Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/OOQ7dkdYvd7EdiAaGpNyacnUfiI.roa
File:                     OOQ7dkdYvd7EdiAaGpNyacnUfiI.roa (raw, json)
Hash identifier:          j0o6/fY2TssnDxnCBJjy37KoSn6Kn70oOLVijxYLt00=
Subject key identifier:   38:E4:3B:76:47:58:BD:DE:C4:76:20:1A:1A:93:72:69:C9:D4:7E:22
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       2F
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/OOQ7dkdYvd7EdiAaGpNyacnUfiI.roa
Signing time:             Mon 01 Jan 2024 01:28:15 +0000
ROA not before:           Mon 01 Jan 2024 01:28:15 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     55396
IP address blocks:        192.50.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Jan  1 01:28:15 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=38E43B764758BDDEC476201A1A937269C9D47E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:89:a5:3d:19:3d:36:4b:f6:5e:08:f2:bc:
                    49:30:6e:b2:b8:0e:b2:96:c8:16:2e:11:7d:53:37:
                    13:f9:c8:45:3a:66:9e:da:60:f9:78:f2:0a:03:a3:
                    52:f4:7b:ba:c3:c9:26:8d:39:a5:b2:b6:c9:ac:2e:
                    a1:73:d5:d4:b7:96:73:c9:04:79:20:46:fd:5c:f6:
                    23:4e:63:6c:71:0b:24:3d:6d:e2:d9:e7:97:11:d2:
                    78:fc:5f:f4:f8:c7:95:d1:c3:10:80:41:d5:7c:b3:
                    18:98:d0:33:df:bb:a0:6e:57:8e:6e:a5:66:fe:1f:
                    bf:61:3b:4b:30:eb:fb:3d:66:e2:5b:81:c2:b2:90:
                    f4:e9:e5:4d:5c:76:9b:55:7c:9d:f2:f0:27:ec:cb:
                    d4:f3:e5:29:08:28:cf:fc:6c:23:b7:99:ad:0f:a4:
                    56:8e:01:7c:f4:69:22:00:32:89:3d:50:3b:77:c1:
                    0b:23:9b:b3:52:4b:70:64:04:b5:c2:2a:f7:9b:38:
                    0e:04:f3:ed:a3:75:37:b5:e5:f6:2d:e6:1a:9d:44:
                    3e:85:2e:e0:87:fe:33:87:09:59:63:af:d3:ff:d3:
                    c1:98:27:80:dc:d1:08:9b:4b:4d:ef:aa:be:4d:de:
                    3f:ee:86:37:af:7b:97:94:a0:d4:3b:9f:d9:2e:e7:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E4:3B:76:47:58:BD:DE:C4:76:20:1A:1A:93:72:69:C9:D4:7E:22
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/OOQ7dkdYvd7EdiAaGpNyacnUfiI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:c8:46:ed:be:9a:82:d8:ea:a7:cc:80:67:76:55:b3:05:
         f7:96:2e:d0:32:e3:35:21:85:0f:48:6a:07:b2:dd:32:cb:2b:
         95:67:fc:3a:f3:99:05:9a:38:6a:7c:99:b3:3c:e2:11:b9:44:
         d2:b6:56:95:2d:b0:61:16:43:88:62:80:7e:a6:09:9e:05:3e:
         c2:bb:79:77:57:9d:08:f1:1c:cf:a7:76:f5:57:a1:48:a9:dc:
         03:d6:01:b9:e4:84:69:a1:9e:2c:da:2b:04:3a:c5:74:f6:2a:
         d7:9d:ca:d4:af:1a:eb:9e:c7:aa:d0:04:03:e9:3a:7e:ae:0f:
         5f:2d:ff:c2:d7:46:0b:ec:f4:e1:61:45:ce:f0:0b:55:27:93:
         27:b2:e0:ed:fb:11:9e:3f:a2:59:08:b4:98:13:49:e5:07:41:
         a8:8c:8f:a9:49:d1:88:7a:8b:39:18:36:8e:ef:be:f2:65:cf:
         d1:ff:6c:07:fa:d0:ff:4c:25:30:90:05:55:fd:61:72:57:b5:
         11:d9:b6:e5:d5:27:b4:26:ac:19:9f:6f:69:b6:11:1c:b8:ac:
         72:ff:79:b5:e0:bc:e5:27:b9:4c:3d:0f:06:58:34:52:e8:94:
         4c:a6:f9:6a:fc:5f:44:28:fb:8a:29:c5:c8:a2:bf:4b:a0:5d:
         2f:2b:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org