Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/LI16yVmq91UoOUVhyzV2_aV58oc.roa
File:                     LI16yVmq91UoOUVhyzV2_aV58oc.roa (raw, json)
Hash identifier:          kWYcSwKrKn3wUnQzfo3p0KqRnx9ewXBhYaPmGC9MDi8=
Subject key identifier:   2C:8D:7A:C9:59:AA:F7:55:28:39:45:61:CB:35:76:FD:A5:79:F2:87
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       04
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/LI16yVmq91UoOUVhyzV2_aV58oc.roa
Signing time:             Tue 16 Apr 2024 04:05:49 +0000
ROA not before:           Tue 16 Apr 2024 04:05:49 +0000
ROA not after:            Wed 16 Apr 2025 03:56:56 +0000
asID:                     10002
IP address blocks:        120.50.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Apr 16 04:05:49 2024 GMT
            Not After : Apr 16 03:56:56 2025 GMT
        Subject: CN=2C8D7AC959AAF75528394561CB3576FDA579F287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5e:79:d2:fd:fb:b8:03:25:b1:df:6b:e8:6f:
                    8d:0d:17:f3:5d:3b:f1:4e:b4:32:dd:1a:cc:f0:2c:
                    62:36:fc:91:d3:bc:d5:a3:8c:a0:3e:b3:d4:48:1a:
                    60:e6:01:ed:3e:32:7d:4d:c0:f6:1d:62:3a:39:ba:
                    8f:50:dd:3c:0f:e7:69:2d:9d:2c:b3:02:25:32:a0:
                    6e:b7:ce:99:b2:b8:2d:68:7f:9d:5d:18:ca:69:e6:
                    e1:1b:c5:70:a6:75:14:1c:34:91:d4:b6:73:4d:c7:
                    17:18:cd:4c:5d:05:9c:21:66:6b:88:ac:78:39:4d:
                    07:1e:c6:2d:a0:73:5c:2d:89:c6:7d:e4:70:0a:5b:
                    25:e2:c8:4d:23:25:af:d9:84:2a:77:ea:f4:49:b8:
                    d1:05:ad:a0:b2:fd:70:a6:22:18:9e:0a:8c:75:57:
                    b2:2f:18:21:32:ff:ca:ab:ef:d8:70:02:be:85:06:
                    d2:a7:5c:c4:c4:4d:3d:54:e4:55:d1:2e:06:78:32:
                    fa:2b:72:9d:77:60:bf:0e:ce:67:07:01:c3:ef:7e:
                    93:d6:64:1d:be:66:b3:62:57:2f:1f:6a:ae:6f:ff:
                    db:ad:b4:ef:96:a5:04:fb:6e:d2:eb:d8:de:45:14:
                    d4:f0:cd:b6:ed:94:f6:05:4e:99:cf:b5:b0:61:25:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:7A:C9:59:AA:F7:55:28:39:45:61:CB:35:76:FD:A5:79:F2:87
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/LI16yVmq91UoOUVhyzV2_aV58oc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.50.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:42:1e:9f:c0:6e:e2:2d:1f:ad:95:08:cf:f4:28:2e:77:71:
         a0:16:30:45:b8:a1:3a:31:87:2f:89:3e:61:5e:55:57:ee:d6:
         14:8b:81:4c:2e:84:e1:5a:5d:a6:c8:f6:e5:7e:5f:1f:38:b3:
         65:09:78:c0:62:b8:82:97:be:6a:3e:aa:74:16:dd:70:c9:2f:
         33:8c:d5:6d:63:77:44:3b:3c:0f:2b:f7:0e:fe:ff:e3:1e:3d:
         76:9b:f1:20:b5:40:d6:a8:91:df:e1:7d:d9:63:8a:03:47:ae:
         24:21:cd:c9:25:c3:d2:34:ef:9b:9a:0e:88:f4:9d:3c:66:f1:
         e9:7b:4e:de:ef:a8:8a:9b:88:16:20:ce:77:1d:91:99:e9:d3:
         3d:7f:9c:e5:65:68:1e:96:37:ea:06:d1:48:5f:b9:38:e6:71:
         56:40:62:05:11:b6:0d:b3:9f:81:00:a0:02:59:f9:35:b6:16:
         f1:1c:63:0d:6d:66:9e:df:08:80:34:df:ad:48:39:23:32:a4:
         62:78:c4:28:c6:31:3f:49:62:26:c3:26:cc:3b:c0:72:97:90:
         9d:fd:82:3c:b7:eb:89:96:f5:06:0d:25:79:95:97:2a:38:63:
         f3:15:a6:3f:40:1e:79:52:28:d3:44:d2:7c:0d:b1:96:1a:6d:
         97:78:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org