Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GVOZVNwZ1pYEQvZsT6Gcr4_Noro.roa
File:                     GVOZVNwZ1pYEQvZsT6Gcr4_Noro.roa (raw, json)
Hash identifier:          GySKtiaZOmDHuJPeh1J/67uH8XIKNi55/iPmcOw5uTs=
Subject key identifier:   19:53:99:54:DC:19:D6:96:04:42:F6:6C:4F:A1:9C:AF:8F:CD:A2:BA
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       34
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GVOZVNwZ1pYEQvZsT6Gcr4_Noro.roa
Signing time:             Sat 01 Mar 2025 01:29:33 +0000
ROA not before:           Sat 01 Mar 2025 01:29:33 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     18071
IP address blocks:        133.185.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar  1 01:29:33 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=19539954DC19D6960442F66C4FA19CAF8FCDA2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:7b:32:3e:ed:0e:96:69:ae:78:2b:b4:66:
                    9b:f6:1a:cc:51:3e:01:3a:f4:6f:d7:f7:5e:0e:16:
                    0c:01:b5:74:8b:9b:ab:01:85:ca:7a:9c:0c:6a:a1:
                    cd:4d:8f:13:92:ac:96:aa:81:43:81:e0:fa:3f:6b:
                    0e:26:22:ed:29:d5:5e:e3:eb:71:b6:70:f9:56:34:
                    6c:ad:33:48:a0:da:83:bc:bc:01:19:df:45:03:f2:
                    58:28:4c:08:ac:8d:d7:33:09:b5:cf:48:50:83:6b:
                    ef:bc:dd:f8:87:84:31:71:34:95:cb:3d:5e:bb:4f:
                    38:c4:66:f8:28:ec:0a:14:9c:24:68:3e:e7:5f:b5:
                    ff:a4:93:a7:d2:0f:bd:60:b5:bc:36:11:56:18:09:
                    9d:dd:99:eb:de:03:7a:0f:b9:10:3d:1e:74:52:41:
                    8c:8c:97:66:68:4c:0b:f9:20:cd:cb:f6:e8:15:ba:
                    10:e5:1c:51:7f:a7:fc:7d:54:8e:98:b4:98:66:89:
                    79:6c:08:bf:e6:47:af:c5:34:31:57:e8:9f:b7:d6:
                    bb:d9:77:7c:44:e0:eb:40:12:53:c2:f2:1c:a2:29:
                    6a:c2:e6:c4:5e:bd:f0:10:38:88:6a:ef:e6:2e:fd:
                    80:25:ad:fd:b2:14:fa:af:b3:c3:23:cd:eb:c9:76:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:53:99:54:DC:19:D6:96:04:42:F6:6C:4F:A1:9C:AF:8F:CD:A2:BA
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/GVOZVNwZ1pYEQvZsT6Gcr4_Noro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.185.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         dd:4a:57:83:7c:8b:0a:bb:a4:6f:36:f7:fa:57:88:78:cc:eb:
         8b:4a:c5:d2:95:3c:e3:f0:17:a7:f1:cf:5c:c8:bf:41:cc:c4:
         78:ea:6e:2a:6d:5b:cd:0d:22:fe:c8:96:5d:5d:56:a2:66:f6:
         c1:19:61:3e:e0:b2:10:3f:9e:ac:c5:59:2b:6b:5b:71:7d:06:
         73:bb:c1:03:68:2b:00:27:53:9d:83:7c:95:6a:b9:f4:b2:e9:
         4b:73:4c:53:de:ec:2a:07:93:88:90:a1:f6:c2:9b:37:fc:f6:
         12:7a:92:21:e4:ef:94:ad:a9:59:9e:37:9f:30:34:b3:0e:22:
         89:1f:6f:83:9d:eb:41:28:40:41:42:29:43:11:d4:07:ea:72:
         86:2e:3d:ed:5a:25:d4:b2:79:16:2e:71:61:e3:3e:70:e0:7c:
         74:1e:60:de:37:a9:e1:ff:1b:de:3d:90:17:72:d4:8a:ba:57:
         27:c9:42:af:37:73:80:b6:44:1f:48:4b:22:e1:0a:f0:fe:c5:
         7d:47:9a:fa:c0:22:e7:ad:67:db:a0:e5:a5:95:e8:58:13:b3:
         fa:61:38:67:dd:6a:b3:a2:ee:8a:32:09:75:56:f1:93:76:64:
         82:42:5d:f5:2c:ae:57:48:3c:93:bd:be:c0:ae:4b:35:e2:07:
         6d:f3:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:41 2025 by rpki-client