Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/UJPobq4i0FmPKJmmxpv1xN3EN64.roa
File:                     UJPobq4i0FmPKJmmxpv1xN3EN64.roa (raw, json)
Hash identifier:          yUTHug70NydPyNsSuskheV0a4q1p+ZihZVrnwT77duk=
Subject key identifier:   50:93:E8:6E:AE:22:D0:59:8F:28:99:A6:C6:9B:F5:C4:DD:C4:37:AE
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       42
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UJPobq4i0FmPKJmmxpv1xN3EN64.roa
Signing time:             Wed 27 Dec 2023 02:10:29 +0000
ROA not before:           Wed 27 Dec 2023 02:10:29 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        221.113.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Dec 27 02:10:29 2023 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=5093E86EAE22D0598F2899A6C69BF5C4DDC437AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:5e:89:7a:4f:a8:4f:53:7e:37:c4:d2:f7:
                    2b:71:0e:ea:91:87:b8:e2:68:57:5e:58:d6:2a:3b:
                    a1:60:78:8f:5a:5d:fb:de:f1:c2:d1:2d:aa:d0:a1:
                    bf:56:90:8f:54:34:af:9b:2c:0c:8a:8f:ff:8c:e6:
                    5e:ef:48:5d:60:22:82:ae:f1:f5:df:a5:5e:23:e6:
                    1c:70:1d:b4:36:50:b3:87:ed:75:99:7b:63:85:06:
                    38:0e:3e:43:2c:30:6e:f6:cd:dd:bd:6b:41:7b:c1:
                    73:20:06:e1:fc:15:12:f9:10:15:d0:1b:c6:34:e4:
                    a5:c0:46:92:34:28:5c:b0:e6:c4:aa:6f:f7:fd:af:
                    74:77:30:76:93:e8:ed:3e:5d:e4:78:b7:12:ea:36:
                    0f:33:49:15:85:5f:78:9d:4b:51:f4:7c:6d:2b:b0:
                    88:e2:23:c0:84:de:9a:5c:0c:7a:5f:86:1f:ee:f2:
                    34:c6:d7:0a:39:6d:a6:a1:e9:51:46:dc:bb:15:0b:
                    9f:07:3a:70:04:ad:3a:5e:44:ec:77:5f:e1:71:30:
                    c9:54:cf:6f:d2:e2:56:d5:1c:e1:b4:5d:0c:b0:61:
                    ef:5d:5f:b6:f8:7a:11:4c:03:53:ea:76:5f:f9:91:
                    c7:6a:68:4b:4b:b3:2f:be:84:58:63:01:3d:92:e0:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:93:E8:6E:AE:22:D0:59:8F:28:99:A6:C6:9B:F5:C4:DD:C4:37:AE
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UJPobq4i0FmPKJmmxpv1xN3EN64.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:df:28:dc:f0:b1:f5:ad:00:9d:c5:73:85:b7:95:c8:50:
         63:da:5d:3b:6d:65:82:d1:0f:71:c3:79:17:9a:87:c4:5e:6b:
         3a:9f:da:8e:e4:9b:dd:2f:28:90:c9:10:ac:2a:64:5c:d4:ab:
         76:df:8c:f5:1b:d9:28:71:89:02:08:21:a2:7e:d8:f3:ba:a6:
         ac:cf:a2:85:75:95:80:a9:79:98:77:46:74:f6:5b:39:67:1e:
         56:10:9a:07:af:47:68:e4:25:ec:c8:a2:65:7a:fb:f9:6b:fa:
         8e:f4:74:4b:63:01:24:6e:03:37:d5:66:60:c1:61:8d:23:11:
         53:53:66:04:6c:ac:43:c8:4d:fb:c9:5c:50:6b:0b:96:e2:13:
         4f:4a:41:6b:cd:05:79:e9:84:6a:a9:b0:75:d7:6d:88:ce:4b:
         f9:af:6f:d2:f6:96:18:93:de:59:91:75:f6:77:6f:5a:3a:af:
         c1:e0:46:ed:3f:7a:e6:5a:34:9a:21:58:45:0d:40:0d:39:74:
         bf:33:1f:82:84:12:ea:1d:3a:5b:5d:aa:4a:63:a8:89:f3:b4:
         45:99:3a:b8:01:8d:b1:45:cc:37:c8:7c:4d:7e:43:b5:5b:fc:
         28:c0:71:0a:df:cb:a1:9b:58:08:11:85:3f:d8:22:7d:9e:5e:
         55:19:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:21 2024 by rpki-client on console-ams.rpki-client.org