Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/jPk6SJkbUYJ0APXew6eRVaPG-LU.roa
File:                     jPk6SJkbUYJ0APXew6eRVaPG-LU.roa (raw, json)
Hash identifier:          Dx1/lXjx4EupzP23r7tDnCe7DEtd93VkJ6XC+2BFbQs=
Subject key identifier:   8C:F9:3A:48:99:1B:51:82:74:00:F5:DE:C3:A7:91:55:A3:C6:F8:B5
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       87
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jPk6SJkbUYJ0APXew6eRVaPG-LU.roa
Signing time:             Sat 30 Nov 2024 01:29:23 +0000
ROA not before:           Sat 30 Nov 2024 01:29:23 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     4685
IP address blocks:        124.155.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Nov 30 01:29:23 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=8CF93A48991B51827400F5DEC3A79155A3C6F8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c5:ff:3f:f6:e4:1c:cc:d6:cf:a1:a4:a7:cb:
                    cb:a6:fb:10:38:af:d0:43:f1:58:55:fa:97:0e:45:
                    e3:9f:53:a8:62:45:2a:d9:9c:2c:6a:f7:18:7f:ba:
                    6c:26:f3:f0:5d:1d:72:d8:fc:b9:80:84:bb:06:31:
                    fc:5f:80:63:f9:32:63:2f:3c:35:84:55:b3:e9:8d:
                    cc:e8:17:0d:4e:53:77:e8:74:89:28:d1:77:a9:5b:
                    f0:08:e8:76:49:f8:2f:2f:2e:09:aa:4d:54:71:63:
                    a0:ce:6b:c5:7a:46:b6:8f:8a:41:e9:46:28:6d:d5:
                    c3:fa:fb:58:b0:fb:a4:77:96:19:14:b5:44:08:34:
                    a8:7c:24:31:51:d8:1c:8e:e1:aa:2e:92:f8:28:67:
                    c5:34:9d:31:36:6a:03:cb:57:f4:87:a1:dd:ae:5e:
                    27:ca:c4:93:f9:41:20:58:2c:0f:10:15:0e:b9:af:
                    9f:0d:93:5d:c9:19:4e:04:d3:e9:8e:84:df:09:f1:
                    fe:16:4b:84:e4:60:77:30:25:d5:de:68:cc:c9:08:
                    e6:42:d8:67:72:51:19:4f:92:f1:c2:6a:b1:f5:7f:
                    86:46:16:04:6d:ca:0c:9e:22:ce:93:78:c8:c8:77:
                    6e:8d:4e:83:47:7f:35:d3:67:c0:e0:eb:04:7b:de:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F9:3A:48:99:1B:51:82:74:00:F5:DE:C3:A7:91:55:A3:C6:F8:B5
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jPk6SJkbUYJ0APXew6eRVaPG-LU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:5e:67:c1:39:6b:a9:48:e3:03:e2:7a:f1:67:24:6b:7e:
         18:37:a8:e0:bc:67:61:2a:55:f8:b2:e7:da:c4:9a:9e:c6:91:
         1f:39:1e:8e:4b:0c:19:92:13:71:43:10:e0:03:af:3c:07:47:
         7c:63:de:63:dc:a0:e4:42:5c:13:2a:c4:f5:f8:26:57:90:38:
         67:33:5e:f6:f7:e6:1a:a8:cb:d4:12:c9:a9:58:a8:6f:4f:da:
         98:0e:68:e3:1e:98:3c:c6:4a:e2:12:04:73:de:24:8f:68:e3:
         d5:c4:2d:2f:bb:e0:0a:23:90:7a:74:65:ee:2b:d8:c8:59:89:
         a4:5a:88:bf:5b:58:d2:fc:01:20:29:e8:c2:87:4e:8d:5c:e1:
         df:df:02:a6:7e:c0:e8:0b:5f:8c:8f:4a:51:d2:66:42:41:c5:
         d2:8a:d9:34:ca:e8:41:6a:e1:67:6a:58:3d:8c:64:81:95:44:
         25:d6:3e:dc:8d:2a:3a:31:99:fd:4e:51:09:db:e7:7c:29:2e:
         ef:d8:36:68:74:fd:06:55:4b:ac:20:17:20:bf:ab:6b:29:2a:
         53:db:30:1d:76:b5:e1:23:2c:1f:cd:5a:7e:e8:84:79:62:d8:
         e8:6c:80:26:9f:14:76:f9:1b:bd:dd:77:0d:6d:89:5c:b2:bd:
         2c:db:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:09 2025 by rpki-client