Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa
File:                     z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa (raw, json)
Hash identifier:          fuLjtl/3907DpvgbtDEnlRo9TuO4fHpBCWf+0D3MpjQ=
Subject key identifier:   CF:F3:1F:DE:03:CD:FA:EC:28:35:52:F2:6C:9A:92:1A:B2:B3:41:BB
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       1F
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa
Signing time:             Fri 01 Dec 2023 05:36:38 +0000
ROA not before:           Fri 01 Dec 2023 05:36:38 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     55385
IP address blocks:        133.247.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Dec  1 05:36:38 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=CFF31FDE03CDFAEC283552F26C9A921AB2B341BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:21:bb:90:ca:57:ee:a2:9f:ff:e3:3e:e8:
                    55:9f:09:6a:1f:6f:c0:e4:2d:49:cb:1a:3c:78:4e:
                    83:08:f8:a1:75:47:ba:84:fe:87:d5:d2:3a:7f:23:
                    e0:1d:5d:f7:02:2f:26:a3:93:73:e1:d6:6c:47:bd:
                    88:18:18:a7:be:06:f1:74:1a:42:f1:1e:2f:d1:60:
                    3b:3e:1d:6f:f5:e2:50:95:7a:e8:d7:b8:13:2b:09:
                    55:cf:eb:8c:3f:8e:7a:a9:68:10:ed:52:44:69:e4:
                    31:5d:50:83:13:55:e5:42:45:f3:68:7f:3c:14:d0:
                    ca:50:52:2f:7a:69:3f:09:de:d1:ef:2a:ad:5b:36:
                    53:89:27:68:3c:cd:c9:0b:dd:af:70:da:fa:e9:ee:
                    34:37:14:8d:85:8b:d2:39:a2:bf:9d:e1:a4:e3:4d:
                    83:2e:a9:05:fa:ae:0c:23:8f:ec:f3:e7:f8:d3:03:
                    60:2c:cf:db:a2:7b:b5:3f:c2:0c:02:cd:1f:45:04:
                    ae:7c:57:48:ed:a6:80:be:95:af:74:b2:ac:c2:d2:
                    49:ed:ac:a6:6c:21:d2:f0:df:51:cf:cf:7d:89:97:
                    77:37:41:2f:9a:b1:f7:73:fd:e7:94:f4:6b:af:36:
                    f6:5e:1b:24:2b:65:93:59:54:5c:23:aa:55:36:cc:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F3:1F:DE:03:CD:FA:EC:28:35:52:F2:6C:9A:92:1A:B2:B3:41:BB
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/z_Mf3gPN-uwoNVLybJqSGrKzQbs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:a5:17:5b:bc:87:04:f9:c9:74:a2:bb:1f:a0:f9:34:65:02:
         b2:fd:04:21:21:e3:e1:75:70:6c:d0:75:61:33:b5:16:a0:61:
         4a:96:3d:93:25:2c:73:e6:6f:aa:6e:29:52:c2:66:52:01:80:
         34:fa:65:53:cc:8b:3d:af:0f:2c:d6:2a:89:28:9f:7b:4d:c0:
         cb:54:29:11:8f:a3:bc:ea:8b:c5:58:87:2c:46:c6:4b:75:f3:
         d9:2b:c9:52:56:9f:7c:77:b2:9d:9c:cc:d5:30:1c:25:e4:1a:
         6e:03:35:36:a2:0f:93:b0:de:51:13:99:89:96:43:e0:ec:27:
         47:3c:37:77:32:12:f3:a0:a4:9e:ed:ca:a8:e4:32:08:c7:a8:
         ef:ff:22:18:cb:b6:1e:fa:e2:0b:9a:23:55:d9:ba:21:5a:5a:
         df:c8:fb:6e:7d:55:01:9a:09:5a:bc:bd:88:f6:65:eb:47:3d:
         85:5d:40:af:50:7d:06:39:68:f3:f3:3f:8d:a1:b5:84:08:9d:
         65:fa:f2:01:ad:aa:10:d6:0e:33:60:5c:00:20:4f:3f:71:4c:
         ef:7b:f1:54:15:d1:64:e6:31:e5:38:05:35:80:00:59:07:91:
         8e:f7:4d:f7:21:a4:a8:03:3a:64:10:e5:c5:b6:72:be:34:d5:
         ca:dd:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:52 2024 by rpki-client on console-ams.rpki-client.org