Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/IyTy6ONzDG69sEwrjdss-oaHurM.roa
File:                     IyTy6ONzDG69sEwrjdss-oaHurM.roa (raw, json)
Hash identifier:          tGs7pBxz5UvG4SSL50NyUgYUYvD28MSz+Bq2o00L+8I=
Subject key identifier:   23:24:F2:E8:E3:73:0C:6E:BD:B0:4C:2B:8D:DB:2C:FA:86:87:BA:B3
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       7D
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/IyTy6ONzDG69sEwrjdss-oaHurM.roa
Signing time:             Sat 31 Aug 2024 01:34:09 +0000
ROA not before:           Sat 31 Aug 2024 01:34:09 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        220.146.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:09 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=2324F2E8E3730C6EBDB04C2B8DDB2CFA8687BAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:53:37:c0:05:ba:49:fa:49:ab:c4:13:f5:
                    47:9d:70:3a:11:b2:8e:2d:a1:c7:67:fe:45:f3:bf:
                    3e:02:9b:3d:73:c8:07:4e:c9:28:f1:25:e2:a6:68:
                    bd:25:ce:d8:e7:bc:17:73:bf:dc:0d:09:94:ba:f2:
                    8a:82:eb:cc:a3:83:f4:2e:b8:06:cf:dc:9d:35:7d:
                    c3:fc:a1:fe:aa:b3:83:a4:6c:5a:84:05:2b:cf:df:
                    ed:73:32:74:19:db:ab:5d:a3:d3:d7:15:d6:ac:91:
                    4d:49:7e:ac:84:bc:5b:e4:28:34:7f:79:fb:f8:41:
                    9e:6c:ae:52:86:7f:2a:9b:3e:50:66:d4:b4:33:83:
                    3c:6b:c2:7a:a6:0c:75:69:7d:7a:ad:5a:97:8e:0f:
                    61:34:88:8e:3f:b6:6a:4f:b1:fe:d3:21:09:bd:86:
                    dd:a3:a2:89:a7:db:16:a7:e1:f8:c2:7d:b7:a0:4f:
                    97:1d:5e:9c:26:c4:b3:e7:e4:49:2e:47:4a:a3:c4:
                    a0:a3:01:40:4e:83:96:cc:6d:1a:a5:c8:81:64:e5:
                    b5:b8:5f:1d:ea:cd:bf:fa:9f:41:1e:71:86:bc:1b:
                    41:bc:d8:64:15:7b:0a:da:a4:86:f1:30:7f:b6:94:
                    d0:0a:82:ee:84:ee:5e:f3:65:b6:1f:75:c3:eb:e0:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:24:F2:E8:E3:73:0C:6E:BD:B0:4C:2B:8D:DB:2C:FA:86:87:BA:B3
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/IyTy6ONzDG69sEwrjdss-oaHurM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:f6:94:02:cd:cf:b6:be:57:dc:28:8b:0b:5f:d6:bc:bd:a4:
         1a:d5:30:31:0e:71:dd:49:14:16:99:ad:63:79:24:e4:4a:13:
         21:a4:20:28:ff:c1:38:3d:94:fe:87:c9:a4:57:3f:f5:54:bc:
         73:5b:43:90:8f:76:7d:d2:dd:dc:5e:9a:39:2d:7f:b7:4a:fe:
         8e:27:77:74:82:97:20:aa:d3:a8:03:e4:b2:79:2f:82:ae:46:
         9f:6c:6c:5f:c3:c7:b8:32:17:16:2c:67:8a:34:5f:cd:5a:00:
         e5:e6:0b:35:a3:de:eb:f7:a0:25:9b:6f:ad:1c:24:90:df:fb:
         d4:65:77:c3:38:7d:34:39:48:d9:1d:55:0f:08:c8:25:63:d1:
         24:37:ac:70:4e:7d:ae:ad:a5:1a:16:8c:8d:22:e2:e5:5d:50:
         3c:60:9b:c6:64:0a:ea:de:81:da:9f:41:4e:81:6b:6d:a1:2e:
         4d:ac:4d:72:46:d2:7d:73:92:e1:db:c6:8c:56:3e:26:43:67:
         af:c0:e5:8f:2f:92:8e:b6:11:c4:7c:f3:45:91:86:4f:9c:bd:
         06:7b:9f:62:29:39:08:20:5c:22:c5:e3:1f:66:1b:65:10:c9:
         f3:8c:2a:c2:2a:63:07:59:5a:7c:27:46:f2:a1:5f:c2:42:08:
         9a:07:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org