Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/0g1tyrTQAK1Dlb51bsVBvi_y7tc.roa
File:                     0g1tyrTQAK1Dlb51bsVBvi_y7tc.roa (raw, json)
Hash identifier:          ROFRBG9PxnDrohCk4SZXBsbQHKdPcL8bXk+vaUH64X0=
Subject key identifier:   D2:0D:6D:CA:B4:D0:00:AD:43:95:BE:75:6E:C5:41:BE:2F:F2:EE:D7
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       78
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/0g1tyrTQAK1Dlb51bsVBvi_y7tc.roa
Signing time:             Sat 31 Aug 2024 01:34:07 +0000
ROA not before:           Sat 31 Aug 2024 01:34:07 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        203.181.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:07 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D20D6DCAB4D000AD4395BE756EC541BE2FF2EED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:68:6c:ce:b1:69:64:cd:35:71:8f:88:0c:
                    de:75:55:16:77:31:00:50:5f:61:ae:7c:7a:33:0a:
                    10:c0:74:08:c1:8b:ed:f7:8e:1b:27:8f:b2:c4:32:
                    a4:ba:f7:ab:0a:66:26:4f:bf:ad:7c:87:8c:24:9d:
                    74:04:4e:d0:b4:09:95:ee:23:55:a5:83:64:8c:44:
                    24:6a:e5:f0:a6:6f:85:36:d0:3a:98:21:cd:2e:b6:
                    34:be:e2:f6:be:96:64:1e:cd:12:e7:a6:2d:e3:e9:
                    66:40:33:0f:fb:0c:1b:44:a8:4b:d9:ca:4f:aa:c2:
                    47:9c:9b:42:bf:7a:6f:6d:4d:08:2b:7b:f3:26:60:
                    d7:ea:28:b4:84:f8:fd:65:de:31:e4:0a:b9:13:df:
                    b6:55:e0:1a:7a:30:a9:be:3b:a2:0d:3d:a7:33:08:
                    a6:bb:aa:56:13:80:ac:4c:e2:61:f6:16:5b:f8:68:
                    24:4b:6b:8c:27:2a:70:fc:28:b3:32:a5:1f:f0:0b:
                    ca:3e:f4:f2:3b:3e:29:ca:bb:fe:52:72:fc:12:a2:
                    a2:56:86:2b:41:6a:75:e0:fb:05:05:94:5a:4b:4d:
                    2e:c8:65:7c:50:92:2d:3b:f2:76:06:9a:14:ce:5b:
                    d1:cd:d3:54:96:70:a0:d1:b3:b9:0a:17:c2:8f:ac:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:6D:CA:B4:D0:00:AD:43:95:BE:75:6E:C5:41:BE:2F:F2:EE:D7
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/0g1tyrTQAK1Dlb51bsVBvi_y7tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:90:16:9c:0f:f6:2d:7b:ef:f0:b5:92:d7:35:13:bf:27:
         27:46:0a:47:57:c2:ae:9d:8b:3a:af:8e:50:51:ce:fc:19:e4:
         5b:de:68:9e:ac:e1:01:15:d5:49:73:dc:fd:2a:77:e6:5e:1c:
         59:d9:bf:06:1e:78:c5:5b:92:1b:4d:37:19:7b:6f:96:9e:bf:
         d2:8d:7b:59:87:fe:b5:e0:d2:fa:15:1c:d2:83:4a:a5:61:01:
         29:07:29:75:e6:dd:ef:44:5b:1a:71:4f:d4:4f:48:a5:df:44:
         39:54:98:19:5a:b8:10:29:be:70:fc:70:03:e1:7a:b7:5e:ac:
         ad:25:c1:aa:b1:ac:f5:1e:76:10:f0:99:ff:1f:c3:9e:d6:1b:
         d4:b9:3d:ea:36:90:94:eb:5f:43:bb:4d:5c:a9:f3:48:96:34:
         ae:9b:ed:60:15:1e:db:34:c7:71:46:e8:49:39:8a:da:9d:56:
         2f:c9:26:28:94:ba:42:0e:b9:9e:a8:f7:f6:1a:a1:7a:a5:fe:
         51:0b:a3:44:ea:5c:db:8e:5e:8b:b1:8e:4c:d3:04:4c:9f:e1:
         7d:6a:ed:40:02:d5:ad:ae:30:72:8f:25:58:2e:3a:7e:32:6d:
         7c:95:5e:50:9f:6c:8d:ea:37:a4:e9:c8:22:8f:40:09:1b:cd:
         44:bc:fb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:00 2025 by rpki-client