:83:dc:b3:b4:13:82:0c:11:27:40:e1:4e:75:71:79:
         2b:d8:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:49 2024 by rpki-client on console-ams.rpki-client.org