Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ji4KyM8a_nw3-eLdhxrTmO4HkBY.roa
File:                     ji4KyM8a_nw3-eLdhxrTmO4HkBY.roa (raw, json)
Hash identifier:          nsWZGX5wkN5BZGN5mgO3Y7NJ8h4v9baszNbdOpsTf8E=
Subject key identifier:   8E:2E:0A:C8:CF:1A:FE:7C:37:F9:E2:DD:87:1A:D3:98:EE:07:90:16
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       10
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ji4KyM8a_nw3-eLdhxrTmO4HkBY.roa
Signing time:             Tue 02 Apr 2024 00:17:06 +0000
ROA not before:           Tue 02 Apr 2024 00:17:06 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        133.183.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Apr  2 00:17:06 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=8E2E0AC8CF1AFE7C37F9E2DD871AD398EE079016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:06:82:24:2b:1b:36:83:b9:3a:d1:a5:de:00:
                    5c:8b:b8:b9:a7:a5:2b:77:01:c4:06:8a:6d:af:d4:
                    cd:b2:fc:09:3c:e5:5e:0a:3f:33:0a:ff:eb:0c:ff:
                    52:23:aa:8c:3c:5f:81:b3:a1:7c:3c:52:85:9f:03:
                    ae:24:8c:d2:3d:2f:cd:62:1a:5a:d9:07:5d:61:16:
                    87:a9:ff:3c:e9:6b:98:c4:05:a0:c9:c0:6c:80:ac:
                    7a:16:29:02:a5:e9:22:e3:df:0a:54:39:18:8b:e2:
                    4d:44:e2:f7:c1:a1:f5:eb:e6:ab:a0:36:ba:3f:b3:
                    e1:e4:96:b3:12:8a:51:7a:ee:d5:8d:c6:4b:07:20:
                    33:90:25:5a:34:7b:ba:a6:87:6f:10:e6:91:c7:63:
                    ea:44:ff:49:d9:8d:43:88:8b:93:79:4c:99:18:17:
                    77:a7:64:1b:e8:9f:35:f4:a4:31:eb:3a:52:77:b9:
                    09:9b:e7:0c:ad:a7:3a:0d:cc:21:43:7d:e4:56:0b:
                    bf:79:54:3b:9e:01:5b:d4:fd:1a:ba:0e:8d:9b:40:
                    ff:3f:39:86:50:2e:11:11:b4:b6:34:9d:34:40:73:
                    21:4f:ad:25:da:74:39:96:e4:9a:c2:b1:2d:d1:ab:
                    37:26:da:cb:4a:c5:7b:ce:75:d3:66:8c:54:09:1b:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2E:0A:C8:CF:1A:FE:7C:37:F9:E2:DD:87:1A:D3:98:EE:07:90:16
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/ji4KyM8a_nw3-eLdhxrTmO4HkBY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:c5:66:ed:c2:10:83:9f:7a:cd:de:fb:04:d0:6f:87:d0:d5:
         86:02:61:d8:a6:8d:48:bc:5b:3b:5c:88:60:77:1d:d4:a2:04:
         8f:04:2f:6d:db:ef:38:03:72:8a:3c:d0:1a:8d:48:ef:a7:bd:
         ef:63:4e:35:79:8e:95:92:fa:2f:5b:13:75:a7:05:42:76:40:
         46:c8:ec:a3:ba:f4:60:04:b6:07:1b:73:48:4c:43:25:3c:31:
         48:fa:6b:7c:bc:0e:f6:31:1b:72:a2:8d:a9:81:c2:4b:9e:0c:
         48:b7:8d:7f:4d:76:78:e7:32:5b:0a:62:69:70:9d:f5:b5:9c:
         86:90:c2:5e:ae:0c:c1:01:29:0a:3d:11:9e:a2:2e:88:24:21:
         29:de:5b:d4:ac:05:26:8c:5b:cd:65:3e:b8:ca:3e:59:fd:fa:
         ba:ed:20:98:01:9d:75:8e:75:84:aa:83:f8:42:9c:19:cf:89:
         0a:99:f6:2e:d6:83:75:36:b6:db:e7:7c:f1:a6:db:9d:e2:66:
         27:06:0f:dc:a8:c1:8d:97:ec:12:23:34:fd:0d:35:2f:8b:57:
         f3:ca:12:13:09:8d:4b:f1:49:1a:a6:94:be:1d:8d:a0:cd:14:
         91:13:c9:59:a7:0d:8b:84:4d:95:83:46:15:27:41:97:e5:fd:
         45:e8:32:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org