Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/iM1PIy6hJimRKMDcGlL_6b88CWo.roa
File:                     iM1PIy6hJimRKMDcGlL_6b88CWo.roa (raw, json)
Hash identifier:          MvE6NRSLYsS3cgEpS3Gu6ZyRO2yf96whdcTQZossheA=
Subject key identifier:   88:CD:4F:23:2E:A1:26:29:91:28:C0:DC:1A:52:FF:E9:BF:3C:09:6A
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       1F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/iM1PIy6hJimRKMDcGlL_6b88CWo.roa
Signing time:             Fri 19 Jul 2024 09:33:52 +0000
ROA not before:           Fri 19 Jul 2024 09:33:52 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul 19 09:33:52 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=88CD4F232EA126299128C0DC1A52FFE9BF3C096A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bb:ce:d3:26:9e:96:fb:30:43:8f:61:fb:8a:
                    b4:18:bd:18:46:ef:c3:07:ff:30:e0:cb:9d:d2:a5:
                    8e:0d:1e:f9:31:a0:4d:0c:d3:22:48:22:28:ef:f6:
                    8e:1c:a3:da:98:11:10:28:12:f2:11:f3:20:ee:3b:
                    50:02:bc:40:51:d0:ea:c2:ad:ed:e2:a7:65:2b:b7:
                    21:bd:e6:fe:9f:c6:26:50:83:47:3c:20:77:df:e2:
                    31:1c:64:a0:72:d3:8c:af:14:1e:e8:d4:b9:c4:e3:
                    0c:ca:f9:45:53:42:87:f3:76:1d:5a:38:a9:ba:b9:
                    07:3f:e7:f6:ab:43:4f:f7:dd:57:bf:e2:5c:99:31:
                    02:17:d3:5f:ae:c2:2f:35:5f:af:e5:66:25:dc:fc:
                    13:29:9f:5f:4f:25:5d:66:9b:3a:b7:c9:93:9d:4e:
                    e1:7a:64:0c:31:c8:e2:45:81:5d:5d:ab:d0:a0:2f:
                    47:21:50:d2:0b:51:c6:a5:62:69:5f:71:17:74:3b:
                    ac:c9:ee:cc:47:de:29:03:56:de:77:f3:6a:92:8c:
                    d8:8e:69:cb:f5:9a:36:39:be:a8:32:01:cc:09:0d:
                    f8:d7:57:ce:d6:65:5f:57:2c:24:3f:02:5f:fc:a9:
                    90:76:bc:13:07:db:3c:ee:68:19:c3:f1:46:4d:bd:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CD:4F:23:2E:A1:26:29:91:28:C0:DC:1A:52:FF:E9:BF:3C:09:6A
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/iM1PIy6hJimRKMDcGlL_6b88CWo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:cf:24:5d:ce:0f:a1:8f:46:44:2a:ed:bc:be:a0:5d:35:
         ea:16:e4:3d:8d:a9:53:d0:c0:1a:88:24:5a:fa:58:b0:2b:38:
         e6:ab:bc:f2:27:ba:26:c4:9d:cc:03:34:aa:14:93:40:6e:3b:
         eb:d2:cc:ca:2c:8f:53:a9:6c:20:28:ce:d5:65:15:68:ee:97:
         4d:fc:07:6f:47:54:67:b2:b1:50:0a:cd:6c:18:96:a9:a4:b9:
         ce:46:91:11:bc:fb:35:7e:e9:68:24:88:a5:e0:44:4f:28:a1:
         98:8e:fa:e2:d9:a7:58:af:05:d4:43:0e:a9:76:9b:5b:99:2e:
         6c:70:a6:0b:d6:9f:55:5c:32:a6:7d:0d:37:45:f5:e4:8c:9d:
         4f:a0:7d:da:57:31:76:44:dd:e0:f6:1d:87:f7:53:7e:64:0f:
         db:2b:fa:97:ed:93:4a:77:00:21:e4:a4:3b:2c:7a:32:04:8a:
         a9:ad:f2:88:a9:2a:e0:cd:41:b6:f2:ee:8e:ea:e2:d2:f7:41:
         a9:22:e0:fe:14:51:99:57:3b:cb:d8:a3:f4:8d:24:e5:3b:86:
         78:94:ae:bc:47:6d:5d:45:86:45:15:13:e5:54:bc:75:e4:7f:
         1c:80:c3:92:fc:3c:1d:31:ac:a8:df:7f:be:7a:5f:0f:46:b2:
         8f:70:69:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:10 2024 by rpki-client on console-ams.rpki-client.org