Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/wC5OCbBGoMTI5HbiN8jB1QKZLF8.roa
File:                     wC5OCbBGoMTI5HbiN8jB1QKZLF8.roa (raw, json)
Hash identifier:          hnKiLcwjqQAweJx1iCfGBABdQlEivp35tL3cnhy1068=
Subject key identifier:   C0:2E:4E:09:B0:46:A0:C4:C8:E4:76:E2:37:C8:C1:D5:02:99:2C:5F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       94
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/wC5OCbBGoMTI5HbiN8jB1QKZLF8.roa
Signing time:             Sat 01 Mar 2025 01:31:57 +0000
ROA not before:           Sat 01 Mar 2025 01:31:57 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4685
IP address blocks:        101.50.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar  1 01:31:57 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=C02E4E09B046A0C4C8E476E237C8C1D502992C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:de:54:bf:06:26:c1:85:f1:ea:d8:fe:ce:
                    a5:b3:c9:ce:43:6b:df:dd:ec:b3:29:41:a9:11:a4:
                    55:d8:12:71:c4:fc:70:e9:61:15:e8:e8:b2:dd:60:
                    2d:8b:43:4b:bb:b3:f7:97:08:3a:e8:bc:76:1c:ee:
                    46:36:07:19:54:24:7c:41:18:a7:57:1d:b9:5b:2c:
                    c5:76:c6:e7:aa:da:5b:6f:4b:9b:dd:26:6d:06:c0:
                    59:66:a7:2d:bb:24:27:81:a5:95:cd:ec:f7:0d:6c:
                    72:dc:fb:93:c7:73:af:1d:ef:94:80:56:ec:45:a2:
                    89:e7:19:6a:6c:0f:c0:84:5a:5b:c9:62:72:75:c5:
                    63:d0:92:ae:3c:e3:4a:5b:ca:be:26:51:3f:63:ea:
                    94:75:eb:1e:86:49:b0:49:c6:38:dc:f0:3b:88:ba:
                    8b:d3:8a:3a:49:c8:ab:56:a7:a2:42:f1:e3:c6:f1:
                    32:c8:0c:38:82:ae:37:11:c5:22:10:e2:fa:e3:d9:
                    52:32:57:6f:6d:25:e3:89:54:66:35:3a:d5:a2:db:
                    dc:99:d9:f2:23:81:9f:51:26:d6:71:35:89:5c:53:
                    d4:c5:ba:9c:42:e8:9f:b7:b1:7b:58:56:58:5b:a0:
                    b5:ce:3d:55:68:34:66:97:fa:d0:8b:8d:4f:0b:91:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2E:4E:09:B0:46:A0:C4:C8:E4:76:E2:37:C8:C1:D5:02:99:2C:5F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/wC5OCbBGoMTI5HbiN8jB1QKZLF8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         db:6d:77:85:d1:d4:d8:64:66:7f:64:e5:4b:09:23:f2:8e:3e:
         0f:6a:bd:23:bb:65:9c:cf:af:0c:9f:3c:5c:7e:d0:11:ad:d8:
         9e:ad:bf:3a:4d:48:d4:8c:7e:8a:43:46:c0:2b:36:f6:5f:28:
         23:b4:f6:43:fc:a0:3b:1c:ba:7e:0f:6a:19:c4:a3:f6:84:f9:
         e4:cb:4e:af:ed:e3:2e:6f:b4:4c:40:3d:45:5d:c6:fc:8e:b9:
         4b:69:31:47:3e:7c:87:ec:3c:94:c9:ce:b1:c2:63:5b:97:b9:
         51:53:c7:3b:02:74:4e:91:09:45:55:f1:57:0b:39:db:81:64:
         28:16:3b:d3:9c:40:9c:62:c8:7d:55:89:07:90:58:61:06:1d:
         23:5d:73:5d:8c:be:a7:84:e7:0a:c9:cb:41:83:e6:d3:35:74:
         1a:0e:b7:e2:28:22:1b:ed:45:84:f3:e1:9c:76:4b:f3:43:e5:
         73:f6:9c:fd:37:6d:c1:1d:08:d6:ef:3d:09:74:94:c2:43:78:
         bf:d9:fc:41:9e:d8:60:d7:8a:86:ed:1d:6d:20:b5:5b:21:f0:
         57:bf:97:09:7a:4a:45:9c:87:a6:e1:f8:b4:b3:b6:d1:80:6f:
         3a:63:73:70:70:79:71:79:9d:d7:66:a2:3b:36:1d:0f:21:51:
         47:03:f9:30
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNTAzMDEw
MTMxNTdaFw0yNjAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMwMkU0RTA5QjA0NkEw
QzRDOEU0NzZFMjM3QzhDMUQ1MDI5OTJDNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbDN5UvwYmwYXx6tj+zqWzyc5Da9/d7LMpQakRpFXYEnHE/HDp
YRXo6LLdYC2LQ0u7s/eXCDrovHYc7kY2BxlUJHxBGKdXHblbLMV2xueq2ltvS5vd
Jm0GwFlmpy27JCeBpZXN7PcNbHLc+5PHc68d75SAVuxFoonnGWpsD8CEWlvJYnJ1
xWPQkq4840pbyr4mUT9j6pR16x6GSbBJxjjc8DuIuovTijpJyKtWp6JC8ePG8TLI
DDiCrjcRxSIQ4vrj2VIyV29tJeOJVGY1OtWi29yZ2fIjgZ9RJtZxNYlcU9TFupxC
6J+3sXtYVlhboLXOPVVoNGaX+tCLjU8LkX5HAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUwC5OCbBGoMTI5HbiN8jB1QKZLF8wHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC93QzVPQ2JCR29NVEk1SGJpTjhqQjFRS1pMRjgucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFZTLgMA0GCSqGSIb3DQEBCwUAA4IBAQDbbXeF0dTYZGZ/ZOVLCSPyjj4Par0j
u2Wcz68MnzxcftARrdierb86TUjUjH6KQ0bAKzb2XygjtPZD/KA7HLp+D2oZxKP2
hPnky06v7eMub7RMQD1FXcb8jrlLaTFHPnyH7DyUyc6xwmNbl7lRU8c7AnROkQlF
VfFXCznbgWQoFjvTnECcYsh9VYkHkFhhBh0jXXNdjL6nhOcKyctBg+bTNXQaDrfi
KCIb7UWE8+GcdkvzQ+Vz9pz9N23BHQjW7z0JdJTCQ3i/2fxBnthg14qG7R1tILVb
IfBXv5cJekpFnIem4fi0s7bRgG86Y3NwcHlxeZ3XZqI7Nh0PIVFHA/kw
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:50 2025 by rpki-client