Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/NPLJuBlnLvvQgRGS1bfqm2gB3jI.roa
File:                     NPLJuBlnLvvQgRGS1bfqm2gB3jI.roa (raw, json)
Hash identifier:          kFBXFioQANL/22fa+0AduNgM+f/oEC0kVXcDm641kCQ=
Subject key identifier:   34:F2:C9:B8:19:67:2E:FB:D0:81:11:92:D5:B7:EA:9B:68:01:DE:32
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       63
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/NPLJuBlnLvvQgRGS1bfqm2gB3jI.roa
Signing time:             Sat 31 Aug 2024 01:33:58 +0000
ROA not before:           Sat 31 Aug 2024 01:33:58 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        218.45.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:33:58 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=34F2C9B819672EFBD0811192D5B7EA9B6801DE32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:5a:2a:70:49:1a:8f:01:19:ef:2f:49:5e:
                    d0:af:9a:dd:d7:2e:eb:4a:94:5b:bb:3d:82:29:dc:
                    08:c5:ad:71:ae:6d:ac:8c:b2:b3:5f:74:c2:d8:7d:
                    f0:79:b6:96:f0:1b:8c:9f:3f:95:be:51:33:d5:af:
                    49:0b:bb:cd:91:1d:3e:2b:24:5b:62:40:ad:b3:09:
                    94:9d:e6:23:43:25:86:73:59:ab:85:fd:f2:da:47:
                    69:e4:98:35:1d:b0:b9:7d:22:5a:94:c3:05:f0:b0:
                    84:91:91:95:82:29:d8:97:e7:03:68:1a:27:8b:30:
                    5c:6b:63:83:f0:6e:45:9c:9c:df:ec:90:52:be:df:
                    86:5a:bc:61:dc:50:c0:27:6c:c0:71:d8:d2:84:cc:
                    3d:b6:b1:00:3f:2e:74:7b:fb:cc:cf:58:89:61:5f:
                    28:53:d5:85:66:3f:73:35:04:f0:f4:02:35:53:d2:
                    4d:d8:5b:3d:e6:dc:74:39:b5:b0:86:03:99:00:12:
                    69:cf:22:17:3d:de:8e:7f:bf:ee:05:65:13:c3:01:
                    39:30:78:a6:a6:c0:e2:ce:e2:9f:c2:fb:0d:92:8e:
                    73:a9:fa:06:57:72:7c:7e:2a:ab:e3:63:61:26:38:
                    78:b3:06:c3:58:39:b0:72:c0:e5:d5:65:89:49:ed:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F2:C9:B8:19:67:2E:FB:D0:81:11:92:D5:B7:EA:9B:68:01:DE:32
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/NPLJuBlnLvvQgRGS1bfqm2gB3jI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ed:4d:10:6d:c7:2c:53:23:97:f0:00:22:60:9f:72:b1:75:53:
         f1:44:f7:f1:3e:ba:1d:b1:af:74:dd:b1:d6:d8:27:a7:2a:8b:
         3e:e0:2b:8a:42:b3:3b:09:5a:f1:6c:f7:7a:4b:5d:75:af:6f:
         cf:ad:b5:5f:6f:44:cc:bd:5f:26:36:3b:67:83:f3:9b:41:5e:
         4b:dd:01:11:a0:5a:7c:17:4c:e6:a1:c0:c7:28:c1:7d:b8:d1:
         71:39:d6:ce:35:cd:29:ac:ae:4a:57:ac:96:3e:a2:ff:34:ae:
         1a:fa:c9:36:a4:22:f7:9b:97:e1:19:83:1f:95:32:3f:bf:12:
         cb:52:3c:5c:bb:35:f0:ee:09:14:ed:ae:e9:48:6f:4a:4d:93:
         ca:51:9b:bb:19:df:81:08:9e:3c:d8:a8:c9:65:f4:3f:f0:ee:
         60:86:53:ae:2a:4e:df:7c:d9:9b:1e:9f:c9:39:c9:e5:53:5e:
         82:d1:5b:19:c6:73:e6:76:cf:4c:33:8e:6d:a7:e8:02:80:78:
         23:1e:47:a5:99:c9:b3:36:c7:c5:16:2c:1a:bf:cd:11:d3:13:
         a0:5e:e2:f8:29:8d:60:93:9c:fb:6b:3b:7b:22:ac:9a:53:b8:
         55:8b:3c:43:fd:6c:b7:3b:05:15:98:d7:e8:eb:a2:a4:e8:ad:
         48:26:04:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTI0MDgzMTAx
MzM1OFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzRGMkM5QjgxOTY3MkVG
QkQwODExMTkyRDVCN0VBOUI2ODAxREUzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALLcWipwSRqPARnvL0le0K+a3dcu60qUW7s9gincCMWtca5trIyy
s190wth98Hm2lvAbjJ8/lb5RM9WvSQu7zZEdPiskW2JArbMJlJ3mI0MlhnNZq4X9
8tpHaeSYNR2wuX0iWpTDBfCwhJGRlYIp2JfnA2gaJ4swXGtjg/BuRZyc3+yQUr7f
hlq8YdxQwCdswHHY0oTMPbaxAD8udHv7zM9YiWFfKFPVhWY/czUE8PQCNVPSTdhb
PebcdDm1sIYDmQASac8iFz3ejn+/7gVlE8MBOTB4pqbA4s7in8L7DZKOc6n6Bldy
fH4qq+NjYSY4eLMGw1g5sHLA5dVliUntOssCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQ08sm4GWcu+9CBEZLVt+qbaAHeMjAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL05QTEp1QmxuTHZ2UWdSR1MxYmZxbTJnQjNqSS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXaLaAwDQYJKoZIhvcNAQELBQADggEBAO1NEG3HLFMjl/AAImCfcrF1U/FE9/E+
uh2xr3TdsdbYJ6cqiz7gK4pCszsJWvFs93pLXXWvb8+ttV9vRMy9XyY2O2eD85tB
XkvdARGgWnwXTOahwMcowX240XE51s41zSmsrkpXrJY+ov80rhr6yTakIvebl+EZ
gx+VMj+/EstSPFy7NfDuCRTtrulIb0pNk8pRm7sZ34EInjzYqMll9D/w7mCGU64q
Tt982Zsen8k5yeVTXoLRWxnGc+Z2z0wzjm2n6AKAeCMeR6WZybM2x8UWLBq/zRHT
E6Be4vgpjWCTnPtrO3sirJpTuFWLPEP9bLc7BRWY1+jroqTorUgmBMA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:03 2025 by rpki-client