Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/POOREk6DsnSDcMWUfRxAjoaoAPQ.roa
File:                     POOREk6DsnSDcMWUfRxAjoaoAPQ.roa (raw, json)
Hash identifier:          59cXLeDim+nNh2J8wy2VmtbZmtZEf9BY5PKPyIcvsyA=
Subject key identifier:   3C:E3:91:12:4E:83:B2:74:83:70:C5:94:7D:1C:40:8E:86:A8:00:F4
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       1D
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/POOREk6DsnSDcMWUfRxAjoaoAPQ.roa
Signing time:             Wed 04 Oct 2023 02:42:48 +0000
ROA not before:           Wed 04 Oct 2023 02:42:48 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        218.45.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  4 02:42:48 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3CE391124E83B2748370C5947D1C408E86A800F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:63:0e:b0:91:09:02:b1:c1:7b:41:3f:85:
                    dc:be:74:3e:bf:2e:5d:c5:92:06:45:70:6b:8a:e2:
                    72:d3:5c:63:8b:a9:5f:d7:a7:64:3c:e6:88:70:91:
                    2a:be:b4:76:60:82:cc:a5:5a:86:ff:5c:53:62:41:
                    3e:49:08:78:f3:83:a1:15:4f:bf:61:c1:43:19:f3:
                    89:81:84:5d:65:ff:f3:57:4f:54:b9:d4:18:03:31:
                    16:ee:fa:e2:18:49:89:df:cb:d2:0e:70:70:72:94:
                    6a:28:3a:94:ad:28:cc:8d:14:0b:54:1e:b5:ba:a8:
                    04:5d:07:4a:2f:68:ab:ef:4c:87:15:32:cc:68:57:
                    f6:e3:42:ec:1e:f7:d4:5b:bc:47:bf:8e:14:45:08:
                    30:7f:8a:5b:4c:d2:2b:6c:84:31:ca:c8:ef:8f:f9:
                    7e:db:c0:ed:b3:8e:0b:b4:76:ba:59:ee:f6:20:84:
                    4a:98:d2:08:c0:6e:99:d1:ba:f4:c6:d7:a7:c4:b8:
                    db:8c:9b:48:bf:fe:07:66:15:f5:be:8d:b8:9c:a9:
                    33:fe:c5:6c:ce:08:9c:1d:0f:2a:cf:13:de:88:f0:
                    bc:ee:3b:65:bd:e2:c9:8d:a0:52:7e:d2:97:f3:ba:
                    5a:81:23:eb:77:dd:16:b8:f7:06:ca:2e:b9:b2:e9:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E3:91:12:4E:83:B2:74:83:70:C5:94:7D:1C:40:8E:86:A8:00:F4
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/POOREk6DsnSDcMWUfRxAjoaoAPQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:98:55:72:9a:8b:8a:a0:4a:d1:65:c8:16:aa:37:ba:c8:71:
         32:fd:0b:5b:7e:12:22:94:1b:79:90:28:b2:17:9f:c0:7b:63:
         99:42:7e:02:0b:31:5f:56:e0:03:ec:ec:db:f7:81:45:53:b2:
         e1:bd:ff:48:fb:62:77:27:48:75:a8:2f:7e:68:17:28:9e:aa:
         ca:24:f9:d6:de:17:bc:61:1f:37:99:97:59:1c:03:97:99:17:
         03:b5:3d:ef:cf:eb:3c:e9:29:db:21:2a:ac:fb:3e:83:dd:07:
         66:68:3e:86:1f:43:5a:23:b5:ca:d3:d8:4f:2b:5f:33:d1:fb:
         85:12:48:42:b8:fd:b3:15:47:11:cf:fb:62:37:34:1e:2e:78:
         dc:8a:02:97:4d:6b:fb:9b:7f:44:d3:e5:4f:37:8a:77:4b:8b:
         77:9a:6b:31:18:81:26:7a:a0:93:0a:a7:df:fb:be:13:ff:5f:
         d3:0e:df:43:a3:88:9b:ad:18:21:e2:5d:96:88:ee:61:c5:cb:
         e8:c1:7a:db:5f:90:36:07:38:35:c4:dc:95:f0:83:fa:32:8b:
         79:8a:e9:a6:f8:db:e2:e5:b5:c3:04:5b:00:1d:65:21:6c:9b:
         9b:7b:54:f9:ab:d3:e9:be:32:88:01:84:12:0d:c6:54:11:56:
         57:24:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org