Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa
File:                     N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa (raw, json)
Hash identifier:          CzQFOOoX2NzTbqgNW1jTB0dpGuKF+VMT1sckfUM6DBw=
Subject key identifier:   37:4A:66:0A:48:8A:98:83:8A:E0:89:9B:02:4F:EC:1A:A8:23:29:B9
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       82
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa
Signing time:             Sat 31 Aug 2024 01:37:24 +0000
ROA not before:           Sat 31 Aug 2024 01:37:24 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        220.157.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:37:24 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=374A660A488A98838AE0899B024FEC1AA82329B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:5a:f6:ca:0c:da:5b:af:1c:ec:50:fc:aa:
                    01:19:a3:af:e7:f5:2e:ca:c2:91:41:67:08:e0:ba:
                    4c:de:11:75:64:1b:c1:32:c8:85:47:3c:01:5a:7f:
                    fb:1a:d1:4c:33:38:8c:ca:aa:04:0b:e1:08:4b:50:
                    13:d5:a0:8d:fb:56:90:65:61:81:6b:07:be:56:dd:
                    95:9b:0c:bf:be:c8:bf:c6:77:41:d8:53:f2:61:98:
                    5e:ed:92:d2:ca:ed:92:ea:e0:c6:ab:e4:c3:12:c8:
                    70:2d:ee:2a:d7:98:0e:2f:82:ab:bc:1b:f5:ba:d0:
                    21:05:22:92:73:cc:81:78:8b:69:00:d9:27:bc:43:
                    d8:63:16:0f:65:1b:2a:16:ca:de:c3:06:d4:dc:2d:
                    f5:61:71:e5:3d:c5:cf:e6:28:88:ab:54:e3:a1:d0:
                    03:d8:36:4d:45:f8:34:85:94:13:9d:0d:f7:88:0a:
                    06:86:c7:e6:3b:e5:ae:a4:f6:0c:d7:23:57:3a:71:
                    17:44:6e:95:0e:ea:a2:49:b1:21:34:53:d2:e0:c7:
                    18:78:2d:c1:d4:24:97:c3:11:9e:4c:27:46:72:29:
                    4d:14:a5:33:e7:0d:11:92:f9:39:96:6d:4d:ce:73:
                    81:9e:f3:76:65:ca:c4:29:a4:cb:00:8c:76:be:5d:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4A:66:0A:48:8A:98:83:8A:E0:89:9B:02:4F:EC:1A:A8:23:29:B9
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.157.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         26:74:26:b5:04:de:f2:03:9d:82:cd:ea:0f:32:22:d0:af:5b:
         e5:6d:1b:e1:88:d4:6a:dd:f4:5e:bd:32:fb:78:f1:b9:01:24:
         a3:95:ec:6f:7d:65:f3:12:ed:40:e8:75:d3:86:d3:fe:1c:9d:
         0d:69:61:c3:2f:c5:c0:7d:53:3b:6c:ee:0e:c6:cc:cb:d5:fb:
         65:eb:12:d8:ca:82:b5:92:98:21:d3:dc:77:b9:31:d0:2b:d3:
         1f:d6:ed:41:38:29:8e:cb:9a:6e:35:cd:b1:74:47:47:db:e1:
         05:1a:27:be:af:b7:03:fd:72:e1:8d:12:92:83:27:66:2f:61:
         11:8c:f1:d5:35:b6:0f:68:4f:4e:02:0e:96:e3:a4:d0:8c:2b:
         4a:9d:8f:82:6e:40:a9:8a:a5:b3:91:da:3d:1a:5b:03:1a:1a:
         19:75:78:c4:67:6f:4c:82:91:06:d2:a1:f3:83:c3:cb:69:d4:
         54:3a:93:1a:b4:e3:6e:ef:3b:27:a9:04:40:66:e0:96:9b:4b:
         70:59:27:9a:ab:92:13:8c:c6:41:0a:9d:19:cf:88:5b:0e:54:
         3e:68:27:b7:0d:8c:c1:72:9a:7a:8b:a9:72:16:f4:e6:63:2a:
         4e:4f:76:5b:d9:75:af:ad:e7:c5:d1:11:61:4c:cc:f6:47:74:
         53:c3:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org