Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/tToGxGx43nmq0rFaRMjkJspV7e0.roa
File:                     tToGxGx43nmq0rFaRMjkJspV7e0.roa (raw, json)
Hash identifier:          TVNpthnYyWalj/7Nx6bTrsnI0FKfd6YHa3lKLIYJ1Ok=
Subject key identifier:   B5:3A:06:C4:6C:78:DE:79:AA:D2:B1:5A:44:C8:E4:26:CA:55:ED:ED
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       22
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/tToGxGx43nmq0rFaRMjkJspV7e0.roa
Signing time:             Fri 19 Jul 2024 09:33:53 +0000
ROA not before:           Fri 19 Jul 2024 09:33:53 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Jul 19 09:33:53 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=B53A06C46C78DE79AAD2B15A44C8E426CA55EDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:b7:07:86:ae:18:eb:15:e9:8a:54:26:ae:
                    71:46:b3:76:b6:1e:8c:dc:12:b5:c5:d4:e0:75:3b:
                    7d:c2:39:d2:8a:68:50:6b:d4:03:88:35:33:e8:8e:
                    e4:4b:67:95:8a:ef:48:4c:44:d7:10:d2:6e:c8:4a:
                    5d:cb:91:5b:52:08:8e:df:da:47:78:c1:c8:be:2c:
                    16:cc:92:3a:20:9f:c3:16:10:d1:1f:40:16:f9:49:
                    1a:3c:7d:dd:10:4c:8b:04:ac:c5:05:b8:a1:5c:63:
                    d8:1a:f9:f4:ae:6f:e9:84:db:01:49:71:10:1a:c6:
                    32:3b:c2:7b:6d:38:31:af:e0:67:ae:dd:f0:5a:dc:
                    5e:33:e5:d3:ee:fa:18:bb:04:b4:5f:59:35:e4:ae:
                    7a:00:bf:89:05:4d:73:fa:de:bb:94:27:52:cd:76:
                    ea:72:65:48:b3:2a:32:2a:e5:64:cd:ba:dd:94:7e:
                    7e:d5:77:8c:96:86:87:59:57:cb:be:ea:20:b3:10:
                    b4:00:ba:76:fd:c0:e5:df:84:25:3d:3f:31:49:d1:
                    fc:db:9b:71:13:22:8c:a1:fb:01:f6:86:a7:97:55:
                    9a:18:81:98:57:b1:71:cb:1f:03:2e:3b:87:3d:68:
                    a1:bd:46:9c:e8:2a:0b:ae:4e:cf:15:1c:6b:63:26:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:06:C4:6C:78:DE:79:AA:D2:B1:5A:44:C8:E4:26:CA:55:ED:ED
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/tToGxGx43nmq0rFaRMjkJspV7e0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:9a:24:6a:a5:81:f5:0b:4d:91:61:0e:71:51:07:e7:93:
         fa:99:df:23:d3:37:d3:57:54:9e:7f:97:79:19:19:78:f5:da:
         e1:33:72:24:6d:63:02:ee:a6:be:84:63:03:3b:5e:2e:a3:6c:
         18:67:8f:a6:19:92:13:cf:5f:f9:55:b8:5a:46:52:99:16:99:
         85:91:3d:35:fd:cc:61:6e:e0:56:c9:9b:b0:04:63:4c:96:80:
         20:a6:20:10:d2:07:11:f9:11:65:d8:06:a5:69:74:4b:32:83:
         ff:05:8e:7d:c4:11:5b:7a:a4:c8:d2:20:2c:0d:b0:b6:97:95:
         59:6d:92:89:4d:3a:60:f2:59:ac:69:0f:c2:d6:2e:e6:11:b3:
         ee:74:74:10:22:b1:7d:dc:bb:62:9e:87:f8:3c:24:fd:23:c4:
         47:87:34:dc:88:ba:32:9e:6d:7f:4e:72:d3:e9:eb:29:79:95:
         44:d4:3d:1f:aa:d5:1a:75:5a:d3:56:db:d7:bc:40:d0:16:5c:
         23:c7:2d:23:dc:d4:27:74:6d:7e:63:57:b9:91:c2:e4:78:4e:
         60:63:dd:ab:12:8d:db:d7:04:32:e3:5c:64:1d:0e:0f:7c:76:
         0b:58:10:3c:14:4b:fb:33:46:ce:8c:63:59:83:19:f8:5c:34:
         22:18:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:03 2024 by rpki-client on console-fra.rpki-client.org