Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/LbR7hSeoYwPIQ6lVRTjfH352FZU.roa
File:                     LbR7hSeoYwPIQ6lVRTjfH352FZU.roa (raw, json)
Hash identifier:          S4J72kPzc4k79iXBToooXMTFygu7gnrzm3vpa5L/Xf4=
Subject key identifier:   2D:B4:7B:85:27:A8:63:03:C8:43:A9:55:45:38:DF:1F:7E:76:15:95
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       22
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/LbR7hSeoYwPIQ6lVRTjfH352FZU.roa
Signing time:             Thu 05 Oct 2023 03:21:31 +0000
ROA not before:           Thu 05 Oct 2023 03:21:31 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        110.5.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:21:31 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2DB47B8527A86303C843A9554538DF1F7E761595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:d8:20:8e:83:e5:7c:bd:53:6b:c3:44:3b:
                    2c:ca:8e:07:eb:2a:d9:54:bd:4b:8d:9d:12:73:60:
                    cc:6d:8c:50:b9:5d:70:ae:49:2d:da:d7:ac:e8:9e:
                    4d:46:2c:a9:89:2f:c0:6a:a4:38:73:e8:43:20:82:
                    1d:28:90:eb:cb:bb:98:41:f7:f0:02:77:91:91:d0:
                    09:6e:fc:a4:76:39:1f:b5:3a:c3:0b:37:fd:bd:08:
                    ae:c8:8e:bc:f6:1b:0f:3a:6b:d5:8f:04:27:7b:eb:
                    78:f5:7c:1c:84:36:c0:de:73:9e:73:41:50:69:ff:
                    5d:ad:99:b3:46:97:8b:10:5a:0f:d3:9b:f1:2c:f9:
                    cc:3d:2e:d2:cf:6d:98:e4:73:a6:4b:6d:80:54:dc:
                    21:85:a3:b1:f2:1c:57:aa:c7:5a:97:3b:2f:53:9f:
                    6b:53:b6:65:39:a6:56:47:a7:85:9d:6d:a6:f3:f5:
                    30:e7:6a:d2:bf:f5:ba:40:bd:22:7f:6b:ab:b8:27:
                    b2:a1:e7:f2:e6:e5:8b:45:0a:df:ed:f5:bf:ee:1b:
                    ae:63:54:a3:35:66:41:4f:82:85:af:2f:2f:5e:a6:
                    7f:19:8a:6a:25:40:44:05:fc:f7:53:38:c4:73:3c:
                    28:d7:9d:d4:d9:6f:2d:43:fb:ce:85:5f:0c:dc:91:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B4:7B:85:27:A8:63:03:C8:43:A9:55:45:38:DF:1F:7E:76:15:95
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/LbR7hSeoYwPIQ6lVRTjfH352FZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.5.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ce:d7:9b:4d:ba:28:f7:8f:35:62:bd:e8:88:1e:63:e3:31:06:
         4e:26:03:52:dd:70:0a:4a:9a:9a:61:9f:bf:ed:97:69:d2:68:
         26:21:70:27:df:2a:14:b6:bb:c6:19:52:5c:cf:3e:2b:0e:ba:
         57:6b:05:67:b3:4a:3b:ea:26:d0:bd:79:82:b4:93:a2:17:51:
         c4:e3:75:1b:a5:df:ac:db:2e:c4:1d:45:e6:88:15:49:ab:d1:
         f1:f5:e1:de:01:4e:42:f0:e4:4c:9a:c0:5b:af:01:b2:73:1a:
         7f:9e:e7:9b:ef:5e:16:16:61:91:3c:fe:63:bf:5a:eb:a9:33:
         a3:16:85:f0:48:97:a4:40:32:98:cf:f5:e7:78:a6:9f:66:21:
         06:0d:9e:47:68:9b:ca:1d:a9:7d:a2:62:52:e7:7d:50:5c:88:
         27:8b:7d:c1:3e:63:67:59:5e:06:ae:2d:d5:6c:cc:6b:f5:f4:
         5f:c8:43:5d:01:cb:8c:63:89:02:af:05:0c:51:7d:82:8c:f9:
         6e:db:7b:69:e5:34:e1:39:b5:e8:8d:68:92:c6:b3:4b:1c:83:
         de:48:59:93:7f:53:d3:94:97:20:9f:e0:b3:22:74:86:14:e6:
         1a:62:b8:34:98:08:c1:8d:45:a3:c2:c8:6b:88:56:39:06:e7:
         ae:40:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:58 2024 by rpki-client on console-ams.rpki-client.org