Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/GTpB7zaChSsjK9hBDw930LgU9Nk.roa
File:                     GTpB7zaChSsjK9hBDw930LgU9Nk.roa (raw, json)
Hash identifier:          naZVzFC84lKQCjpWvqZlLfkulcETuXwF2/DGaqIA33E=
Subject key identifier:   19:3A:41:EF:36:82:85:2B:23:2B:D8:41:0F:0F:77:D0:B8:14:F4:D9
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       29
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/GTpB7zaChSsjK9hBDw930LgU9Nk.roa
Signing time:             Thu 05 Oct 2023 03:26:05 +0000
ROA not before:           Thu 05 Oct 2023 03:26:05 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        122.145.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:26:05 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=193A41EF3682852B232BD8410F0F77D0B814F4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:13:1e:38:e6:01:ae:92:0f:f8:ef:dc:79:
                    89:a1:56:99:4e:f5:cb:3c:e9:88:de:aa:22:c3:ae:
                    8c:d8:c3:b9:90:6f:5b:64:71:73:72:ab:d0:12:50:
                    4f:60:92:2b:82:e9:0b:3c:4b:6c:2f:3a:5b:f7:ea:
                    82:ba:58:64:cc:db:88:d0:54:50:49:86:a9:bc:56:
                    8b:67:17:e8:71:1b:dc:48:db:75:bd:b8:13:d5:23:
                    7d:2b:6b:64:6d:b1:9d:af:ff:17:f5:e3:00:d5:ba:
                    56:e9:9a:2c:a3:f8:6f:0d:dc:a6:fc:01:11:bc:7d:
                    d6:34:3c:46:e9:42:ea:20:69:f2:c9:eb:74:c9:87:
                    0e:fc:a3:b0:85:f0:4c:26:85:61:2e:80:31:a8:f4:
                    a9:16:89:36:82:5b:96:7a:10:41:dc:70:15:0c:e6:
                    ee:91:88:35:d2:a5:a7:ec:dc:08:e1:90:45:b9:98:
                    5b:1b:2f:19:28:50:b1:aa:bd:71:7a:64:10:69:20:
                    f0:e2:0e:c7:b8:0c:a0:ac:3a:86:f9:85:fc:f2:b9:
                    a0:36:c9:c4:e4:56:c1:57:21:6d:2f:72:67:5e:72:
                    a8:75:64:ee:89:a3:75:7c:df:10:b8:37:b9:f7:85:
                    1f:24:79:95:61:17:7f:72:81:a4:06:59:5f:ec:e9:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3A:41:EF:36:82:85:2B:23:2B:D8:41:0F:0F:77:D0:B8:14:F4:D9
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/GTpB7zaChSsjK9hBDw930LgU9Nk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:91:84:e6:d8:17:f6:8e:79:a5:fc:c8:87:0b:aa:65:13:b3:
         23:a4:ba:c9:fd:51:0e:11:f0:15:ab:fa:1d:70:c0:d6:d9:d7:
         68:4f:de:43:52:dd:db:f5:12:bb:ec:e7:03:b3:0a:13:24:54:
         72:53:df:3c:65:94:b1:da:d5:70:b7:d6:a0:5f:ce:b5:d5:ff:
         1d:ef:90:25:ce:a1:01:6b:9b:a7:87:70:97:af:f1:ec:c4:da:
         f9:f4:f3:0a:7c:a7:4e:74:52:61:84:0a:c8:06:87:d8:86:f3:
         10:bd:33:82:54:c6:8f:d3:cc:20:6c:66:e1:7d:9e:6f:e0:9a:
         79:05:9a:52:50:c9:c0:4f:13:a0:22:ce:ba:fd:48:b2:12:3b:
         f5:c4:be:ff:61:33:e1:64:0b:43:11:3c:fd:0a:a5:77:7d:5e:
         e1:04:be:8c:ec:1e:fc:6f:97:55:36:7e:48:da:77:18:e6:01:
         40:64:fc:76:ca:e6:09:d0:c8:02:bd:3c:b0:83:6d:b2:e1:8c:
         d6:60:1e:a9:dd:e5:da:34:36:85:b5:48:e4:ae:1d:93:6c:69:
         65:87:19:e2:45:94:4f:f2:ab:bd:2d:96:d2:72:f2:2a:e9:c9:
         8f:bb:d0:c1:d5:a3:16:a7:6b:fc:50:59:7e:11:61:2d:02:f6:
         99:f6:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:45 2024 by rpki-client on console-fra.rpki-client.org