Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/H_Gk0phyUDQTkOhHrfBX9mArFeU.roa
File:                     H_Gk0phyUDQTkOhHrfBX9mArFeU.roa (raw, json)
Hash identifier:          OIwzKlXwBAvGQOS4eFctrzKnvvJN0zB2T1z3qZuidF8=
Subject key identifier:   1F:F1:A4:D2:98:72:50:34:13:90:E8:47:AD:F0:57:F6:60:2B:15:E5
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       77
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/H_Gk0phyUDQTkOhHrfBX9mArFeU.roa
Signing time:             Sat 31 Aug 2024 01:34:07 +0000
ROA not before:           Sat 31 Aug 2024 01:34:07 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        202.208.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:07 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=1FF1A4D2987250341390E847ADF057F6602B15E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:5f:2b:e0:a6:03:54:3c:ad:20:d8:b8:a8:
                    1b:c7:2d:d3:55:63:85:34:cb:27:dc:c9:c9:6a:5c:
                    0b:e1:ad:9c:76:d9:5c:86:9c:47:4d:97:c0:5f:4c:
                    85:66:61:8c:5b:df:f7:d4:15:07:45:82:03:64:31:
                    b5:c3:0c:82:54:5d:ec:91:55:4e:8a:ef:d5:d9:bf:
                    e8:fb:3b:f7:80:b3:aa:08:12:b9:f6:3e:a5:eb:ae:
                    53:c0:60:66:92:49:76:96:ad:d8:4a:80:92:a8:4e:
                    6e:23:d3:61:06:84:f6:ea:58:8e:7c:24:fb:3f:42:
                    b0:bd:ae:6c:b9:79:bd:2b:64:f6:e5:17:80:26:70:
                    39:f3:f6:95:27:2f:b3:4b:f8:96:04:ee:29:ef:3b:
                    42:5a:7a:00:3f:89:39:d0:35:57:87:d1:32:bd:b6:
                    72:1a:88:73:ec:b8:60:53:f3:6b:24:42:ff:76:51:
                    da:58:2d:5e:7b:09:37:b1:43:3b:1c:a9:e0:13:e9:
                    76:ae:d0:8d:59:88:09:6b:c5:45:91:f4:f9:f4:02:
                    b6:13:1a:dc:3c:be:0e:b7:de:5c:d9:af:94:65:03:
                    95:aa:66:af:6b:74:e8:71:bb:06:54:c9:b9:de:47:
                    fa:66:f6:9b:cf:36:b2:1a:d7:ae:9a:3a:ac:c0:07:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F1:A4:D2:98:72:50:34:13:90:E8:47:AD:F0:57:F6:60:2B:15:E5
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/H_Gk0phyUDQTkOhHrfBX9mArFeU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:c0:7c:1e:75:53:92:d0:e9:65:eb:08:40:e5:b7:8a:00:2d:
         2c:6e:fe:b6:9a:a0:b5:f5:7f:4c:02:d7:49:c5:5a:60:14:0d:
         64:79:da:51:30:12:ca:c0:8b:b1:2e:b8:65:db:5d:7a:b4:63:
         d0:09:41:c2:3d:79:9f:25:77:90:5d:74:da:81:bc:f1:e2:38:
         7c:01:0f:81:e3:44:d2:02:f4:44:a5:fd:5b:21:ae:03:c9:d4:
         46:39:63:df:ca:aa:03:77:f7:98:6a:b7:98:4d:cc:2b:4b:8e:
         ee:2e:c8:c1:b9:d7:7a:8c:57:90:37:f8:1c:b9:14:a7:c9:bb:
         9c:2f:0c:73:55:5b:fa:49:87:38:b2:87:db:bf:b2:4c:4d:23:
         6f:38:0a:75:c9:7d:4e:02:5e:d1:ec:26:e9:f4:26:3f:5d:34:
         38:c1:b7:6d:8f:3b:40:d8:b0:43:a5:a4:6e:90:06:e4:42:9f:
         84:ff:92:42:4b:91:5c:a1:b0:e2:55:b3:d0:4f:5f:17:72:ff:
         08:80:f4:92:c9:55:dc:20:0e:60:b5:9d:3a:aa:fc:be:74:8b:
         f5:f1:7f:29:ce:b2:18:41:2f:ec:24:4e:4a:68:31:6e:17:b5:
         1d:cc:e5:c0:17:05:e8:d7:dc:6e:5b:c0:c1:c0:19:d3:81:50:
         26:d8:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:17 2025 by rpki-client