Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/NH_5dAfLbybOI5emDl0hGmEc4VM.roa
File:                     NH_5dAfLbybOI5emDl0hGmEc4VM.roa (raw, json)
Hash identifier:          /J3rVilX2E4EoU1IxxNk/oZ4kGO5Os3n/i9SZvv4SE8=
Subject key identifier:   34:7F:F9:74:07:CB:6F:26:CE:23:97:A6:0E:5D:21:1A:61:1C:E1:53
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       7E
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/NH_5dAfLbybOI5emDl0hGmEc4VM.roa
Signing time:             Mon 01 Jan 2024 01:28:21 +0000
ROA not before:           Mon 01 Jan 2024 01:28:21 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        61.198.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:21 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=347FF97407CB6F26CE2397A60E5D211A611CE153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:04:e2:2b:e1:33:60:5e:5f:15:ee:de:e6:
                    15:56:12:67:2f:8c:93:d2:ce:36:90:86:6b:f6:c4:
                    8e:31:2f:f8:56:ef:d2:49:21:4b:00:ba:4c:bf:e1:
                    b5:24:2d:9c:f6:07:d9:44:69:63:5d:c8:77:e4:a8:
                    b3:ec:05:33:87:1c:41:fb:fe:1f:36:17:eb:1d:12:
                    69:72:06:8f:3b:13:36:51:ae:37:88:1a:09:74:e5:
                    cd:27:94:a8:85:b8:60:dc:db:41:06:9a:25:f6:ff:
                    4f:22:57:ee:62:04:d2:1b:1e:e3:58:19:ef:dc:48:
                    97:4c:b3:15:8c:95:a7:24:b8:55:38:6e:d8:f9:3b:
                    3d:56:fa:1f:d0:ec:b7:da:9d:20:fa:ab:03:c7:c0:
                    08:fd:d6:c6:7e:08:ef:0e:40:d7:88:1c:cd:15:cd:
                    0a:bf:b5:a2:f6:33:6e:04:7b:a1:1a:6b:84:45:20:
                    89:94:5c:b6:c7:91:95:37:7c:87:67:c3:dc:13:2f:
                    7f:49:b4:ea:1f:cf:cc:0f:9b:a7:2f:42:86:09:99:
                    94:ca:46:ac:ae:dc:96:33:d9:cb:ab:09:f9:36:f6:
                    69:27:4f:e9:bf:ed:85:ee:6d:13:5b:d5:11:98:f2:
                    86:c2:2c:39:4a:63:2e:dc:04:9c:0e:5d:7d:3a:39:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7F:F9:74:07:CB:6F:26:CE:23:97:A6:0E:5D:21:1A:61:1C:E1:53
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/NH_5dAfLbybOI5emDl0hGmEc4VM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:6a:c9:c1:e3:cb:4f:8e:c2:b6:1c:74:fb:4b:2b:46:c9:
         84:a1:59:d2:9a:f5:2a:85:55:6e:f8:42:71:fb:25:74:ba:cc:
         8c:0c:d2:b2:d0:0d:8a:f7:60:58:be:83:49:67:04:f8:dd:fc:
         a7:78:81:a0:86:fd:76:ce:e3:06:21:87:bf:a6:92:a0:10:38:
         85:b4:c5:0f:e6:c8:29:51:7e:6b:d0:34:14:50:19:77:8e:57:
         8f:8d:9d:cd:79:dd:79:d8:cb:63:4e:82:a8:8f:30:87:68:28:
         f6:84:d9:da:03:3e:df:ec:6b:3a:18:33:11:8c:b4:60:92:0f:
         12:66:f4:9d:d8:bd:d4:15:40:52:3e:87:1c:e1:b3:93:01:2b:
         69:02:f0:67:15:0c:a5:f2:76:d3:a6:87:47:8f:39:1e:09:55:
         4d:89:db:b2:1e:37:a5:b6:02:58:6c:36:2b:88:77:f2:05:1f:
         c5:af:f7:d2:99:96:9d:12:4d:2f:ba:82:09:95:a0:b2:5d:97:
         41:bf:6d:14:fc:92:bf:60:0f:67:8d:ac:40:04:bc:ce:81:16:
         fe:e7:a7:e4:10:59:c2:42:70:60:9a:a8:a2:7a:11:31:80:4d:
         6d:dc:06:b8:af:12:1a:cb:d5:bf:21:9f:d3:80:32:80:f7:3e:
         59:e9:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org