Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/PN11TbPgwy6cbgiIYLY1R8jUZuY.roa
File:                     PN11TbPgwy6cbgiIYLY1R8jUZuY.roa (raw, json)
Hash identifier:          T9UX8K4LZnapwBBcEKO5vkXxblPatQ01J3y42d8eIBg=
Subject key identifier:   3C:DD:75:4D:B3:E0:C3:2E:9C:6E:08:88:60:B6:35:47:C8:D4:66:E6
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       39
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/PN11TbPgwy6cbgiIYLY1R8jUZuY.roa
Signing time:             Thu 05 Oct 2023 03:29:12 +0000
ROA not before:           Thu 05 Oct 2023 03:29:12 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        220.150.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:29:12 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3CDD754DB3E0C32E9C6E088860B63547C8D466E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:a2:c2:0e:76:44:04:83:1c:7a:55:8e:8d:
                    57:32:01:31:27:a1:1a:d2:9a:56:2e:1e:95:95:4d:
                    0a:02:1b:df:85:06:93:b1:ca:e0:77:34:44:0a:16:
                    e5:91:21:04:96:6e:c0:b8:0e:a8:b1:c6:d5:cc:99:
                    24:7f:55:21:23:4b:f3:c1:07:fe:85:23:eb:4c:23:
                    62:f7:e9:fa:9c:ec:95:89:53:84:8e:9d:95:42:60:
                    ed:62:bd:0b:80:21:c8:9a:73:95:37:4b:1c:b7:92:
                    25:15:36:69:f8:eb:46:55:ad:49:47:75:06:18:33:
                    bf:fa:e1:76:7a:88:8b:31:ff:90:1b:02:4d:88:06:
                    c2:24:f1:f7:4b:04:e6:48:74:ab:5c:c6:39:90:47:
                    a6:f2:82:67:4b:46:7e:e5:53:97:a3:3b:80:1c:48:
                    10:59:34:dd:b6:36:ea:2d:1c:c9:9c:c9:0f:b0:22:
                    14:7e:4f:4f:91:13:5c:40:d4:92:6e:5b:cf:94:e3:
                    3a:eb:6d:06:76:2c:d3:79:22:74:a9:76:1f:93:b4:
                    79:9c:d5:f4:a3:60:8f:46:58:6e:c6:4c:a7:9e:ff:
                    46:93:7d:1e:7b:97:ac:f8:42:a9:3a:79:c2:1f:d1:
                    7b:d1:59:c6:b1:ba:fd:02:c6:ee:70:11:d5:e3:9c:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DD:75:4D:B3:E0:C3:2E:9C:6E:08:88:60:B6:35:47:C8:D4:66:E6
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/PN11TbPgwy6cbgiIYLY1R8jUZuY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d4:c6:52:5d:14:32:c6:fd:fc:10:92:70:fb:75:d4:40:6e:f5:
         70:2a:c2:c7:05:33:94:a8:a7:e1:6a:a4:53:87:63:23:78:8c:
         d0:41:a7:8d:7a:52:83:f8:a9:5e:66:64:4c:e7:5d:5b:1c:ee:
         43:f1:74:c4:3c:4d:2e:d8:6c:68:a4:5f:de:17:ae:2b:af:a6:
         6d:7d:69:51:21:52:ad:af:28:44:de:a1:46:19:b5:6c:5a:ac:
         f6:7f:c4:64:37:f4:07:80:fb:5c:8c:de:58:d9:51:7c:56:5a:
         22:3b:a5:fc:99:90:1e:9d:b9:41:73:fc:19:08:b5:90:0c:f6:
         3f:c5:14:6f:41:63:69:42:a7:84:aa:14:75:08:d8:0b:64:a7:
         f1:f7:fb:70:fd:ac:87:4d:19:10:ff:ab:c3:97:61:5b:8a:cb:
         bb:ef:d1:b6:26:ce:11:c9:76:75:06:67:af:31:c0:b1:fa:48:
         34:0c:ac:e1:9f:16:a2:2e:a0:53:b7:03:36:1b:48:51:3d:58:
         74:15:3f:37:c3:50:f0:74:be:6b:75:a7:17:e4:0b:8f:b4:d2:
         8c:2c:fa:b6:bc:c4:25:20:a6:b5:cc:0e:11:1d:54:80:f1:7c:
         13:2c:37:a1:7c:81:8c:17:6a:b3:45:7a:eb:4b:d3:9c:8b:18:
         fa:67:61:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org