Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/Qgj9KylklSyrN9XJerX3bTxzBcc.roa
File:                     Qgj9KylklSyrN9XJerX3bTxzBcc.roa (raw, json)
Hash identifier:          91kxlzyqP+AziWOhNHLq6rMPkW7AlXWvEK3TcAlvb/8=
Subject key identifier:   42:08:FD:2B:29:64:95:2C:AB:37:D5:C9:7A:B5:F7:6D:3C:73:05:C7
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       88
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Qgj9KylklSyrN9XJerX3bTxzBcc.roa
Signing time:             Sat 30 Nov 2024 01:29:23 +0000
ROA not before:           Sat 30 Nov 2024 01:29:23 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     4685
IP address blocks:        124.155.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Nov 30 01:29:23 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=4208FD2B2964952CAB37D5C97AB5F76D3C7305C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:2f:10:a9:80:76:8e:ac:45:bc:e1:07:df:
                    0b:cf:c8:75:f9:8d:92:86:d5:a0:d5:c0:67:ef:48:
                    5d:12:70:09:ef:86:13:c8:78:e3:8a:00:07:4c:27:
                    50:26:64:b4:1b:19:3c:1f:4f:78:ae:5e:24:62:e3:
                    ee:e4:97:71:66:bd:78:e2:33:a9:94:47:21:d4:7c:
                    e3:5e:93:70:64:ed:bb:3d:aa:3b:1d:ea:9a:6f:a7:
                    d6:c0:19:13:79:2f:36:f4:33:54:2d:f6:da:06:eb:
                    5d:ce:e0:02:a6:de:81:3d:6b:36:63:b3:56:0f:f6:
                    3e:25:d2:ab:f4:00:81:06:4a:58:18:f5:73:76:12:
                    cb:55:02:48:c7:0a:c5:fe:d4:b8:b8:0d:66:69:4e:
                    3b:f2:91:56:4e:2e:0f:ed:da:20:2c:e2:56:23:22:
                    34:d9:f8:d9:3e:00:85:a9:65:82:9c:cb:20:3d:e6:
                    86:72:9a:b6:e5:14:49:c2:a9:4f:9b:c8:45:99:69:
                    a1:f9:21:54:01:2d:b7:7a:f8:a6:8b:d9:88:ed:7a:
                    6a:89:1f:a9:ff:c1:da:ba:22:3d:47:92:c0:7a:25:
                    24:23:7d:cb:31:75:62:39:6e:5e:25:5a:2f:12:df:
                    e3:42:88:5c:40:62:a4:df:e2:63:b3:cc:9a:e0:68:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:08:FD:2B:29:64:95:2C:AB:37:D5:C9:7A:B5:F7:6D:3C:73:05:C7
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Qgj9KylklSyrN9XJerX3bTxzBcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:c0:30:f0:27:d7:a5:9e:2e:9c:38:6f:23:c8:8b:63:07:d4:
         3c:71:3d:cc:cb:08:9a:9c:fa:7a:da:4e:ff:5f:ac:7f:81:49:
         cf:80:bc:6b:1e:af:1a:fc:18:66:3a:1a:b3:2d:cc:65:2f:73:
         4b:2d:f5:ed:47:6d:92:0c:b9:9f:b4:5d:7f:24:2b:9d:65:89:
         82:9d:0e:f0:27:f9:4d:d8:00:ae:3b:39:62:db:7f:38:91:30:
         fd:5b:7e:fe:a1:b2:c2:e5:54:b2:c9:9b:d2:29:86:0c:49:58:
         f2:a3:fd:fc:f8:0e:c9:15:56:36:a2:36:93:59:d0:39:2b:36:
         d9:ac:5c:8a:35:f1:75:69:7c:4d:f1:8c:28:35:e7:05:6c:12:
         4e:ff:66:49:97:0b:a9:1c:4e:e5:d9:e4:24:24:cb:a6:bf:c5:
         43:d6:17:42:ff:1d:81:13:27:75:42:83:28:2c:9e:49:8d:0f:
         a5:a9:8e:d6:3e:ed:47:f9:8a:2d:5b:5c:56:11:be:7a:9e:56:
         38:e2:36:8c:f1:d6:24:db:e8:05:b0:24:0e:c5:db:a9:b9:ba:
         83:33:34:76:4a:ca:12:f8:dc:13:d3:35:5e:fd:d7:42:52:9c:
         fc:48:16:78:fb:ad:34:20:0b:1d:77:f2:cd:10:a0:e4:f0:67:
         fc:9f:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:43 2025 by rpki-client