Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/Y1jWQXiNPfmrFeey5rnceyebUgU.roa
File:                     Y1jWQXiNPfmrFeey5rnceyebUgU.roa (raw, json)
Hash identifier:          hww/7LE8YLeu9M5/rb3panA8yKkq68QXt8uBYGrgjtI=
Subject key identifier:   63:58:D6:41:78:8D:3D:F9:AB:15:E7:B2:E6:B9:DC:7B:27:9B:52:05
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       67
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Y1jWQXiNPfmrFeey5rnceyebUgU.roa
Signing time:             Sat 31 Aug 2024 01:34:00 +0000
ROA not before:           Sat 31 Aug 2024 01:34:00 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        110.4.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:00 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=6358D641788D3DF9AB15E7B2E6B9DC7B279B5205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:d5:9a:a9:22:34:7f:f6:49:54:ee:b9:ec:
                    0c:62:d6:ad:5b:ac:5b:6a:7a:84:cc:fd:55:f6:f9:
                    40:6b:c4:ec:06:8e:0e:33:c0:64:33:f2:95:a8:e0:
                    e7:13:a8:56:16:05:d9:20:45:7d:1f:c4:c4:c4:93:
                    e5:f6:08:2d:25:8e:06:35:71:94:31:ea:80:bb:3e:
                    2a:8d:6f:36:6a:88:97:42:6e:de:f2:31:5f:9e:27:
                    ce:20:7c:72:fd:4e:4e:56:1e:3c:b3:74:fb:46:d3:
                    c6:c4:f1:e6:e4:0d:46:2c:19:4a:ce:3e:18:c4:d4:
                    f1:a0:76:9f:9b:f8:93:f1:07:34:13:22:0a:03:4a:
                    91:1a:59:0f:19:a5:fe:d4:c1:7a:2b:29:4d:b3:e4:
                    b6:94:38:f2:f9:a2:90:e7:99:c3:c1:fc:af:10:16:
                    23:35:6d:44:9a:63:82:0a:ac:12:43:95:11:df:40:
                    66:2d:4a:c3:51:64:92:56:97:dd:52:35:64:86:5b:
                    56:a5:05:4f:92:df:33:8f:be:68:0c:75:94:e9:53:
                    57:cd:9b:d2:9f:19:ed:ae:9e:8a:74:d0:45:1c:d1:
                    80:f8:50:36:01:bd:ac:bf:ed:ac:76:fb:d3:14:24:
                    69:52:36:63:e7:2a:ca:52:63:fe:42:29:61:ae:a8:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:58:D6:41:78:8D:3D:F9:AB:15:E7:B2:E6:B9:DC:7B:27:9B:52:05
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Y1jWQXiNPfmrFeey5rnceyebUgU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c5:e2:c8:bc:2a:68:1c:0f:87:4b:a4:08:be:18:5f:e0:8a:f1:
         ca:c8:24:56:cc:0d:09:37:47:c7:84:08:31:b2:26:f7:62:60:
         dd:ba:f7:a1:6a:ae:d7:68:a9:db:1e:e5:8d:c1:ef:e7:23:39:
         73:02:0b:14:b5:73:1b:1d:c1:55:c2:51:75:20:fa:81:4e:1b:
         0d:54:2f:b4:b7:f3:0f:eb:c0:47:e6:1a:42:92:71:ac:50:3b:
         f1:da:93:1c:37:eb:7a:f4:02:9b:69:8f:b9:31:f3:ec:6b:c6:
         fe:06:1a:ab:f4:33:85:c3:66:bf:c4:9c:72:16:2a:85:02:f8:
         16:38:db:c9:17:5e:8e:d5:d8:d7:2b:38:4d:ad:90:a4:25:32:
         ae:6a:c1:a1:8d:3e:ff:c8:b2:f2:ed:1f:db:27:6c:cf:f5:7f:
         7f:94:32:9b:a4:d3:da:c2:ef:31:fd:3c:ff:f6:35:27:38:a5:
         1f:22:c6:fd:7d:9a:67:a8:a0:47:4c:60:c3:e8:60:31:92:59:
         22:02:58:88:84:d9:0a:bc:5a:bf:4f:62:ab:55:64:bb:2e:6a:
         ef:b6:d3:44:e7:09:5b:05:60:c9:7e:20:ff:8d:35:c1:98:62:
         30:a4:58:26:6f:b0:38:5d:8e:ac:f2:ef:c7:d3:4f:69:4c:d8:
         a3:7b:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org