Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/DLSnDRyw4-XBiuLC6ySwJlq9ero.roa
File:                     DLSnDRyw4-XBiuLC6ySwJlq9ero.roa (raw, json)
Hash identifier:          ew1YQ+PmpSwy+qaNch7/aPsWqU0zkl1sLfYZALszKcE=
Subject key identifier:   0C:B4:A7:0D:1C:B0:E3:E5:C1:8A:E2:C2:EB:24:B0:26:5A:BD:7A:BA
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       12
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/DLSnDRyw4-XBiuLC6ySwJlq9ero.roa
Signing time:             Tue 02 Apr 2024 00:21:10 +0000
ROA not before:           Tue 02 Apr 2024 00:21:10 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.184.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Apr  2 00:21:10 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=0CB4A70D1CB0E3E5C18AE2C2EB24B0265ABD7ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:a3:ac:c4:76:a5:5b:59:0a:e5:41:95:64:
                    d0:9d:4d:92:95:b1:76:ac:ba:98:58:6c:7b:e7:b1:
                    29:28:fd:a0:af:05:09:c8:19:10:f2:8d:db:92:ac:
                    b4:b2:f2:74:85:12:6f:e7:d5:b9:af:1f:d9:f9:01:
                    b2:cd:16:22:08:3f:b4:80:bb:4e:70:18:ac:8b:47:
                    28:14:c5:38:7a:18:ee:af:ac:d8:cb:d1:bd:b6:93:
                    d4:8e:01:4e:66:ba:39:c3:55:d1:1a:34:fa:15:65:
                    a6:7d:28:96:e7:73:de:8a:c6:aa:9b:01:97:fd:97:
                    bc:89:59:56:83:e1:d2:4d:2e:2c:e6:4c:6d:51:b3:
                    77:ca:4e:f3:0e:c2:aa:82:19:f2:5c:8b:be:65:d5:
                    31:95:0e:8a:16:06:89:6b:b7:bc:68:91:d8:39:d0:
                    e0:73:df:69:b8:d9:0d:d9:85:13:bb:17:04:51:8c:
                    5e:44:c2:eb:e1:a9:bc:14:c9:73:4b:71:03:b1:e9:
                    e1:a6:d6:42:3c:0a:02:04:07:f8:14:85:54:df:d6:
                    2b:ed:2b:3f:88:14:86:51:7d:b1:51:32:29:8f:c0:
                    fc:10:f5:46:8e:36:25:31:01:95:9d:51:18:51:9d:
                    f5:c5:f9:c4:98:97:ee:e0:05:d5:34:55:00:50:6a:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B4:A7:0D:1C:B0:E3:E5:C1:8A:E2:C2:EB:24:B0:26:5A:BD:7A:BA
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/DLSnDRyw4-XBiuLC6ySwJlq9ero.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:41:d3:8a:4f:df:86:cf:f9:0e:b8:d2:e1:24:50:70:7b:3c:
         1f:51:94:3a:0a:dc:71:8e:b7:9c:a2:9e:89:67:9f:c1:ea:b0:
         25:96:0d:20:98:b2:de:38:ff:5b:81:ca:47:dc:db:9a:7b:7c:
         36:fe:77:3d:f3:1f:3d:b4:11:c0:dc:59:60:e5:d8:e2:dc:2d:
         60:6f:73:0c:1a:0a:c1:46:db:96:7c:63:d0:32:66:32:a9:f9:
         8d:1f:1e:c8:90:05:5f:89:2e:72:60:c2:3a:8e:bf:ac:ac:e2:
         dc:cf:42:68:f7:53:20:1e:eb:55:d2:51:83:e8:40:ef:8e:44:
         be:40:3c:bd:a2:32:17:d1:87:7e:c7:eb:1f:d7:91:70:f7:da:
         a1:5f:51:b9:08:d3:74:f0:06:db:bb:f6:99:f1:ef:5c:b3:25:
         98:20:66:7a:65:e3:b9:67:bc:0a:fe:b4:7b:8d:78:72:11:a5:
         97:32:42:74:2e:07:8c:f4:e7:80:9d:6e:73:25:f6:e6:e9:0e:
         04:1b:33:0d:ba:84:37:93:ee:fa:83:99:37:0f:d7:21:a2:39:
         22:fa:69:7d:6f:2d:78:78:93:cc:74:c5:dc:c0:2b:50:9c:b6:
         1c:d2:b0:45:3f:78:7c:fa:27:cc:eb:a5:3d:ea:13:51:ac:ea:
         75:79:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:13 2024 by rpki-client on console-fra.rpki-client.org