Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/HsC2kP3VksJznNnNq-_HLmjvUVA.roa
File:                     HsC2kP3VksJznNnNq-_HLmjvUVA.roa (raw, json)
Hash identifier:          w3ptwlBX6YU5YsNVyjuhZSSSnSw8aRxh3FaGCf0z/IQ=
Subject key identifier:   1E:C0:B6:90:FD:D5:92:C2:73:9C:D9:CD:AB:EF:C7:2E:68:EF:51:50
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       32
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/HsC2kP3VksJznNnNq-_HLmjvUVA.roa
Signing time:             Fri 15 Sep 2023 06:46:41 +0000
ROA not before:           Fri 15 Sep 2023 06:46:41 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        121.200.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:46:41 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1EC0B690FDD592C2739CD9CDABEFC72E68EF5150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e3:f5:e3:2a:4b:7c:0f:c2:51:0d:40:84:44:
                    a7:d1:6d:eb:fc:24:12:06:5a:b7:47:fa:18:b4:6a:
                    e0:4c:e1:7f:28:35:ec:39:6c:d8:44:9a:ef:cf:99:
                    d2:7d:da:3f:60:b5:df:8e:18:2f:86:7e:1c:5a:79:
                    eb:bd:49:5f:15:08:3f:11:21:78:03:8a:bb:36:6f:
                    d8:32:8a:6a:7c:77:3c:2b:51:85:2e:6f:a3:66:57:
                    a8:25:ae:52:ae:f2:a7:1c:dc:e3:2b:11:fd:57:81:
                    a8:6d:9a:c8:b5:76:74:1f:2e:e7:26:a5:4c:50:43:
                    df:d8:6a:33:d7:2c:13:7f:0f:f7:38:3c:15:50:09:
                    28:ef:9d:be:ce:18:2d:eb:53:0f:0e:37:9c:9e:74:
                    30:c4:3b:91:a6:ed:63:ee:40:b9:4f:56:5b:26:41:
                    c9:bf:aa:3e:0e:1d:10:a4:b4:69:81:9d:2a:14:77:
                    44:12:3a:16:aa:10:48:72:04:da:c5:c2:68:c4:dc:
                    2d:fc:dd:f7:f9:81:a0:53:93:2a:e4:e4:a5:2b:e5:
                    14:64:9f:76:43:78:38:72:23:f7:3b:9e:e2:5a:10:
                    06:e8:81:a8:97:b0:3d:3e:7f:dc:80:93:24:d7:b5:
                    10:ca:dd:db:b9:6b:26:51:e8:b3:55:b6:7d:df:6b:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C0:B6:90:FD:D5:92:C2:73:9C:D9:CD:AB:EF:C7:2E:68:EF:51:50
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/HsC2kP3VksJznNnNq-_HLmjvUVA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.200.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b9:6a:c4:97:ae:65:c3:69:a3:99:be:18:42:88:27:d9:5f:3f:
         37:57:05:9a:73:a0:47:dd:36:d9:9e:c2:75:d7:dc:f1:f3:ea:
         07:b5:51:74:83:97:84:5f:49:6b:b8:d1:f6:d2:69:14:ab:8a:
         dd:11:7d:c0:9c:ce:9f:9c:04:68:1b:1f:81:33:d6:d9:f6:3c:
         cb:aa:10:fc:74:c6:89:ea:fb:85:cc:36:4c:0f:39:40:60:81:
         ec:27:32:bc:08:41:96:f1:b4:62:e7:e9:e2:f9:36:2b:58:bb:
         c2:96:70:ad:0d:5b:bd:f3:9c:b7:a4:01:6d:16:b7:78:93:78:
         e7:1e:d8:ee:24:84:6e:2c:ab:04:ad:69:3d:cd:a2:a5:50:f1:
         8f:cf:30:18:56:d8:92:0b:c7:fe:e0:39:b6:10:04:58:32:89:
         f0:85:33:04:75:77:53:80:45:2f:b4:5b:0a:a7:ec:68:ba:59:
         4f:25:8d:b7:84:5e:17:e1:d4:fb:a5:23:03:f1:00:61:2c:a4:
         db:90:cf:4a:52:e8:4f:99:22:33:05:14:af:ef:5a:e8:87:87:
         0a:f4:63:38:f9:40:fb:af:c9:6d:5b:72:74:43:3d:56:8a:48:
         9e:91:71:3a:1c:08:a8:c5:db:6d:c5:b9:bb:f3:e2:57:1b:77:
         42:70:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:50:32 2024 by rpki-client on console-fra.rpki-client.org