Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/2vsPEH_GxAhfwmGEcuIsTTYIAkc.roa
File:                     2vsPEH_GxAhfwmGEcuIsTTYIAkc.roa (raw, json)
Hash identifier:          jbFN++leePcRLeZaOFS8ZVASw+nbS3ctF8f8OXF9Kuc=
Subject key identifier:   DA:FB:0F:10:7F:C6:C4:08:5F:C2:61:84:72:E2:2C:4D:36:08:02:47
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       2E
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/2vsPEH_GxAhfwmGEcuIsTTYIAkc.roa
Signing time:             Thu 05 Oct 2023 03:26:07 +0000
ROA not before:           Thu 05 Oct 2023 03:26:07 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        150.91.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:26:07 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=DAFB0F107FC6C4085FC2618472E22C4D36080247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:1d:84:5b:b8:d7:c6:88:5f:8c:3d:87:29:
                    3b:84:44:0b:a1:1e:59:3b:6c:3e:3a:25:fa:29:85:
                    38:e0:6e:27:85:f8:28:15:44:56:f4:e1:f1:e1:00:
                    55:53:fe:03:26:60:e1:e7:f1:59:3a:c8:4e:34:27:
                    15:de:1f:96:12:01:02:42:97:1d:37:97:60:7c:9d:
                    6b:33:52:2f:0a:ca:ab:ab:5c:de:4f:b4:74:29:d2:
                    4f:95:5e:c7:ff:c4:49:ed:b0:a9:d8:aa:3e:9b:33:
                    ef:47:23:db:18:fb:8b:03:ed:86:60:cb:0b:88:e8:
                    bb:e2:6c:11:e6:32:2b:07:f6:e2:10:f6:61:bc:93:
                    17:07:be:00:f7:32:47:04:50:a5:b8:bb:7a:45:02:
                    05:f5:84:61:d1:15:12:0b:51:01:d5:b2:3f:48:43:
                    82:f4:8e:ae:b1:5c:c4:4f:cb:50:39:e2:25:38:14:
                    06:7e:c5:fb:1f:0d:cb:0b:27:60:e4:70:c9:d5:a3:
                    d7:df:78:d9:1e:c3:bc:e5:e9:6e:22:b5:d1:49:92:
                    d2:e2:b1:e6:98:94:92:90:8d:53:f2:19:64:25:73:
                    f7:a3:14:a2:41:ce:79:0b:38:68:b0:1a:e3:a6:27:
                    7b:d9:9b:57:aa:d8:3f:dc:1c:0b:cf:91:0c:4d:49:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:0F:10:7F:C6:C4:08:5F:C2:61:84:72:E2:2C:4D:36:08:02:47
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/2vsPEH_GxAhfwmGEcuIsTTYIAkc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.91.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         55:65:bd:22:69:7c:6b:2a:44:11:b1:f2:aa:50:57:03:81:e8:
         ad:4d:80:b5:5c:2e:ed:ab:dc:8d:3e:4a:fa:2d:ee:d0:47:e1:
         4c:09:70:6f:56:ef:88:07:1d:1e:24:d4:bf:3d:dc:5c:57:60:
         aa:b7:47:f4:9e:37:a2:ec:75:6a:91:0a:30:0b:65:5b:69:dc:
         34:6b:db:ba:97:a5:53:61:52:4d:7f:c1:87:4c:08:fe:94:fc:
         80:f0:95:a0:13:9e:ed:61:82:5d:45:cb:34:3c:6b:bd:75:e9:
         bb:39:ec:16:b1:90:3d:05:8c:9d:d4:c4:7f:58:51:4a:50:91:
         b3:fc:d0:10:07:03:dd:cc:e7:9e:71:b7:4e:ae:04:a9:58:85:
         93:78:19:73:2a:7f:06:d6:b3:8c:36:80:4c:fd:26:11:67:2f:
         ff:53:49:51:4a:62:df:b0:16:24:78:62:9b:6d:b8:b8:2a:82:
         35:01:fc:19:13:95:44:00:4f:61:ce:55:ad:6f:fb:85:1d:f6:
         ce:44:65:ff:4c:01:4e:c9:cc:93:d5:a3:a8:e3:0e:62:56:fb:
         cc:34:3b:3c:c9:10:62:1a:34:94:ee:99:19:c4:ab:36:3f:32:
         19:54:dd:44:dc:3e:16:5a:56:38:9d:3b:fb:b4:5d:6c:fa:b0:
         f7:59:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org