Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Obq6tGAhdh06K03I3sB334CUlkE.roa
File:                     Obq6tGAhdh06K03I3sB334CUlkE.roa (raw, json)
Hash identifier:          eANsHyuIaRPqcg7n/Yq/zE3o591kB+BeFq2bsc/leOQ=
Subject key identifier:   39:BA:BA:B4:60:21:76:1D:3A:2B:4D:C8:DE:C0:77:DF:80:94:96:41
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       11
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Obq6tGAhdh06K03I3sB334CUlkE.roa
Signing time:             Tue 02 Apr 2024 00:21:09 +0000
ROA not before:           Tue 02 Apr 2024 00:21:09 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.182.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Apr  2 00:21:09 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=39BABAB46021761D3A2B4DC8DEC077DF80949641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:44:62:7b:a8:9f:36:6c:61:80:e8:21:0e:
                    38:3e:13:3c:05:3b:0c:8d:16:93:33:7d:e1:eb:f8:
                    e0:71:c6:97:9b:72:19:5d:e6:8f:1e:5a:bd:fa:18:
                    1b:fa:81:88:8a:76:06:f6:18:bf:61:91:bb:13:81:
                    6b:f8:a8:85:3d:9a:b7:8e:f3:30:24:93:d3:7d:a4:
                    96:a9:92:e1:e5:67:1f:42:23:fb:3d:d7:d6:ff:28:
                    5e:7c:0b:05:3a:e2:83:29:92:b4:6b:f1:22:74:c5:
                    6d:0d:99:49:ab:0d:f9:1a:ab:8b:7c:38:d8:16:d0:
                    61:80:11:1b:b7:02:93:ae:da:89:a9:e0:2f:ec:62:
                    5a:9c:a4:36:e1:dc:ec:6d:91:18:39:f9:00:92:93:
                    32:58:ad:7f:6a:b0:b8:5c:99:92:f0:a3:52:e1:95:
                    83:11:d9:55:30:b6:df:bf:ea:d2:98:22:a5:06:f2:
                    1e:72:55:b3:74:62:42:a8:4a:c7:f1:51:59:aa:6c:
                    9a:9f:17:31:b6:71:c2:89:ce:a4:34:42:19:76:86:
                    ac:d8:f5:10:d6:c5:bd:12:3f:95:9d:f5:ea:0f:bd:
                    27:ec:b4:0f:c1:a0:0a:3f:0f:b6:bb:bd:e7:71:38:
                    f2:c5:3f:a8:99:ad:81:24:f9:e6:e3:8e:c8:87:c9:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:BA:B4:60:21:76:1D:3A:2B:4D:C8:DE:C0:77:DF:80:94:96:41
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/Obq6tGAhdh06K03I3sB334CUlkE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:a2:dc:69:d0:89:40:98:a0:cb:6c:bd:b2:b9:6c:10:78:
         ce:db:e1:5e:a0:8a:34:c9:74:c3:5b:5e:9d:aa:54:fc:b4:a0:
         12:f9:86:35:83:5d:33:8a:a3:51:b5:37:e6:66:50:f3:f3:94:
         3b:c3:60:81:32:8d:73:1c:9e:98:16:55:4a:55:d3:1e:53:5c:
         b3:ef:ca:89:bc:02:d8:a4:ee:5c:bf:ba:3d:03:84:d8:58:d4:
         d2:f5:5a:f2:6f:ea:0b:83:39:9b:24:35:f7:d6:29:c1:66:0c:
         8e:64:d8:cf:60:2c:79:4a:72:41:67:46:46:81:87:03:d4:3c:
         f0:34:98:eb:70:a4:d5:a2:43:88:51:4c:df:67:90:68:58:f3:
         3a:42:eb:48:74:e4:0b:e5:53:9b:e5:79:1d:57:48:69:9d:63:
         75:22:5f:ea:af:0e:3b:d3:73:54:e9:a7:25:ea:31:8f:0d:43:
         3f:92:f8:ca:03:3c:8e:1a:64:6b:0b:25:fc:4a:b9:ee:f6:df:
         9d:4d:62:de:a9:a9:9d:a7:a3:9e:d9:2e:10:28:01:11:b0:a4:
         9d:a3:9b:d8:7e:13:20:af:6f:90:9c:ea:2b:e7:57:26:59:b2:
         a4:1c:5b:3a:5b:96:b4:69:e4:e3:10:a8:35:05:5b:32:c1:4d:
         23:a8:f8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:10 2024 by rpki-client on console-ams.rpki-client.org