Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/dvQT_vB7kWoCjbcbFxTfVKVxFKc.roa
File:                     dvQT_vB7kWoCjbcbFxTfVKVxFKc.roa (raw, json)
Hash identifier:          oRiygeBVqjFe7P+oVKBx3U9iyKMRFZP2xSrXFHOMJI8=
Subject key identifier:   76:F4:13:FE:F0:7B:91:6A:02:8D:B7:1B:17:14:DF:54:A5:71:14:A7
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       0E
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/dvQT_vB7kWoCjbcbFxTfVKVxFKc.roa
Signing time:             Tue 02 Apr 2024 00:17:05 +0000
ROA not before:           Tue 02 Apr 2024 00:17:05 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.181.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Apr  2 00:17:05 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=76F413FEF07B916A028DB71B1714DF54A57114A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cc:a7:33:68:98:1a:b8:fd:c6:f0:19:b4:e0:
                    ec:15:cf:95:67:b4:b3:cc:9f:f0:99:ce:3c:2a:e3:
                    61:3f:5c:cb:95:bd:85:be:06:a6:8b:4e:a6:7d:b2:
                    c6:2b:7b:fb:00:6a:4e:71:d6:67:b0:31:5b:92:ff:
                    b0:6d:31:63:89:aa:ef:3a:64:ec:55:25:fe:3e:96:
                    4e:de:73:6d:44:b0:8e:00:5c:2e:eb:7b:f3:50:d8:
                    05:49:80:ff:3c:9c:7f:bc:06:36:8d:cc:67:e3:02:
                    6c:cb:9b:59:7f:02:fb:b4:38:44:c5:a0:9a:ac:96:
                    57:d2:9f:50:a5:6f:9b:0b:0e:59:eb:c1:9c:ed:c5:
                    74:10:51:06:51:d4:0c:d6:e0:35:23:9f:1b:06:65:
                    96:56:93:7a:d9:10:63:be:a9:e3:b9:2f:0d:d1:36:
                    73:e7:f4:40:75:65:9b:45:29:b5:39:6a:f9:d1:16:
                    b3:43:f2:b6:8a:fb:ac:3c:92:79:ca:16:b2:ef:84:
                    e7:5b:07:93:ba:ce:5b:77:27:26:14:ce:41:3c:e6:
                    50:fb:42:8c:28:50:67:ef:67:bf:a7:f7:96:f2:f0:
                    12:bb:40:b2:b6:1e:f2:81:be:3f:be:ff:57:ee:1c:
                    3c:60:ef:ee:0a:32:07:f8:77:86:18:9c:6d:89:4a:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F4:13:FE:F0:7B:91:6A:02:8D:B7:1B:17:14:DF:54:A5:71:14:A7
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/dvQT_vB7kWoCjbcbFxTfVKVxFKc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:0c:21:d2:04:81:ab:82:2e:44:c5:54:77:29:d2:fc:49:
         40:b6:82:a4:59:7b:30:93:2b:06:8d:44:d7:cb:2a:c7:2a:20:
         48:9b:2b:24:31:dc:0e:0f:33:54:74:b4:3d:5a:9e:d4:fe:0a:
         7c:ea:b3:42:b9:2a:97:9d:ae:25:ce:a8:95:c5:e7:9f:67:dc:
         d3:6d:9c:44:89:0b:7f:51:4b:b2:23:60:37:44:f9:49:1d:b9:
         79:63:ab:5c:79:2b:95:07:69:d8:81:ae:35:3e:71:33:24:4a:
         db:67:c9:8d:74:84:38:6a:4e:d0:78:72:7e:ec:d2:64:26:45:
         ce:c7:93:00:4a:44:fb:a4:33:d6:e6:0a:40:cd:96:37:29:e0:
         67:22:74:c9:93:00:57:c5:99:f8:a2:18:2a:74:9f:d2:27:b9:
         f3:2c:c4:5d:00:9e:d6:b2:f4:4b:1f:ef:9a:29:6d:fc:45:c7:
         d1:9e:5b:04:ab:8d:81:26:1c:e1:0c:97:8c:db:36:b6:8c:da:
         8b:c0:22:11:ed:28:7c:57:db:44:a2:f8:98:c5:6c:4d:04:25:
         7b:d8:34:ec:f5:b9:d8:ac:60:38:1d:b6:b9:f2:e3:0b:bd:f7:
         6c:46:ce:ee:2e:bd:2c:13:10:fa:f0:a7:bd:b3:6d:2d:dc:de:
         e9:d8:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org