Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/UQrwj1S7V9zjDljM89WFYwdZQ5k.roa
File:                     UQrwj1S7V9zjDljM89WFYwdZQ5k.roa (raw, json)
Hash identifier:          kqc1iS5rg5kl/2FShRq6dx5xGUY0Nr8Vstjtb7tWsM4=
Subject key identifier:   51:0A:F0:8F:54:BB:57:DC:E3:0E:58:CC:F3:D5:85:63:07:59:43:99
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       7C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UQrwj1S7V9zjDljM89WFYwdZQ5k.roa
Signing time:             Sat 31 Aug 2024 01:34:09 +0000
ROA not before:           Sat 31 Aug 2024 01:34:09 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        210.170.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:09 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=510AF08F54BB57DCE30E58CCF3D5856307594399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:91:47:bf:f3:3c:55:5f:a1:23:de:3d:6e:
                    e5:44:f4:a8:91:b7:06:cc:9a:ac:67:3a:1c:af:6d:
                    45:8d:ae:10:3e:62:9e:8d:0a:7a:dc:7c:91:a0:f3:
                    e7:a7:78:6e:0d:aa:3f:3b:fc:cc:a3:4e:68:f4:68:
                    e0:d4:95:92:ac:54:5d:87:4f:f5:58:42:2c:e2:94:
                    3d:2c:87:45:50:e5:af:d2:23:4b:e6:07:44:9f:d5:
                    f9:f8:a6:e4:a1:41:85:df:cc:a2:47:d0:41:68:63:
                    8e:1a:bd:5f:a6:7d:93:6d:a5:25:05:6a:63:41:bb:
                    ec:89:97:5b:69:b1:50:71:3a:ea:a6:1b:f6:ee:9f:
                    61:e4:07:9d:2a:42:91:14:26:1a:fb:c4:79:0b:f2:
                    ff:d0:1f:fd:94:2c:92:5d:23:06:c6:d3:bb:8a:8b:
                    eb:fc:82:a3:b4:bf:ed:63:72:45:b8:fe:db:07:08:
                    0a:40:f9:dd:21:9e:79:29:f2:34:43:bf:d6:19:c1:
                    eb:6a:65:15:07:5a:c8:43:28:fa:be:e0:cb:f7:5c:
                    83:4e:ca:96:48:ad:e4:60:db:91:9f:39:8f:de:5b:
                    73:a3:de:f8:e1:2e:49:ac:1c:9b:70:0f:27:b7:14:
                    81:25:17:b4:14:71:8f:65:fa:80:7a:9c:ed:57:47:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0A:F0:8F:54:BB:57:DC:E3:0E:58:CC:F3:D5:85:63:07:59:43:99
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UQrwj1S7V9zjDljM89WFYwdZQ5k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ef:13:ed:cb:16:27:60:38:5a:92:f8:e0:32:45:0f:2b:c1:d6:
         3b:a5:3b:fb:25:08:34:f8:45:e7:76:fe:98:fa:33:0c:cf:93:
         10:b9:c4:a1:11:6b:e0:66:37:77:65:e1:b6:02:39:95:2e:7d:
         a1:e0:37:23:65:d4:01:1f:80:e6:1a:c3:c8:dd:26:40:9a:dc:
         e5:98:de:7a:12:c2:cc:5b:f8:31:b6:8b:fe:b3:3c:79:2b:b4:
         2c:36:7f:bd:b6:e7:eb:ef:7d:ce:0e:a8:3d:e0:71:82:58:ab:
         61:46:b5:27:5b:79:83:c9:ba:72:d6:33:ef:b1:47:01:f1:61:
         d4:3a:aa:b4:32:b2:2a:83:8c:40:a9:a7:58:d6:69:fd:05:37:
         c4:36:09:bc:e4:ea:34:a9:c2:79:54:ad:af:c0:fc:fc:c9:ac:
         01:36:7b:c1:7a:f0:b7:34:1e:06:0d:ac:52:e4:07:37:e3:e2:
         3b:d1:49:9f:1b:b9:4a:c8:6e:a5:56:e6:85:cb:68:c0:5e:71:
         6c:e3:90:46:aa:f1:46:c5:06:2a:46:f8:24:7d:aa:ab:bd:e4:
         0f:2a:68:f5:57:02:25:35:c8:48:7f:ec:c6:de:e7:d5:39:a0:
         47:dd:13:67:f2:18:05:6a:0e:93:57:7c:ea:1a:ae:14:20:4d:
         91:12:60:e9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTI0MDgzMTAx
MzQwOVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNTEwQUYwOEY1NEJCNTdE
Q0UzMEU1OENDRjNENTg1NjMwNzU5NDM5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMEfkUe/8zxVX6Ej3j1u5UT0qJG3BsyarGc6HK9tRY2uED5ino0K
etx8kaDz56d4bg2qPzv8zKNOaPRo4NSVkqxUXYdP9VhCLOKUPSyHRVDlr9IjS+YH
RJ/V+fim5KFBhd/MokfQQWhjjhq9X6Z9k22lJQVqY0G77ImXW2mxUHE66qYb9u6f
YeQHnSpCkRQmGvvEeQvy/9Af/ZQskl0jBsbTu4qL6/yCo7S/7WNyRbj+2wcICkD5
3SGeeSnyNEO/1hnB62plFQdayEMo+r7gy/dcg07Klkit5GDbkZ85j95bc6Pe+OEu
Sawcm3APJ7cUgSUXtBRxj2X6gHqc7VdH3S8CAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRRCvCPVLtX3OMOWMzz1YVjB1lDmTAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL1VRcndqMVM3Vjl6akRsak04OVdGWXdkWlE1ay5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXSqqAwDQYJKoZIhvcNAQELBQADggEBAO8T7csWJ2A4WpL44DJFDyvB1julO/sl
CDT4Red2/pj6MwzPkxC5xKERa+BmN3dl4bYCOZUufaHgNyNl1AEfgOYaw8jdJkCa
3OWY3noSwsxb+DG2i/6zPHkrtCw2f7225+vvfc4OqD3gcYJYq2FGtSdbeYPJunLW
M++xRwHxYdQ6qrQysiqDjECpp1jWaf0FN8Q2Cbzk6jSpwnlUra/A/PzJrAE2e8F6
8Lc0HgYNrFLkBzfj4jvRSZ8buUrIbqVW5oXLaMBecWzjkEaq8UbFBipG+CR9qqu9
5A8qaPVXAiU1yEh/7Mbe59U5oEfdE2fyGAVqDpNXfOoarhQgTZESYOk=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:14 2025 by rpki-client