Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/SZfarTKRkiDNHa5oeGLDIKf1RQw.roa
File:                     SZfarTKRkiDNHa5oeGLDIKf1RQw.roa (raw, json)
Hash identifier:          w9aGrbEvVoLALM1Fb3l7lmpo3747UMsfH7f4cDWqMPE=
Subject key identifier:   49:97:DA:AD:32:91:92:20:CD:1D:AE:68:78:62:C3:20:A7:F5:45:0C
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       1E
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/SZfarTKRkiDNHa5oeGLDIKf1RQw.roa
Signing time:             Fri 19 Jul 2024 09:33:51 +0000
ROA not before:           Fri 19 Jul 2024 09:33:51 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul 19 09:33:51 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=4997DAAD32919220CD1DAE687862C320A7F5450C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:b0:b9:c9:53:37:ef:9f:d2:d9:8c:fe:7f:
                    a8:b2:eb:16:3b:20:85:ad:6b:2e:bf:a7:bd:34:df:
                    49:76:c8:33:23:98:20:ca:48:f0:c4:dc:26:e7:47:
                    ab:43:e2:d0:2a:89:c2:aa:6f:58:c8:2b:81:1f:09:
                    f3:1c:e8:55:9b:e4:ca:69:e5:0c:0b:60:5f:f6:19:
                    af:7f:71:17:46:65:89:3b:fb:dc:7a:e5:4b:35:33:
                    cf:ff:1a:40:bc:e6:eb:0a:f6:31:4f:a2:ea:8d:54:
                    b7:3a:dc:65:26:2d:2e:82:f5:86:c1:c8:01:05:5e:
                    69:21:73:5b:eb:e5:8f:08:0c:92:09:c3:2a:80:b5:
                    30:a5:e9:7f:35:25:d4:3b:8f:c4:c5:08:b1:72:7e:
                    95:73:ff:5d:70:d1:18:48:a6:44:f8:10:60:97:84:
                    48:57:af:4b:97:4a:46:df:f9:16:47:94:bb:a2:62:
                    57:3e:5e:ac:ca:cb:f4:ea:eb:fd:87:e1:c3:75:9b:
                    9a:cd:32:ef:7b:2c:f0:37:23:44:78:51:6f:cb:3d:
                    0e:70:a4:86:bf:3d:92:af:30:62:cb:e6:da:f0:ab:
                    8e:40:31:5d:d7:d9:b6:4b:d9:0e:85:a0:8a:83:c6:
                    0a:d0:dd:01:0a:ad:cf:26:82:a4:9e:f2:f2:57:f6:
                    fc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:97:DA:AD:32:91:92:20:CD:1D:AE:68:78:62:C3:20:A7:F5:45:0C
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/SZfarTKRkiDNHa5oeGLDIKf1RQw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:9c:88:47:cc:e5:e0:50:47:f3:ef:1d:dc:8a:2a:95:4d:
         48:00:82:79:07:af:b7:fa:a7:23:e2:74:8e:1b:2c:8b:69:a4:
         a6:b5:36:ab:e2:03:c4:7a:42:fe:08:17:67:c3:e6:9d:8b:e0:
         3c:e2:85:b9:a6:5f:e5:a4:f3:1f:8e:07:b8:ac:4d:3c:96:d1:
         56:5f:fa:42:3d:4f:e0:9a:43:3d:04:54:f6:df:53:a0:dc:3e:
         fc:f1:bd:77:ee:54:e7:1c:2a:eb:64:29:8a:59:65:ca:0f:f7:
         f6:80:23:4a:80:67:85:6e:87:9c:5e:f8:d3:d6:7a:4a:00:b1:
         81:30:55:23:c5:65:26:db:e5:97:65:50:80:0b:5f:e3:20:96:
         3c:09:86:f5:79:9d:31:c8:e1:3a:4a:82:97:09:4e:0c:21:4b:
         4a:0e:28:39:97:fc:fa:a6:88:c3:91:b3:06:d2:be:1b:6c:9c:
         70:7e:46:61:45:6e:88:84:63:e1:83:1b:55:03:fc:2f:98:e1:
         74:1f:f9:3e:cc:a4:91:c0:5d:b7:f2:41:c3:8a:43:9b:3e:4b:
         8c:b2:41:41:bd:76:38:ee:27:f1:70:eb:60:05:34:43:a3:8b:
         f6:ce:a2:fb:2f:14:f3:0c:51:e6:d1:f8:d8:db:f8:91:c7:07:
         48:7f:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:26 2024 by rpki-client on console-ams.rpki-client.org