Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WLxJL_2FkaTYM4ENNclEw0LRwnk.roa
File:                     WLxJL_2FkaTYM4ENNclEw0LRwnk.roa (raw, json)
Hash identifier:          XGek1vv3ce5Y6eUkzq/xV1ZqqWlzdIVA9VN/Esutfdw=
Subject key identifier:   58:BC:49:2F:FD:85:91:A4:D8:33:81:0D:35:C9:44:C3:42:D1:C2:79
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       08
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WLxJL_2FkaTYM4ENNclEw0LRwnk.roa
Signing time:             Tue 02 Apr 2024 00:13:08 +0000
ROA not before:           Tue 02 Apr 2024 00:13:08 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Apr  2 00:13:08 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=58BC492FFD8591A4D833810D35C944C342D1C279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:74:65:da:a6:17:f6:de:ad:91:bb:94:14:
                    3a:70:fa:e2:2b:5f:7d:a1:c7:da:29:98:5b:e0:32:
                    a0:f7:a5:72:c0:8a:51:b7:3e:26:9e:aa:81:3c:5c:
                    10:9b:a5:67:97:6b:2a:00:d1:0f:29:b7:25:ac:7d:
                    77:a9:2b:26:b0:da:8c:00:64:71:a3:92:d4:a6:59:
                    83:9f:37:d8:68:07:7a:0a:8a:66:a2:fc:57:de:a2:
                    17:ba:2f:c6:3e:81:77:bc:4a:32:40:e4:00:39:68:
                    ab:e3:89:90:32:67:5b:54:0e:87:97:35:6e:00:ad:
                    95:d9:89:1c:84:7a:46:90:f6:13:fb:c8:aa:51:19:
                    d4:41:6d:08:35:35:2e:8e:9b:6d:db:28:c1:cc:f5:
                    72:1e:fe:6d:6b:55:a7:c3:e0:0f:04:8f:08:39:6b:
                    e1:01:63:ad:25:30:52:7c:dc:ee:e5:8a:13:5e:f2:
                    38:42:b4:66:30:4b:ca:7c:12:c0:04:63:3e:83:33:
                    fa:ca:9a:5c:93:d1:86:59:df:f2:96:f7:70:c8:59:
                    26:f2:ad:89:7b:01:33:e9:c6:04:aa:7c:9b:e1:98:
                    5b:dd:0b:ba:33:f7:16:eb:59:9e:ec:10:50:66:8d:
                    92:66:e8:cf:2f:c3:e1:4c:b5:e4:69:56:9b:b7:45:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BC:49:2F:FD:85:91:A4:D8:33:81:0D:35:C9:44:C3:42:D1:C2:79
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WLxJL_2FkaTYM4ENNclEw0LRwnk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:1c:c6:a5:d2:70:67:89:f5:5d:cf:34:8e:8b:29:7f:a5:
         69:b8:9e:31:ca:ff:e3:06:9c:a8:be:cc:3d:65:2f:b7:4b:1f:
         02:40:18:17:e3:e1:0b:df:f4:28:79:4a:71:b9:35:4a:96:43:
         7e:3c:02:a7:94:8f:48:c5:c4:76:04:08:2c:66:de:ad:9c:d2:
         e2:b6:17:50:f3:74:78:54:13:26:73:14:c0:9f:69:fa:ef:e3:
         7e:83:6f:dd:22:9b:38:a5:0e:a4:9b:7a:04:dc:f6:d0:86:41:
         c2:66:aa:1e:5f:a2:20:41:30:00:e4:6a:90:7c:11:57:f8:e1:
         7e:c4:8c:e8:22:84:a3:9c:f1:e4:e6:11:ba:ab:3f:10:1c:48:
         4f:7a:39:8d:26:af:5a:5d:3c:97:f4:76:46:40:32:43:eb:eb:
         88:20:44:11:d1:af:ad:3e:67:cf:43:40:42:5c:ca:60:27:85:
         a2:9d:ec:0e:29:a3:cb:79:8d:32:46:41:9a:4b:3b:a0:b3:4e:
         30:a2:93:2f:c4:b1:a7:fd:27:82:d8:d2:89:ca:89:0c:9b:39:
         25:03:b1:da:e3:78:06:07:a9:b0:64:35:e3:4b:8a:6e:f9:77:
         1d:f7:61:cc:93:cd:e1:55:12:64:9f:a6:af:74:71:ee:8c:11:
         29:e4:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:13 2024 by rpki-client on console-fra.rpki-client.org