Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/5dQBvu5CdXuP0MLhYdQjOlqSvYg.roa
File:                     5dQBvu5CdXuP0MLhYdQjOlqSvYg.roa (raw, json)
Hash identifier:          TrNhawZAJom1mc4jfDJOnad1CDU8MQJommGYXeZRcZQ=
Subject key identifier:   E5:D4:01:BE:EE:42:75:7B:8F:D0:C2:E1:61:D4:23:3A:5A:92:BD:88
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       31
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/5dQBvu5CdXuP0MLhYdQjOlqSvYg.roa
Signing time:             Thu 05 Oct 2023 03:26:09 +0000
ROA not before:           Thu 05 Oct 2023 03:26:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        202.208.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:26:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E5D401BEEE42757B8FD0C2E161D4233A5A92BD88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:88:5e:b4:30:85:98:66:d4:21:7d:da:5f:
                    48:05:e6:81:68:65:5d:4c:e1:ed:f5:c9:06:97:8a:
                    93:5d:b3:f7:d7:12:0c:14:c2:4c:22:55:d6:cb:83:
                    8e:31:75:55:ec:bf:06:5a:f7:e3:e9:7a:0b:7f:56:
                    52:56:68:f6:94:3e:5f:47:6d:25:1e:b3:e7:c8:3c:
                    8b:a3:be:12:3c:56:ab:9e:30:d5:b8:b5:fe:c1:fc:
                    44:2b:3c:85:cd:86:9b:4e:89:73:98:09:2e:78:ab:
                    9d:b4:9b:2b:3a:4f:31:3b:cb:3f:6a:d7:1c:04:3f:
                    65:71:51:4e:fe:21:1c:f5:1c:fd:ce:91:9a:e2:cd:
                    e3:f4:57:ca:d2:3c:c6:fb:14:80:82:43:11:23:88:
                    ff:cb:9a:a9:96:8b:1d:ef:01:8d:2f:00:56:a6:4b:
                    83:30:78:f9:bf:5f:f7:e2:29:9f:2a:5c:76:e7:e1:
                    f2:6f:3a:58:be:5a:53:18:9f:10:df:07:5c:f6:53:
                    94:31:bf:42:ec:25:31:f8:65:4b:55:07:b7:5f:86:
                    e9:88:ba:fc:35:30:98:73:8f:71:21:11:47:77:fe:
                    ef:8b:dc:89:5e:d8:5a:f7:3e:29:c1:c5:37:1e:39:
                    1f:b0:94:8b:02:7a:dc:ea:c6:8c:15:a0:23:e8:40:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D4:01:BE:EE:42:75:7B:8F:D0:C2:E1:61:D4:23:3A:5A:92:BD:88
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/5dQBvu5CdXuP0MLhYdQjOlqSvYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:c4:98:1b:bd:91:3a:8c:79:bf:0b:4b:50:c7:6e:42:5e:
         2f:3e:46:8e:c1:3c:ae:c2:cc:b9:25:40:ac:9f:70:db:13:76:
         87:17:d5:0a:00:d8:89:24:bd:08:8a:7b:2c:00:07:c6:ee:7f:
         3e:f7:a2:a8:d0:e4:5c:6c:bb:bf:ce:90:97:b0:0b:18:0b:97:
         8a:ff:8a:e2:e7:8d:53:2f:fe:27:de:ed:50:5f:d2:6a:ec:cc:
         31:a5:9c:1c:cc:43:39:ad:a7:1a:53:8c:13:63:c7:f2:1c:82:
         c4:97:9a:ce:05:6d:34:64:35:ae:45:cf:d8:b3:d5:e6:87:ea:
         a6:6c:8d:5e:e7:4a:06:2d:26:b6:e1:b7:14:c7:39:16:9b:26:
         2c:5e:4e:3a:f1:e9:42:a6:c0:e5:43:51:a5:84:ff:c3:24:df:
         a6:82:ca:4d:05:a5:ef:5b:96:e7:ab:1e:20:ba:4e:b2:31:16:
         f6:3a:4a:e4:f2:b2:b4:d5:c9:ba:c4:07:56:36:90:79:cc:93:
         e5:75:6c:1c:81:13:c4:5e:08:d6:f6:5c:96:88:e0:3d:ea:2d:
         d5:05:e5:ed:65:b8:53:73:48:5c:00:99:21:21:23:f8:30:62:
         bf:d5:47:c1:6f:a6:fe:79:98:a9:22:c0:c7:71:f6:88:75:76:
         09:59:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org