Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Fl46tK4DwImI9kDxBXG4gXoU8xY.roa
File:                     Fl46tK4DwImI9kDxBXG4gXoU8xY.roa (raw, json)
Hash identifier:          9F9ijn51HRCuGY5v7+pLXGUB87PfL1dNxnY9SL2usR8=
Subject key identifier:   16:5E:3A:B4:AE:03:C0:89:88:F6:40:F1:05:71:B8:81:7A:14:F3:16
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       20
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Fl46tK4DwImI9kDxBXG4gXoU8xY.roa
Signing time:             Fri 19 Jul 2024 09:33:52 +0000
ROA not before:           Fri 19 Jul 2024 09:33:52 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul 19 09:33:52 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=165E3AB4AE03C08988F640F10571B8817A14F316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:8a:43:4f:00:25:93:26:dd:81:50:c6:4c:
                    7f:69:e2:6b:7e:d6:f5:0a:c0:8e:de:da:54:86:6b:
                    3d:7d:be:b4:2a:8a:0e:4f:27:3d:75:1d:87:84:cb:
                    33:09:57:bc:24:ee:8e:23:34:4f:04:2f:88:53:d5:
                    c1:83:86:a8:d2:e0:8a:5c:04:fd:4b:49:2b:88:4e:
                    49:e8:1d:1d:af:d0:e2:75:cb:20:04:39:2b:c9:ee:
                    69:8c:7f:b0:10:1c:0b:35:3b:f7:b8:15:71:20:a3:
                    e3:fe:a3:a1:56:17:02:0a:05:ce:0c:2d:b7:c1:aa:
                    f9:e9:e8:96:d3:46:c0:32:ff:91:e6:9d:39:1e:03:
                    a8:f2:7c:51:3d:58:1a:48:98:2c:57:c1:9b:a4:97:
                    57:35:53:44:44:c9:5f:7d:f1:5c:6d:a2:7f:35:da:
                    ad:d2:48:f6:0a:c1:e7:7b:45:1d:fb:b5:1a:0d:4c:
                    85:86:0c:f0:09:ef:93:11:02:46:90:7c:7d:4d:79:
                    e6:e0:9d:ae:63:b5:1f:86:18:4c:10:f9:99:a7:5d:
                    ec:c2:85:c8:67:ad:66:f4:45:25:e1:1a:48:93:6c:
                    04:62:d5:1d:0a:82:cd:ae:b6:87:dc:ae:e5:69:78:
                    61:ff:59:fe:b6:db:af:60:e2:5b:89:05:e6:6b:f4:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5E:3A:B4:AE:03:C0:89:88:F6:40:F1:05:71:B8:81:7A:14:F3:16
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Fl46tK4DwImI9kDxBXG4gXoU8xY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:d7:c8:f5:4f:8c:fb:db:ce:12:36:ed:12:43:82:a4:02:91:
         8b:fd:10:95:49:9d:d9:87:66:16:23:31:ed:15:18:8a:e1:9f:
         87:e6:24:93:19:78:a4:92:a9:ed:09:0e:2e:f4:d0:47:cc:de:
         7a:53:52:51:df:b1:ec:30:8b:6a:d8:1a:6f:6f:8b:be:9e:56:
         9a:c3:47:f0:37:20:07:75:e8:76:fb:0d:a1:2a:3e:c8:15:18:
         d0:52:7e:42:06:ab:d5:3c:a3:64:c1:23:23:29:2a:70:7f:f3:
         75:7d:6d:ef:c5:7a:68:05:e9:95:9a:1e:6b:bc:af:af:e0:b3:
         ed:23:df:44:71:49:b7:a3:e6:c2:c5:ee:f4:1d:5c:12:2a:d8:
         c2:07:dd:b8:4f:4c:93:19:79:6f:92:43:60:05:71:24:6e:18:
         5f:ca:b5:c9:29:26:91:9c:26:cc:a6:6c:7a:43:03:01:28:0d:
         7e:78:c1:21:76:31:2b:5c:98:5b:b2:29:0f:e9:bb:aa:0c:64:
         d6:72:19:84:02:c1:da:14:b2:e4:9e:16:63:0e:2e:c3:12:77:
         2f:60:a6:bf:a2:51:de:b7:93:23:5c:79:52:a6:ca:31:ba:cd:
         6a:5c:60:54:26:22:50:74:46:b5:52:04:2a:50:1d:d2:9a:0c:
         76:40:c8:7a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI0MDcxOTA5
MzM1MloXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMTY1RTNBQjRBRTAzQzA4
OTg4RjY0MEYxMDU3MUI4ODE3QTE0RjMxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM/FikNPACWTJt2BUMZMf2nia37W9QrAjt7aVIZrPX2+tCqKDk8n
PXUdh4TLMwlXvCTujiM0TwQviFPVwYOGqNLgilwE/UtJK4hOSegdHa/Q4nXLIAQ5
K8nuaYx/sBAcCzU797gVcSCj4/6joVYXAgoFzgwtt8Gq+enoltNGwDL/keadOR4D
qPJ8UT1YGkiYLFfBm6SXVzVTRETJX33xXG2ifzXardJI9grB53tFHfu1Gg1MhYYM
8AnvkxECRpB8fU155uCdrmO1H4YYTBD5madd7MKFyGetZvRFJeEaSJNsBGLVHQqC
za62h9yu5Wl4Yf9Z/rbbr2DiW4kF5mv0AqUCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQWXjq0rgPAiYj2QPEFcbiBehTzFjAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTkzNy9GbDQ2dEs0RHdJbUk5a0R4QlhHNGdYb1U4eFkucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQChbdsMA0GCSqGSIb3DQEBCwUAA4IBAQCH18j1T4z7284SNu0SQ4KkApGL
/RCVSZ3Zh2YWIzHtFRiK4Z+H5iSTGXikkqntCQ4u9NBHzN56U1JR37HsMItq2Bpv
b4u+nlaaw0fwNyAHdeh2+w2hKj7IFRjQUn5CBqvVPKNkwSMjKSpwf/N1fW3vxXpo
BemVmh5rvK+v4LPtI99EcUm3o+bCxe70HVwSKtjCB924T0yTGXlvkkNgBXEkbhhf
yrXJKSaRnCbMpmx6QwMBKA1+eMEhdjErXJhbsikP6buqDGTWchmEAsHaFLLknhZj
Di7DEncvYKa/olHet5MjXHlSpsoxus1qXGBUJiJQdEa1UgQqUB3Smgx2QMh6
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:26 2024 by rpki-client on console-ams.rpki-client.org