Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/U6iaNkvVuw9w2foznMtqLzmrtpY.roa
File:                     U6iaNkvVuw9w2foznMtqLzmrtpY.roa (raw, json)
Hash identifier:          oiT6HPX5S+9gVQWVAuDWYsU13fjKk9FCEWl311f3k40=
Subject key identifier:   53:A8:9A:36:4B:D5:BB:0F:70:D9:FA:33:9C:CB:6A:2F:39:AB:B6:96
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       18
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/U6iaNkvVuw9w2foznMtqLzmrtpY.roa
Signing time:             Fri 12 Jan 2024 04:06:16 +0000
ROA not before:           Fri 12 Jan 2024 04:06:16 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     131923
IP address blocks:        133.247.136.0/21 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 12 04:06:16 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=53A89A364BD5BB0F70D9FA339CCB6A2F39ABB696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:70:b6:fa:89:fc:75:1b:a6:cc:2e:ad:36:
                    e9:d9:d4:1a:7b:57:b8:5b:ca:42:69:1a:01:be:b7:
                    e9:cc:44:c0:36:a8:3e:1e:05:d5:0f:95:e7:24:7c:
                    82:f3:55:e6:6c:9d:20:25:74:d9:40:a2:ed:bb:7f:
                    64:a0:40:56:42:5b:6e:cd:90:06:c3:ac:0d:bc:b4:
                    f3:18:53:22:f4:fe:ec:8b:7a:cd:da:de:51:13:d2:
                    d8:80:3c:8f:04:e9:3c:bd:6b:f8:65:3f:97:a0:98:
                    e4:c7:f8:45:a9:50:c4:40:32:35:70:56:dc:6a:b9:
                    3c:d0:ef:f9:0c:77:20:2a:81:8c:10:91:0c:c7:b2:
                    66:3d:77:5d:e9:d9:ff:08:fc:9f:ef:d7:7c:67:89:
                    84:01:f0:1f:c4:a1:e1:b2:be:bd:62:30:11:ce:a7:
                    1d:e9:fb:24:74:a6:10:1b:0d:fd:12:9b:00:a6:ba:
                    01:7c:3e:e7:cf:e0:7a:9d:59:da:11:1f:79:ac:2a:
                    31:9f:02:45:7e:4b:31:6e:e9:85:5f:98:62:1c:e4:
                    9b:11:8b:c5:c2:8d:73:14:56:a2:35:ab:64:18:97:
                    0c:53:41:de:78:5f:50:7b:67:d4:e5:e3:2b:91:e5:
                    38:b7:8c:2e:9f:40:51:c1:de:94:60:eb:12:c2:5c:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:9A:36:4B:D5:BB:0F:70:D9:FA:33:9C:CB:6A:2F:39:AB:B6:96
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/U6iaNkvVuw9w2foznMtqLzmrtpY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:27:bd:25:9e:5c:08:60:ba:b8:7a:08:1a:28:d8:74:ec:e8:
         e0:f1:44:81:7d:10:43:5e:8f:53:1d:3b:b1:f8:ce:2f:18:f7:
         af:a4:02:e5:c7:1c:fb:a2:ac:09:0c:72:61:79:65:de:86:9b:
         0f:3e:f3:48:4f:74:79:fc:76:f9:ca:e9:cd:9c:94:50:61:03:
         68:00:6b:06:b2:6b:1a:f3:94:5c:f2:25:2b:96:aa:3c:11:df:
         02:4b:fa:16:7e:15:e5:17:d1:68:93:77:d7:04:75:65:52:e6:
         40:5e:f3:b6:81:87:50:50:92:d8:be:ac:1b:3e:ec:ab:6b:36:
         8d:77:44:c1:f1:07:df:ed:37:23:46:cf:78:5e:06:41:17:2d:
         88:c0:b1:bb:dc:5d:4c:60:8a:08:47:5f:18:2e:09:20:c4:27:
         f5:2b:85:b3:e8:13:98:fa:22:25:27:fa:43:0f:74:23:41:5b:
         ac:ad:b8:19:aa:e4:0a:b9:46:6e:ff:b1:6d:8d:05:85:10:74:
         2e:23:ab:eb:d0:fb:ea:d7:38:e7:13:68:cf:64:e7:3b:aa:24:
         89:fd:25:46:4e:0b:44:88:32:44:1e:62:e6:4f:55:f7:5f:e3:
         26:08:4a:8a:78:d0:ce:cf:68:63:be:36:d8:5a:89:a9:f0:01:
         c6:c0:a7:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 14 04:10:38 2024 by rpki-client on console-fra.rpki-client.org