Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/-HrOL5KQe9ZPOfxs4K5UceP-NK0.roa
File:                     -HrOL5KQe9ZPOfxs4K5UceP-NK0.roa (raw, json)
Hash identifier:          N2v6kgvI8/olfWM86sC3fP7jpZJBdEvmTNW2Z5+j8bo=
Subject key identifier:   F8:7A:CE:2F:92:90:7B:D6:4F:39:FC:6C:E0:AE:54:71:E3:FE:34:AD
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       43
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/-HrOL5KQe9ZPOfxs4K5UceP-NK0.roa
Signing time:             Wed 27 Dec 2023 02:10:30 +0000
ROA not before:           Wed 27 Dec 2023 02:10:30 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        221.113.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Dec 27 02:10:30 2023 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=F87ACE2F92907BD64F39FC6CE0AE5471E3FE34AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:08:00:a8:d6:64:b5:01:14:56:5b:41:8c:
                    16:e2:38:08:bd:5a:04:0b:9b:44:4a:3a:42:36:01:
                    f3:8d:a9:fe:b5:0b:34:a7:49:b3:89:21:37:2c:c2:
                    bc:dc:6b:3c:49:02:82:4d:c7:2f:53:10:56:f0:71:
                    fb:15:f7:9b:7a:16:24:48:14:fc:e1:18:d9:9e:15:
                    bc:c7:0f:7c:12:fa:63:e3:40:9e:c0:40:ed:75:df:
                    ef:e3:4c:05:57:57:9a:75:99:43:86:85:de:d2:b2:
                    b6:ef:1a:c0:25:46:f4:6b:ef:01:0c:18:89:58:e2:
                    41:bf:20:9e:02:3b:cf:0f:3d:86:ef:a1:5e:cc:11:
                    c0:7a:ff:47:77:90:c0:4c:b6:f2:a0:c3:c3:39:62:
                    bf:ab:6c:14:58:fe:43:fd:6b:93:db:fc:03:f3:01:
                    f5:c5:c4:d6:ff:2c:f8:51:e1:41:99:52:98:0e:3a:
                    96:05:a0:38:1e:53:1b:fc:3a:80:ee:bf:62:26:23:
                    e0:6d:0f:e5:6a:15:c1:26:4d:72:6d:4f:9b:0b:16:
                    4c:07:00:9d:a1:c0:8e:a9:09:5c:e3:d2:15:2d:61:
                    18:40:40:73:3f:1e:51:1c:a9:8e:ad:96:ee:1c:f3:
                    e4:48:1f:0f:b8:a8:61:72:45:98:39:34:4a:14:64:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7A:CE:2F:92:90:7B:D6:4F:39:FC:6C:E0:AE:54:71:E3:FE:34:AD
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/-HrOL5KQe9ZPOfxs4K5UceP-NK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:cf:a5:98:de:2c:b0:84:38:d4:2f:22:1b:7c:b7:bd:1f:
         95:80:4f:d5:b6:51:b0:65:dd:06:e2:50:3d:89:60:c9:f7:84:
         e1:fc:17:c0:e5:40:8d:53:62:6a:7f:25:c5:48:6b:d3:3e:d4:
         af:bc:3c:f0:7f:f0:91:47:8c:cc:29:25:15:64:84:d3:00:94:
         4c:6e:ad:7a:15:d1:73:3a:70:bc:04:f6:6a:07:9d:bc:8b:0b:
         71:1d:95:a3:9e:3f:fd:c5:59:4f:ea:18:ff:4a:d5:9e:f0:5e:
         fc:4d:c7:94:26:57:cc:56:c2:a8:87:fc:74:5b:f9:cd:9f:8c:
         77:7d:58:cd:9f:6d:1d:fd:b5:c3:ff:02:cd:bd:51:de:dc:ee:
         31:24:83:9e:28:f7:74:4e:41:57:2b:9c:3c:8b:e8:f3:60:74:
         08:17:f3:aa:d6:17:5f:1b:68:29:d0:98:53:fa:81:45:b8:79:
         50:a4:bf:f2:dd:2c:ee:51:47:a0:d6:61:06:d8:9e:52:8b:7d:
         d5:15:7e:aa:dc:66:43:36:f9:7e:fc:74:00:eb:42:b1:b8:5e:
         22:4e:f8:55:66:d8:41:5a:16:33:6d:bb:3c:da:cb:18:f2:a0:
         85:3d:05:13:66:e9:e7:70:47:d2:9e:4c:16:0e:bc:e2:ad:7c:
         d5:88:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org