Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/WMTWnROrDHFO0jvKKbCc2ScWVhk.roa
File:                     WMTWnROrDHFO0jvKKbCc2ScWVhk.roa (raw, json)
Hash identifier:          /5T2Y9klRFOvsazdSzXOhHNpA1qgw02X8Ez041JOGew=
Subject key identifier:   58:C4:D6:9D:13:AB:0C:71:4E:D2:3B:CA:29:B0:9C:D9:27:16:56:19
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       0E
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/WMTWnROrDHFO0jvKKbCc2ScWVhk.roa
Signing time:             Mon 18 Mar 2024 01:49:37 +0000
ROA not before:           Mon 18 Mar 2024 01:49:37 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        119.82.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 01:49:37 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=58C4D69D13AB0C714ED23BCA29B09CD927165619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:1c:28:59:1e:64:1c:10:00:b5:2c:27:18:
                    6a:1f:b8:c4:d6:da:b3:4e:44:8b:7c:8f:b5:18:85:
                    a1:f7:42:56:ea:b2:3c:68:ed:89:d9:43:3b:0e:7e:
                    7c:e7:c8:51:a5:2b:9c:6a:70:a4:58:ba:74:47:ab:
                    c8:2b:b8:79:57:14:8b:9a:89:92:b5:1b:86:00:f4:
                    16:e5:e6:b5:cf:9a:15:f8:80:13:84:7f:39:ce:6b:
                    f8:fe:08:94:01:f4:91:be:95:19:f6:a1:10:4c:07:
                    b7:c8:23:2c:3f:5e:11:d1:d5:8e:bc:8a:c0:db:78:
                    12:a8:9a:85:43:db:e2:33:a6:8d:d7:43:61:26:2b:
                    da:66:77:23:8a:cf:c2:05:b9:84:31:58:91:d8:c5:
                    3a:ea:15:ff:5a:17:56:21:bc:8e:60:64:af:59:7f:
                    7f:fb:1d:7e:00:ae:11:9e:af:2d:6c:58:69:b5:c7:
                    7a:a6:b2:84:ae:a4:02:8a:f7:5f:dd:3b:02:1e:09:
                    ef:d1:86:b3:7d:a7:f9:5f:33:95:b6:9c:80:0f:a6:
                    3f:a7:2c:af:62:e9:db:be:ec:16:5d:36:79:73:8c:
                    06:14:a5:64:89:f9:b3:8f:d3:06:dc:e0:cc:43:2e:
                    c4:07:0f:65:60:a6:46:1c:47:6c:36:ce:5c:b2:16:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C4:D6:9D:13:AB:0C:71:4E:D2:3B:CA:29:B0:9C:D9:27:16:56:19
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/WMTWnROrDHFO0jvKKbCc2ScWVhk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.82.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:6f:65:c2:cf:9d:d5:a4:a8:5c:e7:a1:39:64:58:1b:3d:
         94:f7:63:ac:21:2b:7a:5d:c5:20:ba:55:6c:5b:a2:16:dc:08:
         a5:3e:b0:95:c0:e2:68:51:40:f1:3e:9b:7b:ec:45:07:3a:ce:
         c8:25:97:1d:8e:5a:47:5e:41:bc:b2:8f:f7:d0:97:9e:b4:bf:
         0d:4a:30:e9:df:94:c4:20:9e:85:6a:ca:75:4b:06:da:4a:95:
         ae:d9:12:f1:3e:50:50:9a:1f:b5:0a:7e:b5:dc:02:75:1e:04:
         66:61:44:8e:ed:1d:89:73:fd:6f:36:11:67:0e:98:01:94:be:
         a2:45:3a:37:32:7d:52:a5:00:59:da:79:f9:07:dd:08:03:fa:
         5c:99:76:67:50:7b:29:77:73:1f:6e:73:13:4f:95:bf:f0:96:
         6c:70:c9:5d:e1:98:ed:1f:54:24:47:a2:e6:b1:7e:ef:a5:74:
         34:8c:be:12:32:71:ca:0b:8a:3e:41:1c:0a:7a:85:f8:48:de:
         db:9f:82:f0:48:47:18:49:10:e8:76:4d:7b:80:bb:6e:6b:2f:
         81:c7:89:8e:b5:d2:71:b9:9f:09:a4:5a:0b:a4:d6:e0:c8:e7:
         bb:5c:3d:1b:56:a6:c3:c1:c7:fe:53:fe:27:f5:fb:99:5a:a2:
         16:26:cd:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org