Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/tJkY-cjCAvHoGBVznox7lelq7a8.roa
File:                     tJkY-cjCAvHoGBVznox7lelq7a8.roa (raw, json)
Hash identifier:          WdGH2vsAodPl6mUo0hTjae7MsYz4NoWQEtxGWElZHiA=
Subject key identifier:   B4:99:18:F9:C8:C2:02:F1:E8:18:15:73:9E:8C:7B:95:E9:6A:ED:AF
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       0F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/tJkY-cjCAvHoGBVznox7lelq7a8.roa
Signing time:             Tue 02 Apr 2024 00:17:05 +0000
ROA not before:           Tue 02 Apr 2024 00:17:05 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        133.183.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Apr  2 00:17:05 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=B49918F9C8C202F1E81815739E8C7B95E96AEDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9f:31:8a:90:a5:24:9d:f9:45:0e:ce:ed:1c:
                    28:13:db:17:b8:70:2a:f2:74:7d:a9:8f:c8:41:ea:
                    a9:ac:55:0b:1b:b6:37:ac:ab:a4:f6:17:83:8b:40:
                    0c:ec:93:b1:05:41:17:96:7f:6c:75:d4:e8:0f:d2:
                    3d:89:95:92:22:cc:b1:1e:8e:bf:a1:79:a0:9c:4d:
                    f3:e6:2b:1d:37:c0:28:be:7a:f0:f1:1d:39:da:90:
                    76:40:40:7f:6a:63:75:4d:fd:68:5f:68:53:c5:c9:
                    b0:b3:79:68:94:1f:58:35:8e:98:a2:96:2b:0b:a9:
                    9f:ec:6b:27:ff:b5:ec:95:f4:00:1e:6d:3d:94:71:
                    de:02:3b:b7:06:8e:91:0c:5b:6d:73:a7:e9:6b:a1:
                    c8:95:f2:f9:0d:28:b0:04:b9:34:3f:43:77:2e:8a:
                    c6:bc:0c:e8:89:f3:12:48:20:4a:7f:69:20:e4:e1:
                    d4:80:3f:67:23:fe:f6:9a:8c:7a:b0:b3:11:43:0c:
                    aa:84:04:7c:9b:db:06:f2:46:b0:a5:c5:68:53:9d:
                    f9:a5:bf:b4:24:27:32:ec:01:1b:08:56:8a:ae:aa:
                    e7:b8:41:71:26:8e:cd:9d:ec:56:1a:38:9b:b4:4c:
                    d8:2e:42:b7:c5:02:ab:3a:be:a7:36:ce:73:52:ad:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:99:18:F9:C8:C2:02:F1:E8:18:15:73:9E:8C:7B:95:E9:6A:ED:AF
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/tJkY-cjCAvHoGBVznox7lelq7a8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         be:db:ac:cb:25:5c:89:4d:4e:02:52:c1:be:6e:c0:99:26:6d:
         95:55:97:6b:d6:2b:33:8d:ff:2f:00:2d:86:ca:d7:6a:5b:67:
         bd:96:88:a8:af:4f:6f:cc:8d:ff:3e:7d:cf:b9:79:56:23:8e:
         78:61:9a:48:7a:6f:f7:ca:90:d8:00:cb:b1:a8:a6:9d:92:6a:
         b1:2e:2e:a1:65:22:0b:94:a1:b4:00:ae:92:da:4a:93:10:1e:
         64:df:1b:5f:c3:11:59:bc:f4:5c:96:09:ce:14:2b:3c:ce:d5:
         65:4e:a6:86:90:e0:99:32:96:8d:42:bb:f4:f8:72:c4:24:92:
         c8:23:4a:ed:bb:46:f8:2b:52:d4:22:9e:f4:4e:93:4f:ac:d0:
         5a:76:02:98:b9:ed:17:f9:26:bd:52:75:38:21:2e:11:38:82:
         da:87:8f:ae:43:cb:e7:65:e2:46:d0:0e:79:8b:c9:15:5e:bf:
         79:dc:17:3c:ac:50:41:a1:24:f1:26:fd:0d:fe:1a:7a:de:79:
         ab:a8:22:6d:85:a2:f9:3d:17:bf:1d:e6:de:be:89:d7:76:3b:
         d1:1a:67:02:e7:bc:2f:bc:c6:ce:bb:e5:1a:d4:04:7b:0a:16:
         84:0f:f0:bc:50:03:11:f2:e2:90:8d:8d:31:ca:dd:2b:01:24:
         c5:f9:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:13 2024 by rpki-client on console-fra.rpki-client.org