Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/UoTg8rOZ8U6AuZ1SSIJNtyiDjsA.roa
File:                     UoTg8rOZ8U6AuZ1SSIJNtyiDjsA.roa (raw, json)
Hash identifier:          JorMUy6EZja5HmdE/AiCVWkgzFijxh2iYYECZT32w7o=
Subject key identifier:   52:84:E0:F2:B3:99:F1:4E:80:B9:9D:52:48:82:4D:B7:28:83:8E:C0
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       41
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UoTg8rOZ8U6AuZ1SSIJNtyiDjsA.roa
Signing time:             Wed 27 Dec 2023 02:06:30 +0000
ROA not before:           Wed 27 Dec 2023 02:06:30 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        124.155.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Dec 27 02:06:30 2023 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=5284E0F2B399F14E80B99D5248824DB728838EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:c2:16:0b:6c:ee:46:ef:f3:1b:57:68:e6:
                    72:a0:2d:15:c4:16:4b:86:99:31:60:0f:96:ab:49:
                    86:ca:c4:bc:de:31:6f:c6:b8:5d:53:21:e6:35:92:
                    c2:54:62:69:ca:7e:9f:01:8c:7f:f0:f0:1c:f0:fc:
                    38:9f:1e:04:f0:48:5e:28:2b:ec:1d:37:ce:6e:90:
                    6d:b5:a0:7f:9c:2e:bc:0c:eb:d2:ec:ee:75:59:37:
                    f2:7b:84:b4:f0:72:bf:1f:d3:14:12:78:fb:49:57:
                    00:72:8a:c3:dd:b9:f2:c6:fa:9b:b3:75:77:36:0a:
                    fe:ae:0e:0c:63:61:38:28:53:da:70:fb:ac:ef:59:
                    d8:ff:3a:4b:5c:f2:fd:86:eb:d4:b1:0f:d5:14:ff:
                    5c:2c:86:46:02:f9:65:2d:fd:f3:83:3a:66:4c:d0:
                    0f:88:76:f2:82:2c:fa:7f:56:75:e6:16:a7:8c:87:
                    52:8d:28:b3:6d:8e:fd:8e:88:f2:fc:8c:53:80:93:
                    d0:8e:2e:d8:9a:ac:bb:f7:a7:cc:3e:0f:de:c2:99:
                    65:49:48:06:63:16:88:32:c3:8e:df:cc:68:61:53:
                    df:13:26:4b:40:c1:8d:77:f8:dc:b8:fd:2c:f3:20:
                    7b:fb:a9:40:05:6f:3d:25:10:de:1e:10:4d:f3:c3:
                    04:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:E0:F2:B3:99:F1:4E:80:B9:9D:52:48:82:4D:B7:28:83:8E:C0
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UoTg8rOZ8U6AuZ1SSIJNtyiDjsA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:ad:d1:b9:f6:fa:b0:ab:65:32:4a:d3:f2:7c:e4:4d:d3:
         9a:e5:c2:38:1e:bf:48:d8:ed:59:2e:d4:a5:43:65:13:d6:39:
         dc:69:62:57:fe:4a:39:27:7f:9b:c1:94:ec:fe:a5:6e:2c:ab:
         05:d5:21:11:72:93:b8:4f:c1:63:ce:d6:6a:d1:10:b4:c0:ba:
         97:0e:a7:62:54:f9:66:e5:b2:28:79:26:9c:0a:0d:99:37:37:
         96:51:fc:ce:75:ef:c3:41:f9:60:e6:c9:cd:3a:bf:2c:80:9c:
         d9:12:79:a3:14:2e:65:f3:0a:04:3d:74:c5:2b:52:1c:3d:a5:
         19:01:00:58:2b:38:85:aa:0e:0e:1f:d1:16:c1:05:8e:c6:bf:
         a5:af:a3:ea:e6:6e:8e:24:fe:9a:14:89:1b:de:78:14:0c:f9:
         a5:5e:0a:3b:71:37:ae:49:28:87:f1:7b:db:59:ac:56:b9:df:
         33:ba:66:f7:16:60:f5:ff:63:9d:89:fb:9d:bf:b0:03:e8:f8:
         6f:4f:b7:a3:15:ef:5c:00:68:e4:76:c6:dd:49:eb:29:04:12:
         3e:60:36:3e:02:43:8d:ed:10:0a:68:3c:8a:6b:16:ca:80:bf:
         94:be:59:97:c6:37:20:b3:24:34:06:fb:95:65:44:b4:0e:4c:
         b2:be:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org