Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/3guSo_y891OR5VM-JhaJI5GCBnk.roa
File:                     3guSo_y891OR5VM-JhaJI5GCBnk.roa (raw, json)
Hash identifier:          j03jP0hW0cqNvoUnMBCxkvBWClobSqbA8OwWjXDZYEg=
Subject key identifier:   DE:0B:92:A3:FC:BC:F7:53:91:E5:53:3E:26:16:89:23:91:82:06:79
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       41
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/3guSo_y891OR5VM-JhaJI5GCBnk.roa
Signing time:             Fri 01 Dec 2023 07:23:46 +0000
ROA not before:           Fri 01 Dec 2023 07:23:46 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     59125
IP address blocks:        150.91.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Dec  1 07:23:46 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=DE0B92A3FCBCF75391E5533E2616892391820679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f2:f2:35:5a:ed:f0:f2:eb:c4:ed:6c:00:b8:
                    d6:9d:dd:fa:5d:a1:0c:1d:0f:0f:77:3d:bd:38:ef:
                    6d:7e:85:42:59:cd:3d:cc:4f:b4:17:76:91:39:bd:
                    3f:a1:d3:d9:1b:a6:bf:b7:5b:b8:62:0b:46:72:9a:
                    42:1d:7b:9b:87:4b:38:32:9b:80:a8:24:b6:5d:64:
                    a9:5e:f7:a4:ae:c1:d1:4a:10:c3:7b:43:18:fa:83:
                    0c:08:b8:1f:61:9d:f4:b6:68:4a:bc:b7:8f:01:3c:
                    f7:86:8e:9e:f8:81:c8:7e:a9:a5:86:2a:e8:c5:d0:
                    30:c7:95:13:43:75:c5:6e:1e:e2:ce:e2:6a:b6:f0:
                    22:cf:c9:ea:ca:c8:86:2f:4f:e3:3f:12:c8:9e:88:
                    f8:1d:6b:d6:99:bb:78:fd:4c:87:b2:47:5b:70:b3:
                    27:e9:ff:ff:c4:ff:f9:b9:b0:a2:ca:73:35:1b:db:
                    c3:e2:b6:54:3a:04:72:f2:80:2a:d7:2f:7c:4d:95:
                    ac:49:d5:3b:a7:17:01:6a:52:84:fd:21:df:88:7a:
                    36:ec:ff:7e:3f:ba:1c:9d:b4:0d:81:2e:71:5e:04:
                    aa:ab:fa:ce:99:bc:23:28:b0:93:72:8e:cd:d1:2d:
                    5a:12:cd:4c:33:a3:2c:79:da:9b:e4:c9:4d:16:08:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:92:A3:FC:BC:F7:53:91:E5:53:3E:26:16:89:23:91:82:06:79
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/3guSo_y891OR5VM-JhaJI5GCBnk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.91.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:49:ed:56:7d:1f:84:c7:4e:f2:30:8a:eb:e8:ea:c2:22:9b:
         11:92:93:f1:8d:84:da:4b:b6:72:bd:4a:99:31:c4:65:b2:2c:
         ff:b3:4f:cc:6d:f3:ba:0b:1b:5f:88:c7:bf:27:32:b0:46:9c:
         a7:95:0d:fd:f6:18:a5:be:7e:a1:00:dc:ae:18:6a:89:e9:91:
         9d:bd:11:09:4b:5d:76:47:42:65:91:3a:24:ed:4d:db:6b:e9:
         01:cf:94:ec:7c:bb:43:13:39:bc:50:0f:8d:bb:61:b5:c7:e7:
         d8:80:ae:84:7b:df:b5:2c:23:be:70:c7:5b:c2:87:49:39:72:
         18:f2:5b:be:75:6e:94:be:be:50:5a:36:23:ea:43:b4:e3:3c:
         67:7a:88:4f:31:4d:9e:64:77:b4:20:2a:12:e5:3d:b0:63:63:
         4f:02:fc:6d:08:8b:f5:d6:89:db:cf:df:6b:3d:d5:dc:3f:75:
         50:b8:80:89:1a:06:61:5d:59:65:cf:6e:fd:ca:3f:b4:a1:84:
         ba:5f:ce:62:73:c7:48:c1:d5:ff:84:13:ed:e4:3f:94:69:18:
         1a:0c:de:0e:47:1a:69:7f:76:31:86:f1:90:c9:5e:4f:77:9e:
         3d:db:09:21:cd:0b:be:3a:86:e6:f4:5c:34:91:fd:20:ff:50:
         d4:44:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:01 2024 by rpki-client on console-ams.rpki-client.org