Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/mUxyEyiiprbRCBev6w4TWRH4yWs.roa
File:                     mUxyEyiiprbRCBev6w4TWRH4yWs.roa (raw, json)
Hash identifier:          wQSoMiB7cQEJIS9BZDlN7JgQqLFj9r/a9OeGQkudZ5w=
Subject key identifier:   99:4C:72:13:28:A2:A6:B6:D1:08:17:AF:EB:0E:13:59:11:F8:C9:6B
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       23
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/mUxyEyiiprbRCBev6w4TWRH4yWs.roa
Signing time:             Fri 19 Jul 2024 09:33:53 +0000
ROA not before:           Fri 19 Jul 2024 09:33:53 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul 19 09:33:53 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=994C721328A2A6B6D10817AFEB0E135911F8C96B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:dc:0e:af:a3:eb:3a:d0:13:d9:48:e2:d0:
                    b0:d6:7a:10:8a:a6:df:8f:48:ee:ee:1a:89:70:29:
                    bb:bd:63:a4:54:ac:ee:37:25:81:43:ef:73:7c:db:
                    64:54:d9:0b:c4:31:2f:09:4d:9d:af:05:84:55:d6:
                    5a:4f:45:22:a5:57:15:9d:4c:45:90:b0:c8:cc:69:
                    b0:d0:fe:5b:06:29:c9:a5:f8:08:06:75:44:94:73:
                    8d:43:16:95:90:ee:bf:ce:35:06:0d:bb:b3:32:52:
                    1b:ce:e7:f5:8a:d0:97:f2:2f:18:58:99:bc:fd:b6:
                    06:bf:dc:30:89:4d:f7:cd:c4:b2:35:fb:f3:6a:34:
                    05:be:ed:d2:25:81:56:b9:a2:e7:98:f3:27:36:a6:
                    4a:bd:96:1d:e6:6b:1f:f5:f4:f0:88:3a:5b:b4:fa:
                    01:25:09:7d:fc:ec:2f:e8:71:a0:84:40:d8:48:f0:
                    60:7d:0d:aa:6e:d4:94:4f:d0:08:23:13:e2:e8:9c:
                    d9:89:66:e4:c2:21:3d:87:1c:85:00:ac:ba:12:61:
                    8c:7f:07:4f:34:55:b3:fb:8a:c0:ef:d1:f1:89:24:
                    f7:58:a8:ef:50:64:80:14:d0:ee:ed:11:c9:33:bc:
                    0f:a4:1d:d9:4d:e2:7d:9b:09:2a:da:2e:62:93:25:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4C:72:13:28:A2:A6:B6:D1:08:17:AF:EB:0E:13:59:11:F8:C9:6B
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/mUxyEyiiprbRCBev6w4TWRH4yWs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:cb:ad:cf:19:3a:81:4f:27:c1:90:44:81:e3:ef:74:52:
         fc:0c:0b:53:8c:b0:6c:3c:df:48:af:b6:d7:d9:3f:ea:8f:01:
         83:ba:ec:93:18:7a:de:37:bb:2d:c7:35:cd:af:c3:ab:63:b8:
         b6:9b:b1:07:b9:f2:39:03:f9:bf:c3:4d:eb:43:1b:c3:c5:2d:
         50:23:e7:13:ab:fa:a7:89:9c:33:fa:da:3c:f8:75:ac:c0:5c:
         f4:8e:00:bb:69:69:2a:9b:61:8f:d3:bc:21:a1:a6:31:f5:01:
         e2:7e:b1:b8:34:fb:11:4a:b1:81:de:2b:75:4b:79:51:4f:1f:
         0b:a3:31:76:c8:d5:29:7b:f7:16:cc:32:f8:7b:f1:1d:32:64:
         62:3e:6b:e3:98:47:0e:44:82:d6:91:2d:e6:79:51:9e:8a:7d:
         e2:d9:30:4a:6a:c4:f9:c1:c3:68:4b:76:21:37:1f:0f:0e:99:
         6f:3a:53:c9:28:24:ce:81:df:52:38:6f:64:8c:fc:65:de:a4:
         72:0d:96:46:76:4c:42:d1:04:96:7f:89:66:40:6b:7e:03:f2:
         44:50:aa:fc:c4:d6:20:f6:28:57:ab:45:10:45:97:0f:2c:f1:
         a8:f8:a3:c7:a1:03:ed:56:f9:0f:94:c6:21:31:fd:60:87:e2:
         5d:e9:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:53 2025 by rpki-client