Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ULuYey7xG20Qnrh1T_9G94AG-mU.roa
File:                     ULuYey7xG20Qnrh1T_9G94AG-mU.roa (raw, json)
Hash identifier:          i7Dz8XFU2D9S8L8epH7QbG26nse6El9QNUJwbfIXqvQ=
Subject key identifier:   50:BB:98:7B:2E:F1:1B:6D:10:9E:B8:75:4F:FF:46:F7:80:06:FA:65
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       33
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ULuYey7xG20Qnrh1T_9G94AG-mU.roa
Signing time:             Tue 26 Sep 2023 06:57:15 +0000
ROA not before:           Tue 26 Sep 2023 06:57:15 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        203.191.224.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:57:15 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=50BB987B2EF11B6D109EB8754FFF46F78006FA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8c:37:c9:b0:ab:43:39:a0:d0:e4:bd:a4:33:
                    f8:8c:5d:f7:2e:70:0f:dd:46:93:b9:1e:47:71:a4:
                    3f:8c:82:f6:35:c0:23:7b:14:45:81:b8:e0:7d:62:
                    c6:1b:0a:1d:47:dc:5f:2b:a9:fa:bd:3b:21:81:e6:
                    8f:6e:17:54:5f:15:02:a9:a7:b8:a3:78:0b:c2:a8:
                    ef:7d:ca:00:c7:e3:4a:08:de:28:7f:27:32:a5:1f:
                    6d:b2:b3:30:d0:38:38:36:d8:5f:06:d4:a6:be:86:
                    65:92:37:ed:4f:f2:90:e3:50:c1:8d:5e:6f:8e:27:
                    6d:44:6c:b9:bd:30:b2:03:1e:22:9a:61:59:9e:60:
                    b1:be:80:20:3e:74:af:c8:8b:f4:69:64:ab:9c:3f:
                    90:da:00:02:7a:79:3e:cb:af:f0:48:c6:81:c4:97:
                    ba:7e:1a:15:8d:23:b2:5a:f6:fe:f2:08:65:9f:8e:
                    43:8f:bc:45:a1:62:25:8a:54:51:bf:31:59:fe:e5:
                    82:5e:db:f2:bb:1c:df:39:10:b9:ce:fe:0e:df:c4:
                    d0:9c:03:16:6a:8c:13:e2:76:dd:63:f9:5b:2c:4f:
                    f2:0a:94:8b:25:f7:e9:5c:bc:e3:10:60:36:56:e2:
                    b6:78:e9:56:d4:34:24:a7:6a:9d:fb:04:a5:d7:01:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:98:7B:2E:F1:1B:6D:10:9E:B8:75:4F:FF:46:F7:80:06:FA:65
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ULuYey7xG20Qnrh1T_9G94AG-mU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:15:af:d4:0c:fd:58:0c:9b:82:5e:5e:1b:bb:49:73:f3:d1:
         eb:00:59:82:04:d7:43:36:f8:c5:d8:df:f5:7c:dd:03:a1:0d:
         5e:05:56:41:71:ef:6f:0e:b7:37:a0:bc:e9:d4:98:ca:39:c3:
         a6:a7:2a:cd:71:93:75:c2:e4:09:09:90:c3:3d:bd:2b:60:4f:
         60:18:1b:40:bf:cd:0c:4e:e9:3f:54:22:53:75:d1:b5:9c:8d:
         b5:47:d5:05:6f:9f:fd:56:06:14:db:5c:90:ae:3c:9e:ca:ea:
         d7:4a:51:62:06:e6:09:f0:ba:fe:45:cf:3e:b5:da:64:0c:18:
         e4:78:fe:12:08:bd:93:23:04:a0:03:94:ef:17:33:9d:bb:a4:
         62:7c:ef:45:e4:32:55:81:a2:a2:1e:aa:60:04:dc:6a:7d:96:
         1d:c9:69:2d:4e:76:3e:88:cd:bf:eb:93:bf:bb:ca:ee:6b:09:
         e3:db:63:2a:05:c7:70:17:ea:05:40:b8:de:b0:6f:10:d0:1c:
         d8:f0:9c:62:5f:cd:c7:35:5d:c3:8d:3d:c8:1d:fe:4e:2b:9c:
         db:60:a1:e4:e6:b9:b6:b4:3d:d6:a7:d0:1b:ac:0d:e7:fd:b7:
         a1:01:2c:9b:e4:21:d2:85:a4:11:3a:33:a5:7f:16:87:54:20:
         16:37:b0:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org