Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10694/R7BEuAdzdutJiMjCqfZ60cyVLTU.roa
File:                     R7BEuAdzdutJiMjCqfZ60cyVLTU.roa (raw, json)
Hash identifier:          j+1Sa4hRjvWK7lpVWQE6cwx5ZC/yWEWuQyAU6dsnobg=
Subject key identifier:   47:B0:44:B8:07:73:76:EB:49:88:C8:C2:A9:F6:7A:D1:CC:95:2D:35
Certificate issuer:       /CN=713193D702C3122114F7CDE81FD5A58672720F84
Certificate serial:       12
Authority key identifier: 71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/R7BEuAdzdutJiMjCqfZ60cyVLTU.roa
Signing time:             Wed 06 Nov 2024 07:41:17 +0000
ROA not before:           Wed 06 Nov 2024 07:41:17 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7511
IP address blocks:        101.50.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713193D702C3122114F7CDE81FD5A58672720F84
        Validity
            Not Before: Nov  6 07:41:17 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=47B044B8077376EB4988C8C2A9F67AD1CC952D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6e:76:16:b5:1a:7a:44:66:0d:35:fe:bb:11:
                    55:dd:01:46:51:8a:31:45:47:94:ae:31:65:01:ea:
                    eb:f7:2a:20:81:d8:45:51:40:e0:8c:7c:25:cc:da:
                    52:d7:e4:14:88:5b:ed:82:3c:cd:87:cd:ff:d4:00:
                    18:5b:0e:d3:ec:52:d4:8a:0f:36:f4:c7:17:be:c0:
                    28:f5:88:dd:a5:bc:39:79:c7:3f:0a:29:e3:f0:17:
                    cc:7e:10:15:b7:75:f3:5f:5b:b3:56:27:84:4c:dd:
                    7d:f3:e9:a7:d1:55:7f:61:69:8f:f8:6d:56:1a:f3:
                    c6:7a:89:b0:f2:80:ef:57:15:97:84:bc:a3:da:e4:
                    28:72:6b:d4:ac:15:5e:2f:6d:00:f8:88:82:ba:f6:
                    03:e4:00:2a:ae:ef:ad:a7:1d:4b:3e:ec:07:c0:6e:
                    b6:93:27:05:44:ec:ac:6d:b6:d0:8f:68:90:13:a9:
                    7b:09:25:5b:a6:1c:fd:3c:54:d0:c6:04:fa:58:f6:
                    c9:76:97:a3:84:75:31:42:ff:b4:72:d2:1b:d5:6e:
                    1a:44:73:b6:2c:87:c2:15:82:8e:cd:10:1e:8b:78:
                    b8:c2:47:3a:8b:49:d7:ec:97:16:c6:5c:76:e7:d5:
                    95:9f:a1:e8:01:bd:4b:5b:70:bd:aa:45:aa:85:26:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:44:B8:07:73:76:EB:49:88:C8:C2:A9:F6:7A:D1:CC:95:2D:35
            X509v3 Authority Key Identifier:
                keyid:71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/R7BEuAdzdutJiMjCqfZ60cyVLTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:f9:b9:c5:8b:7c:c6:0b:e0:5f:84:c6:cb:c0:b8:ca:13:7d:
         20:d8:46:4d:4d:fd:c2:13:3d:d0:f5:4b:83:da:a1:c1:a4:11:
         ec:d5:a0:0d:95:51:9e:72:98:81:a3:6b:80:ee:84:a5:ef:cd:
         9c:73:2d:44:6a:2a:93:17:9c:7c:10:7c:a2:9c:b6:32:54:69:
         bc:4e:0e:64:e2:66:12:f3:db:b9:5f:20:be:16:08:d7:ce:74:
         dd:f4:1a:ee:29:64:b4:0b:47:a2:ad:64:56:fb:f1:96:38:b1:
         84:c3:fa:4e:e2:34:57:13:51:9f:d8:d3:16:ce:cd:b4:71:0e:
         da:03:1c:db:ad:2e:86:11:f7:5d:6f:39:5a:c9:2e:07:06:18:
         52:29:14:c7:c7:33:75:3f:b0:89:30:ad:9e:c5:49:66:42:05:
         1d:79:23:58:cc:80:15:1b:85:9d:40:21:2a:0b:0c:61:7e:ad:
         f0:02:2c:67:d1:b9:46:c0:71:ac:2d:80:42:5f:f8:72:bb:96:
         cd:77:2d:f4:37:58:2a:24:f7:3d:05:88:68:f6:c3:fa:7e:c1:
         2d:13:a1:be:ba:c1:8f:b7:78:8b:2d:2e:a9:8d:ca:a4:ed:7e:
         2c:71:2a:45:63:c9:56:30:58:92:63:e8:36:8a:87:f2:c0:3d:
         f5:08:6a:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:08 2024 by rpki-client on console-fra.rpki-client.org