Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/S3mgr30iUd8oAqNY1OlNZwCibjc.roa
File:                     S3mgr30iUd8oAqNY1OlNZwCibjc.roa (raw, json)
Hash identifier:          tMpuG6A8BdJEU8UMfEe1zf0PDQ8nYFxuPx8WzO5PNIY=
Subject key identifier:   4B:79:A0:AF:7D:22:51:DF:28:02:A3:58:D4:E9:4D:67:00:A2:6E:37
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       1F
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/S3mgr30iUd8oAqNY1OlNZwCibjc.roa
Signing time:             Wed 04 Oct 2023 02:42:49 +0000
ROA not before:           Wed 04 Oct 2023 02:42:49 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        219.121.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  4 02:42:49 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4B79A0AF7D2251DF2802A358D4E94D6700A26E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:69:f2:de:3b:4f:b5:29:ba:f5:d9:0b:0b:12:
                    94:43:1c:a2:89:1d:e8:ec:07:c9:d5:21:66:ae:e2:
                    2b:30:1b:f5:ac:ce:de:70:6b:ee:04:73:ec:35:b7:
                    81:26:17:fa:33:a7:97:e4:4d:75:f7:5c:99:91:2c:
                    19:5e:6f:28:b9:dc:17:47:b6:a2:ae:54:6d:4c:dc:
                    0f:65:3e:87:38:1d:98:34:88:ca:65:c2:fe:d7:d3:
                    a8:f2:79:cf:15:8f:4a:9d:20:be:8d:dc:96:2a:dd:
                    83:ec:1c:40:d6:16:13:9c:b8:67:0a:3c:85:4d:92:
                    a1:41:28:c0:5d:22:8d:28:1b:97:0a:27:e3:23:58:
                    9d:df:5d:ce:f2:b7:a9:fd:ea:4c:4d:f3:62:ed:f0:
                    a4:d0:c3:6f:fe:c3:f2:5a:83:2a:a2:49:2f:4e:38:
                    6b:ae:94:3f:51:3e:e9:1c:74:c5:54:3c:34:4e:ac:
                    71:b9:8b:19:3c:8f:3f:94:3d:56:e7:f8:77:c5:e5:
                    a3:24:66:f0:7b:81:06:fa:57:7c:77:86:e7:77:d8:
                    1b:41:6d:b1:6e:a8:1d:77:47:2e:d4:27:3d:04:02:
                    45:ec:7e:a2:59:7d:c7:ec:e6:65:c7:46:88:4b:00:
                    0f:66:e8:4f:c7:84:5e:86:fa:41:9b:87:df:45:32:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:79:A0:AF:7D:22:51:DF:28:02:A3:58:D4:E9:4D:67:00:A2:6E:37
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/S3mgr30iUd8oAqNY1OlNZwCibjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:70:4f:5a:a2:a9:7e:a7:92:b4:9f:7b:73:0f:3c:be:6c:
         18:34:62:21:82:42:d7:28:9b:48:94:be:89:10:36:14:b7:f8:
         d4:31:3f:ea:d9:6f:40:21:e8:06:f7:37:dc:a3:bc:7e:0a:36:
         20:ac:13:7e:47:3d:b8:ca:e0:2d:2f:35:94:f4:9d:6b:80:3a:
         ff:44:f3:6c:a8:6b:06:c3:7e:be:fe:69:f6:a3:57:a9:6c:1a:
         2f:a1:7c:49:da:91:d1:9d:50:eb:a9:22:dd:c2:22:15:12:da:
         c6:7a:43:08:1b:cd:a7:f9:76:96:aa:73:c0:2f:27:98:81:98:
         4a:78:40:0a:48:72:fb:0a:bc:fe:50:86:10:4d:8f:ad:cb:54:
         7d:1a:7b:49:68:57:df:7b:a7:71:42:2b:40:7e:0e:1c:89:41:
         de:6e:d8:61:02:84:2d:9c:41:5b:e7:6e:e1:9f:6b:5d:ca:98:
         56:f2:6c:f2:a9:95:9c:3e:5a:c9:62:6b:af:ac:07:2f:42:53:
         93:8f:cf:ab:9c:fa:32:e7:1e:ff:f0:ef:c9:60:b6:24:19:de:
         bb:05:65:d0:e8:11:61:ae:f9:ba:78:38:e0:d1:c2:16:9e:b0:
         84:d0:f7:2c:01:16:41:a8:9e:00:c5:9f:91:3d:8d:9d:08:91:
         54:be:eb:ac
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTIzMTAwNDAy
NDI0OVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNEI3OUEwQUY3RDIyNTFE
RjI4MDJBMzU4RDRFOTRENjcwMEEyNkUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPNp8t47T7UpuvXZCwsSlEMcookd6OwHydUhZq7iKzAb9azO3nBr
7gRz7DW3gSYX+jOnl+RNdfdcmZEsGV5vKLncF0e2oq5UbUzcD2U+hzgdmDSIymXC
/tfTqPJ5zxWPSp0gvo3clirdg+wcQNYWE5y4Zwo8hU2SoUEowF0ijSgblwon4yNY
nd9dzvK3qf3qTE3zYu3wpNDDb/7D8lqDKqJJL044a66UP1E+6Rx0xVQ8NE6scbmL
GTyPP5Q9Vuf4d8XloyRm8HuBBvpXfHeG53fYG0FtsW6oHXdHLtQnPQQCRex+oll9
x+zmZcdGiEsAD2boT8eEXob6QZuH30UymVsCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRLeaCvfSJR3ygCo1jU6U1nAKJuNzAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL1MzbWdyMzBpVWQ4b0FxTlkxT2xOWndDaWJqYy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAbbeQAwDQYJKoZIhvcNAQELBQADggEBALCZcE9aoql+p5K0n3tzDzy+bBg0YiGC
Qtcom0iUvokQNhS3+NQxP+rZb0Ah6Ab3N9yjvH4KNiCsE35HPbjK4C0vNZT0nWuA
Ov9E82yoawbDfr7+afajV6lsGi+hfEnakdGdUOupIt3CIhUS2sZ6Qwgbzaf5dpaq
c8AvJ5iBmEp4QApIcvsKvP5QhhBNj63LVH0ae0loV997p3FCK0B+DhyJQd5u2GEC
hC2cQVvnbuGfa13KmFbybPKplZw+Wslia6+sBy9CU5OPz6uc+jLnHv/w78lgtiQZ
3rsFZdDoEWGu+bp4OODRwhaesITQ9ywBFkGongDFn5E9jZ0IkVS+66w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:47 2024 by rpki-client on console-ams.rpki-client.org