Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/Y3aWy_IWU8ByfK-c5JLs30Cbod8.roa
File:                     Y3aWy_IWU8ByfK-c5JLs30Cbod8.roa (raw, json)
Hash identifier:          dkpvrJ7ENfK50qs7rhsLZmpv2St+OXoFvx4k96CBtE0=
Subject key identifier:   63:76:96:CB:F2:16:53:C0:72:7C:AF:9C:E4:92:EC:DF:40:9B:A1:DF
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       3C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Y3aWy_IWU8ByfK-c5JLs30Cbod8.roa
Signing time:             Thu 05 Oct 2023 03:29:13 +0000
ROA not before:           Thu 05 Oct 2023 03:29:13 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        220.157.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:29:13 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=637696CBF21653C0727CAF9CE492ECDF409BA1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:1b:42:dc:87:8d:95:17:19:fa:3f:aa:b0:
                    a4:00:bd:8c:eb:cf:eb:13:14:b7:90:54:8e:15:3a:
                    a9:9d:99:c7:99:a9:04:de:57:d7:db:a3:00:e7:cf:
                    f8:0d:be:28:22:bd:d3:3f:ec:89:04:0a:b4:55:60:
                    35:e7:e5:fe:b5:1a:5a:65:ec:88:5a:71:3f:0f:f1:
                    09:4d:c1:70:fb:62:81:eb:de:27:3b:ae:b1:cb:c3:
                    26:3f:63:78:cc:1e:be:ba:d0:3d:fd:2d:b0:2d:b2:
                    f2:d5:2a:2b:06:ed:1a:15:c6:ce:b0:58:1c:8a:ae:
                    5a:f1:56:90:c2:b3:b4:46:60:cf:fd:55:61:ca:31:
                    88:8f:fd:fa:a4:9e:b1:cc:82:0f:8c:65:b3:af:3e:
                    66:11:86:d1:d7:33:ba:31:f0:b5:10:fe:4a:76:93:
                    9f:b9:ee:9c:2e:02:0f:b4:bb:69:a7:79:fa:c9:0e:
                    5c:80:94:52:1a:49:ef:70:3b:0c:45:1e:e2:7b:1c:
                    0a:68:47:29:80:97:a9:91:b2:1c:6c:5d:af:cc:2b:
                    18:29:c5:90:e2:23:6d:4f:f0:96:c8:2a:78:9c:26:
                    d2:9b:41:75:d1:a9:67:a4:96:64:f1:12:68:df:b8:
                    17:b6:b6:a2:c5:2a:9b:80:1f:70:7f:ca:3a:68:b8:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:76:96:CB:F2:16:53:C0:72:7C:AF:9C:E4:92:EC:DF:40:9B:A1:DF
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/Y3aWy_IWU8ByfK-c5JLs30Cbod8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.157.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         33:7d:27:dc:11:f6:c3:aa:13:76:53:87:53:42:45:11:72:b9:
         91:d5:20:e4:d0:f9:01:7a:69:05:a2:57:25:20:97:fe:56:05:
         a4:91:20:7a:c4:fc:ce:47:0a:af:8d:f2:f5:48:9f:ef:ac:c1:
         4a:3e:5e:83:9b:5a:1e:ed:dd:7e:03:7f:e7:1e:79:df:f0:a8:
         f9:7f:d6:25:e3:b7:40:6e:59:a2:da:6d:e6:59:fb:88:05:b6:
         c5:d9:d5:1c:6f:79:e3:a4:bc:b3:4f:42:ed:5f:da:53:31:55:
         7e:89:6a:38:8b:a0:36:9f:a0:ea:c2:96:4d:5d:95:3b:8d:20:
         c1:5b:ac:ef:06:32:1a:76:6f:ad:4f:fc:9d:3b:53:31:19:c1:
         56:34:99:ad:01:35:cf:10:0c:d1:d2:a9:48:a7:55:5e:0d:c1:
         93:cd:8a:41:54:eb:a9:db:68:e6:d6:33:9e:c2:97:8f:e1:61:
         86:a8:5b:8e:bd:54:6f:4d:ec:60:c9:10:83:ba:5e:d2:6c:9a:
         f8:ed:9c:3e:47:bb:80:6b:2c:66:db:fb:06:14:e5:db:8a:9c:
         a1:33:6d:bd:9f:d3:14:fb:1b:ab:8c:16:14:33:b4:97:c7:24:
         9b:f0:7e:36:d8:59:66:48:c1:6c:32:3a:d1:1b:f5:8d:95:97:
         33:93:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:44 2024 by rpki-client on console-fra.rpki-client.org