Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/_12S6OzZXYYwhLo0S8rVkizb0i8.roa
File:                     _12S6OzZXYYwhLo0S8rVkizb0i8.roa (raw, json)
Hash identifier:          wCzzsM2fYB1DQp+VGp6tOVXbCHCoLgFFkLNzG4H3NQw=
Subject key identifier:   FF:5D:92:E8:EC:D9:5D:86:30:84:BA:34:4B:CA:D5:92:2C:DB:D2:2F
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       1F
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/_12S6OzZXYYwhLo0S8rVkizb0i8.roa
Signing time:             Sun 01 Oct 2023 01:30:33 +0000
ROA not before:           Sun 01 Oct 2023 01:30:33 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131929
IP address blocks:        133.247.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Oct  1 01:30:33 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=FF5D92E8ECD95D863084BA344BCAD5922CDBD22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:44:11:1a:19:7d:07:b4:c8:39:ad:e8:ab:
                    31:6f:3a:af:d5:0a:9d:b8:a9:6a:90:e8:e0:3b:53:
                    ea:9a:b7:73:a2:4a:ce:46:e3:ab:6f:50:74:6e:e6:
                    72:08:22:2c:b3:9c:bb:e0:a2:bb:75:39:88:f2:48:
                    b5:e2:b7:ef:f0:5b:3f:a3:1e:66:7b:e7:a9:0e:e6:
                    ad:00:1c:e2:3e:fe:9f:ef:1a:92:bf:d6:5b:fd:5c:
                    4f:ca:ac:a8:d1:a3:fa:66:6d:e8:e9:10:d0:b0:df:
                    f5:62:e9:f2:a1:2d:23:8a:59:69:ef:10:7e:ab:28:
                    64:8a:c8:08:b9:18:54:29:0e:94:ca:fe:69:eb:60:
                    cf:32:e0:bd:b1:ed:56:45:7f:cb:4c:de:e9:8e:e2:
                    1c:e5:52:40:82:ab:89:d8:ef:c4:0a:45:c2:aa:7d:
                    52:d3:8e:87:d6:97:3a:09:82:b3:d4:91:e5:2b:91:
                    b1:af:28:60:2a:de:75:62:90:e5:1f:39:84:1e:5e:
                    c3:5f:9c:46:1e:1b:cc:4e:a7:bf:ed:54:f8:af:4a:
                    70:84:c6:fe:d7:9a:aa:cd:56:32:59:33:6a:4b:30:
                    0a:05:b8:a6:16:fe:62:3a:1a:eb:1f:69:c3:84:2d:
                    e7:bf:f9:22:4d:63:9d:d8:b3:d3:5f:be:f1:27:b2:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5D:92:E8:EC:D9:5D:86:30:84:BA:34:4B:CA:D5:92:2C:DB:D2:2F
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/_12S6OzZXYYwhLo0S8rVkizb0i8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:76:7c:40:ab:dc:c6:e8:16:31:d8:78:d8:85:62:dd:29:
         e2:54:b4:40:cf:bb:7d:cc:d5:83:b7:71:d2:3d:d8:4f:cb:00:
         ec:2e:ea:6b:3f:3f:b8:07:40:4c:d5:47:0f:4f:8f:19:65:7f:
         bf:e5:ec:22:e2:bf:16:1b:54:60:4c:2d:ec:b2:2c:2d:60:51:
         d5:f5:2b:9d:d4:e7:3a:85:21:54:d9:bc:a3:33:15:30:24:83:
         19:32:da:f2:c5:b3:68:c6:ab:54:6d:ad:26:7c:37:38:75:da:
         d2:f5:6f:85:97:25:4a:12:57:e2:bc:38:5c:d2:aa:39:b4:9b:
         6f:d9:b3:57:df:32:5b:19:1d:f0:d0:7c:dc:eb:89:d4:54:c8:
         c1:b4:1a:29:dd:2f:cc:8a:16:d0:79:03:f4:3c:28:00:6e:9c:
         57:46:43:6a:92:af:05:35:3e:b0:fe:ac:54:ff:e3:66:c9:3a:
         b6:7b:57:e5:db:90:6f:54:85:ac:f0:80:83:03:ad:2f:3b:0a:
         91:32:98:4b:15:df:81:16:3c:fc:35:f5:14:fe:f1:26:eb:d8:
         ef:47:33:c2:a4:08:c9:64:fc:eb:b4:67:bf:9a:2e:09:2b:1b:
         5e:19:22:c2:55:df:79:80:33:3e:c2:f7:6f:4c:57:85:e5:37:
         83:c0:76:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:14 2024 by rpki-client on console-fra.rpki-client.org