Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/RTSpDOXfeSuel2yQYqywq1BJoZ0.roa
File:                     RTSpDOXfeSuel2yQYqywq1BJoZ0.roa (raw, json)
Hash identifier:          i3+GdATGkg9GSG5lChcLgEB26jx3U3ply7EgYYwDRjk=
Subject key identifier:   45:34:A9:0C:E5:DF:79:2B:9E:97:6C:90:62:AC:B0:AB:50:49:A1:9D
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       6C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/RTSpDOXfeSuel2yQYqywq1BJoZ0.roa
Signing time:             Sat 31 Aug 2024 01:34:02 +0000
ROA not before:           Sat 31 Aug 2024 01:34:02 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        119.150.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:02 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4534A90CE5DF792B9E976C9062ACB0AB5049A19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:92:8b:4e:17:6f:ed:a5:4f:8d:e1:56:ce:
                    4a:55:b3:7f:5d:9a:6a:4f:a2:19:f7:49:95:51:c7:
                    06:16:74:a1:44:e4:73:0f:48:d8:dd:0f:86:de:cf:
                    a8:f3:6b:31:ec:fa:34:ed:18:e3:0f:da:ce:69:c4:
                    89:61:fd:87:04:cd:28:42:ef:d6:70:02:81:34:37:
                    4a:12:90:ea:f0:99:85:3f:fd:21:7c:90:08:c5:9f:
                    d8:ad:eb:16:0c:a7:9a:eb:20:0d:92:2a:d2:8d:1f:
                    ed:d7:a3:ed:27:ec:38:87:fb:42:fe:bb:e0:e8:4f:
                    8a:18:29:b7:0f:c5:a9:f7:3b:03:ec:cc:98:da:c8:
                    a2:84:6b:85:49:93:fa:79:db:ff:80:c3:2e:6e:6b:
                    d9:c3:f6:7e:48:af:fb:02:bc:5f:90:b7:80:24:80:
                    11:8f:02:5b:21:1d:2e:13:68:9e:07:cd:9e:74:bd:
                    76:8d:78:1e:15:a8:a6:3d:e8:f9:09:24:8a:0b:f2:
                    a9:74:fb:4c:91:38:ea:e5:c1:67:d9:06:b2:55:6d:
                    e3:de:ed:a2:9e:e7:f4:48:82:0f:dd:42:9d:d2:09:
                    8f:ac:6e:f2:a1:28:b3:5b:d6:20:e3:5a:a7:cd:30:
                    1e:06:67:6c:dd:fc:45:18:33:3d:68:c8:25:66:e2:
                    00:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:34:A9:0C:E5:DF:79:2B:9E:97:6C:90:62:AC:B0:AB:50:49:A1:9D
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/RTSpDOXfeSuel2yQYqywq1BJoZ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:52:ea:87:d4:4a:16:2f:de:2b:14:e8:ae:b2:0c:2d:d0:
         f3:02:c9:0b:94:d4:54:6a:95:61:58:59:63:b8:3f:bb:bc:4c:
         64:13:b7:07:37:08:23:ff:2f:62:61:03:eb:8d:71:d1:94:c5:
         48:c8:5a:59:79:2f:ed:65:d8:a6:7e:f4:a4:7b:5e:23:d8:96:
         ef:6e:98:df:11:90:84:af:69:93:86:d0:88:e0:1e:51:4b:98:
         bb:c6:8b:84:c2:7d:7a:66:a9:16:df:9a:bd:5b:fa:9c:ec:d1:
         74:a5:63:f5:c4:c3:9c:6e:97:f8:15:13:ca:33:5c:49:e8:07:
         c7:fa:e8:48:e0:05:c7:8b:5a:e0:1e:f9:a7:50:07:4e:df:87:
         be:91:c3:47:49:69:04:c5:c5:5b:82:87:53:4e:4b:d4:d0:d9:
         5d:e1:55:ce:85:e7:b4:50:32:de:47:c2:e1:49:fd:e7:fc:ce:
         cb:ce:3f:8e:34:26:77:e7:fe:6b:33:a2:77:69:8c:57:5d:0c:
         72:0c:1b:1a:5c:d3:f1:85:c5:35:25:57:2d:8f:ea:10:8e:a5:
         34:7e:b7:0f:f5:4b:d2:50:47:ff:fa:a0:bb:e0:3a:56:3c:c9:
         54:68:06:9c:0d:c8:87:c6:6b:6f:ac:de:7b:a5:04:76:83:b5:
         48:bb:4e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:16 2024 by rpki-client on console-fra.rpki-client.org