Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1188/w-pHKcL5Tx-BiT8n16EWe-AQNl8.roa
File:                     w-pHKcL5Tx-BiT8n16EWe-AQNl8.roa (raw, json)
Hash identifier:          OJknayD5Z9smIX6SJqn6Vlv9m9AVNknJwRDMAsB0rnc=
Subject key identifier:   C3:EA:47:29:C2:F9:4F:1F:81:89:3F:27:D7:A1:16:7B:E0:10:36:5F
Certificate issuer:       /CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
Certificate serial:       0F
Authority key identifier: 81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/w-pHKcL5Tx-BiT8n16EWe-AQNl8.roa
Signing time:             Wed 18 Oct 2023 07:14:28 +0000
ROA not before:           Wed 18 Oct 2023 07:14:28 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     0
IP address blocks:        133.252.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8188C01C8AF4C7886FC19750779AF58E5E1333E4
        Validity
            Not Before: Oct 18 07:14:28 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=C3EA4729C2F94F1F81893F27D7A1167BE010365F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:86:5c:06:71:87:ff:f9:19:cf:6d:b3:2d:
                    f9:61:fb:a8:79:06:12:88:9c:8b:2d:64:85:b7:30:
                    f2:ed:d6:ed:57:3e:21:af:f3:df:fe:84:1c:cd:8d:
                    70:da:b4:11:51:e2:90:08:14:7a:da:00:cb:07:f3:
                    72:07:9c:0b:7d:7e:da:8a:2b:0f:83:a8:3f:f0:0c:
                    3c:90:1b:bf:05:26:65:09:6f:b7:8e:fa:46:43:90:
                    bc:59:5b:e4:55:c0:be:58:0f:62:d3:b5:69:e0:46:
                    7d:89:ab:63:aa:17:07:45:39:ee:2b:cf:36:02:b1:
                    4c:21:68:d2:06:b0:a6:bb:da:1e:43:1d:3e:f1:f9:
                    d3:0c:68:be:26:9e:3b:3a:db:4b:a0:b2:f4:a6:9b:
                    7a:fa:0d:5a:10:5a:94:e3:60:f5:c0:de:75:c1:a4:
                    5e:c2:25:89:6b:ba:83:59:94:00:d4:f5:62:88:66:
                    20:fe:2f:5f:4a:e9:88:6b:2e:d2:fe:94:2a:a6:a4:
                    cf:e7:d5:98:f1:09:2c:d2:68:00:d0:6d:89:51:b3:
                    78:e5:85:2a:f0:1c:86:59:eb:9f:49:d2:f6:df:00:
                    4a:7f:23:58:8d:38:f5:d1:32:a6:7f:27:98:0d:bd:
                    59:9f:e2:4c:0b:58:aa:9c:5d:5f:53:6d:84:34:70:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:47:29:C2:F9:4F:1F:81:89:3F:27:D7:A1:16:7B:E0:10:36:5F
            X509v3 Authority Key Identifier:
                keyid:81:88:C0:1C:8A:F4:C7:88:6F:C1:97:50:77:9A:F5:8E:5E:13:33:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gYjAHIr0x4hvwZdQd5r1jl4TM-Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1188/w-pHKcL5Tx-BiT8n16EWe-AQNl8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:e1:86:98:99:4c:ac:b7:ae:a5:64:ee:57:61:91:f0:9b:04:
         3c:f3:f4:b8:f2:9c:2f:a4:12:0b:28:d2:58:9a:40:b6:2f:94:
         61:32:da:0d:7c:77:ef:75:aa:1e:3c:38:9a:dd:8e:04:c9:4b:
         6a:df:a9:0f:d5:85:6b:a5:95:90:ac:9a:5a:6c:30:bb:5c:19:
         3f:bd:b8:9e:05:a5:b6:17:da:ca:df:6b:5e:98:0d:55:16:4e:
         7d:91:2c:e9:18:f0:ab:1a:89:94:ab:86:1f:b8:77:51:05:19:
         3f:76:54:f7:e9:5d:f3:70:d0:35:51:1f:fb:1c:aa:06:0e:24:
         c2:80:f3:6c:4e:4c:6f:08:e2:9a:ce:19:bc:ba:ec:0d:fc:00:
         74:01:00:ff:87:8c:4f:b5:83:48:3d:8e:7a:f6:c6:e5:01:90:
         9e:17:cf:79:ab:84:cd:02:b1:88:df:5c:ba:01:95:7a:4c:3d:
         95:3a:69:9d:21:b1:8c:c7:1c:8c:bf:16:60:04:62:0e:da:23:
         0c:f9:2e:64:50:8a:4c:c1:ec:8a:83:0c:49:8b:8d:5f:5e:0a:
         cb:57:9d:8a:68:05:0b:15:d2:85:73:5e:16:75:17:0e:6c:d6:
         a9:de:33:e1:a0:c5:4f:60:b8:e2:a0:f9:91:dd:05:10:78:86:
         e2:0b:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:48 2024 by rpki-client on console-ams.rpki-client.org