Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/a__5OWBGnZuDeUSjgmNfHeTej0U.roa
File:                     a__5OWBGnZuDeUSjgmNfHeTej0U.roa (raw, json)
Hash identifier:          RpE3H/h1VyBKCFqxYvTwFFgEIWjyK9I1T3QWZmPjdTo=
Subject key identifier:   6B:FF:F9:39:60:46:9D:9B:83:79:44:A3:82:63:5F:1D:E4:DE:8F:45
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       1C
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/a__5OWBGnZuDeUSjgmNfHeTej0U.roa
Signing time:             Fri 12 Jan 2024 04:06:17 +0000
ROA not before:           Fri 12 Jan 2024 04:06:17 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     131923
IP address blocks:        133.88.88.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 12 04:06:17 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=6BFFF93960469D9B837944A382635F1DE4DE8F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:00:65:05:16:9d:df:af:6a:a2:e6:6a:b4:
                    b8:a7:13:f0:af:79:e3:56:48:3d:3a:fa:d2:03:d0:
                    7d:05:01:b3:22:97:ff:e4:44:15:9b:9d:11:58:3b:
                    00:81:14:01:6f:b7:09:2b:3c:f0:d7:e5:98:dd:61:
                    7c:0d:c2:e4:3a:1d:c4:7f:3c:2a:d2:05:89:66:b7:
                    17:95:20:ab:0d:c9:4a:11:63:b8:a5:55:26:11:6a:
                    70:74:52:95:a4:c1:73:da:d3:95:8c:bf:4e:4a:b1:
                    4c:68:95:7a:57:6e:64:78:f2:dd:7c:10:fe:7d:5d:
                    04:7e:77:70:16:19:b8:01:88:25:9f:31:c7:1a:c5:
                    ab:1d:a4:13:33:a5:72:54:01:79:9b:b3:a7:94:24:
                    73:e2:c5:b1:0f:37:69:95:ec:0a:5b:73:9c:6b:42:
                    d6:75:71:d5:4d:0b:63:c9:fb:9d:6e:92:49:93:4c:
                    cf:73:b8:e3:a2:03:af:eb:ef:cb:e9:44:76:c7:cb:
                    82:f7:ce:80:a9:fb:e2:8c:f0:e7:66:27:ed:42:25:
                    3a:2f:73:21:56:7d:7a:25:fc:07:ee:93:24:48:31:
                    e9:9f:9b:22:77:44:db:05:b9:6e:86:53:f4:cf:17:
                    fd:cc:4b:6a:94:36:fc:14:96:06:62:9d:92:3f:54:
                    98:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FF:F9:39:60:46:9D:9B:83:79:44:A3:82:63:5F:1D:E4:DE:8F:45
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/a__5OWBGnZuDeUSjgmNfHeTej0U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:b8:0d:cf:a9:bb:a3:16:43:43:f6:bc:29:b9:2e:8d:05:ef:
         43:dd:0d:32:0b:15:3a:3a:94:aa:70:6d:a4:1d:55:44:91:7e:
         92:99:1a:f7:65:d9:05:45:dd:6e:95:12:65:05:93:84:88:c9:
         ed:f4:a4:1d:22:75:4b:a9:ba:2b:44:01:93:2f:fb:e1:55:71:
         40:47:e6:2b:ab:18:1b:5d:e5:9a:7a:ff:c4:c3:f7:1c:d6:61:
         98:cf:fe:c0:10:35:9e:e0:26:86:73:db:95:7d:bb:55:c1:49:
         3a:0a:54:cf:da:db:4c:0c:63:f6:50:06:85:cd:09:bd:d1:27:
         e2:5d:a4:fb:c6:75:58:f5:99:a4:6c:10:f7:56:29:93:8b:6c:
         b9:5c:7b:4c:ac:56:a0:74:36:f2:78:8b:18:fa:f8:9a:b8:cd:
         e3:d8:3e:e3:41:e5:e8:83:2f:04:5c:9c:a4:10:65:e3:8a:9b:
         85:4d:46:2c:79:d6:94:07:e7:24:0c:b2:4a:c5:28:91:13:e4:
         36:9a:70:5f:d3:49:2f:45:08:91:a2:f5:45:98:b4:07:55:34:
         ef:ed:08:ae:3b:5a:2d:53:c6:66:1c:64:01:55:9f:a9:87:47:
         b9:75:fc:0d:23:fb:f5:bf:b6:2c:fa:41:7c:d4:69:15:14:ee:
         e6:a1:29:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:38 2024 by rpki-client on console-ams.rpki-client.org