Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/Ik24QIAq5CwXvp6vqRu3Zph72OI.roa
File:                     Ik24QIAq5CwXvp6vqRu3Zph72OI.roa (raw, json)
Hash identifier:          iZ0P5VT8Pra2YdlUZTzKsVAl3k2JrYgENQDVtRuYxXA=
Subject key identifier:   22:4D:B8:40:80:2A:E4:2C:17:BE:9E:AF:A9:1B:B7:66:98:7B:D8:E2
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       61
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Ik24QIAq5CwXvp6vqRu3Zph72OI.roa
Signing time:             Sat 31 Aug 2024 01:33:57 +0000
ROA not before:           Sat 31 Aug 2024 01:33:57 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        61.125.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:33:57 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=224DB840802AE42C17BE9EAFA91BB766987BD8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:63:53:71:a0:40:a0:74:bc:1c:04:85:06:61:
                    79:89:0a:3a:3a:b4:02:63:7d:c0:88:67:8a:fa:b8:
                    6b:af:b3:24:78:fc:a0:3d:b2:82:09:18:9c:57:18:
                    8d:3b:12:88:76:11:12:3e:1c:48:fc:d9:d5:93:95:
                    f2:ff:a6:be:5e:d7:40:42:2c:04:99:f2:8c:70:cd:
                    46:10:27:47:eb:4c:6b:cb:2d:38:7e:82:c6:fa:90:
                    21:02:07:d4:15:87:95:46:e5:4c:45:c4:3a:35:75:
                    be:db:2a:66:a5:98:39:39:6b:71:17:fb:42:7d:f4:
                    f5:bf:a2:4d:4c:59:00:28:c8:b6:06:e2:4f:a4:86:
                    5f:45:77:42:13:62:eb:62:cb:38:8f:10:ca:9e:ac:
                    97:fd:d5:3f:36:74:ea:03:09:c3:64:73:4b:73:89:
                    64:0f:ca:3a:9a:e8:ed:93:c8:a5:c3:60:a5:af:d8:
                    0a:b5:3d:16:f7:49:b5:5a:1a:ff:66:a5:80:a0:9f:
                    7a:64:d8:fd:cb:76:90:be:92:6c:23:5a:e7:eb:1f:
                    a2:ba:8b:24:93:19:4f:9e:38:03:ad:0b:d8:9e:52:
                    27:5d:2d:ef:03:6f:8b:7d:89:4d:f6:66:6c:37:06:
                    68:d0:16:2b:15:bb:e1:f6:f1:c3:6c:94:53:c3:26:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:B8:40:80:2A:E4:2C:17:BE:9E:AF:A9:1B:B7:66:98:7B:D8:E2
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Ik24QIAq5CwXvp6vqRu3Zph72OI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c7:f8:36:04:9a:7d:12:69:f3:30:99:81:6e:0a:07:87:98:df:
         0e:42:1b:d7:97:fb:55:78:40:eb:5b:9d:56:05:8e:e8:69:42:
         e8:f2:fa:3b:27:63:7e:bc:c1:d5:ba:d6:51:cd:66:d8:7d:70:
         eb:23:ff:87:86:71:03:0c:51:6e:5c:a9:b1:52:f3:b4:63:94:
         e3:c3:ef:3d:90:96:d8:4a:34:db:8e:99:0a:5c:f1:a7:5c:2f:
         d7:f6:5f:46:dc:4b:7d:3e:12:9d:cf:1d:44:42:39:ea:5a:8c:
         02:16:b1:2c:33:70:80:72:0b:9a:c9:de:fe:d9:83:1c:ff:ca:
         a1:fd:5f:16:4e:9a:70:ed:24:bc:f3:58:02:b5:b8:41:0a:d5:
         d4:fd:18:f5:84:0b:bb:aa:86:cf:7a:eb:c6:dc:6a:f2:23:31:
         e8:27:7b:f6:66:25:62:72:7e:cd:6f:14:3c:94:e3:0a:20:52:
         7d:19:31:73:73:9b:76:f4:93:a2:ce:c2:22:22:57:14:cf:40:
         96:48:1c:4b:e9:ff:a5:21:92:9e:f3:d1:bc:4b:e9:e2:e1:3f:
         f6:86:1f:0e:85:cc:c1:f2:22:7a:06:9d:c5:f0:69:36:2c:6a:
         c8:79:bc:27:59:59:94:6d:35:91:89:49:dc:45:39:d2:9a:ec:
         20:d0:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:16 2024 by rpki-client on console-fra.rpki-client.org