Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/UuOWMlYzCFHFcaEyb11e93_VktU.roa
File:                     UuOWMlYzCFHFcaEyb11e93_VktU.roa (raw, json)
Hash identifier:          OZbHo8TD7q27o/MSB+3CerlBagR4Wm4UwZ5rCHbhWMo=
Subject key identifier:   52:E3:96:32:56:33:08:51:C5:71:A1:32:6F:5D:5E:F7:7F:D5:92:D5
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       53
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UuOWMlYzCFHFcaEyb11e93_VktU.roa
Signing time:             Sun 31 Mar 2024 01:32:52 +0000
ROA not before:           Sun 31 Mar 2024 01:32:52 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        203.112.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 01:32:52 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=52E3963256330851C571A1326F5D5EF77FD592D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:84:2a:bc:4b:28:19:5b:71:d2:df:28:c4:
                    a1:59:48:d7:98:de:0d:99:98:9e:30:12:51:ae:9f:
                    c1:9c:91:98:87:62:93:f5:a3:4f:42:72:1b:df:78:
                    fa:f0:92:65:8f:10:84:01:01:43:05:52:ff:10:6d:
                    97:d9:d4:9a:45:8e:c9:9e:b9:44:3a:6f:8e:d8:25:
                    11:f3:62:e0:65:8e:66:15:b7:fd:5a:cc:63:09:f5:
                    13:c5:e4:00:df:ed:20:1a:9c:b1:72:7d:e0:58:7b:
                    9b:0f:35:f5:4b:59:09:5d:da:fc:e0:e1:80:7b:58:
                    4e:14:83:2c:f4:f7:a3:2c:5c:f0:1f:4d:3b:b5:98:
                    c4:59:b6:d8:e4:33:c0:e5:9f:e5:44:61:61:77:1b:
                    32:df:b1:c5:93:57:5b:59:aa:25:33:93:a7:4d:62:
                    d3:79:d6:73:66:92:37:9a:56:f3:d1:6f:e4:5e:fe:
                    e5:67:00:8e:be:d3:17:43:00:20:9c:cd:7e:38:76:
                    50:e2:3f:49:62:67:e6:05:63:03:11:2d:36:a2:65:
                    e4:02:56:08:5f:8b:0f:fc:c6:16:0e:92:3a:92:21:
                    d7:89:f1:10:75:06:ae:11:90:f6:ec:ee:68:17:a6:
                    39:c2:b2:1a:7a:94:48:b5:f9:e1:65:70:b6:cf:93:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:96:32:56:33:08:51:C5:71:A1:32:6F:5D:5E:F7:7F:D5:92:D5
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UuOWMlYzCFHFcaEyb11e93_VktU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:95:8c:d8:1c:8e:cf:60:44:0a:fc:a6:ad:95:67:bd:f2:
         a0:a8:c6:47:88:28:24:0b:96:19:74:56:b8:45:9e:c7:dc:e2:
         a1:0c:6b:f1:f2:68:c6:e5:c9:b7:b3:9d:3f:b7:9c:87:7c:e4:
         52:11:72:fd:f2:9f:26:a0:38:fa:47:f0:ce:3a:92:b2:6b:a4:
         69:11:b2:ad:7c:ce:22:6e:82:f0:24:0a:eb:89:0b:99:12:2a:
         41:8f:d6:05:a4:d4:85:fb:1e:e0:45:73:80:b0:5e:2b:4a:44:
         71:0b:33:5b:6a:e0:11:cc:ec:26:48:00:f2:b0:f7:5f:99:06:
         1f:25:f7:3c:c4:60:bb:f4:65:ca:7f:4f:ac:ba:bb:14:5e:18:
         77:ef:08:2e:bf:5d:e7:a9:e2:bb:93:04:ef:ea:a7:ef:60:18:
         3a:c8:c6:8f:b6:04:a4:b7:f5:4c:df:9f:7e:74:aa:0c:78:90:
         e4:c5:95:e2:5f:01:89:70:8d:00:a3:d9:2b:4a:0d:04:24:6e:
         e3:aa:49:17:20:20:37:15:a2:bf:9c:3e:a7:72:6f:4f:22:4b:
         45:af:f1:da:2a:01:16:65:d3:7f:d5:15:c3:1b:d8:25:bd:de:
         f2:94:30:58:fa:03:cd:31:3b:87:27:48:88:ed:33:30:7d:88:
         75:93:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org