Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZHIDZl9l5G820tHBfaX4R0ju_lg.roa
File:                     ZHIDZl9l5G820tHBfaX4R0ju_lg.roa (raw, json)
Hash identifier:          AYRBJaJxr0AJN3QzQCtNQsf/ySUrQh9i4BQ3fR8CwQo=
Subject key identifier:   64:72:03:66:5F:65:E4:6F:36:D2:D1:C1:7D:A5:F8:47:48:EE:FE:58
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       6F
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZHIDZl9l5G820tHBfaX4R0ju_lg.roa
Signing time:             Sat 31 Aug 2024 01:34:03 +0000
ROA not before:           Sat 31 Aug 2024 01:34:03 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        122.145.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:03 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=647203665F65E46F36D2D1C17DA5F84748EEFE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:33:ae:e4:cf:5c:15:13:0f:8c:3a:a2:d8:
                    d3:39:32:64:de:f6:3d:c7:f2:f3:c0:d8:c1:8b:70:
                    e3:af:e2:42:36:ec:f1:c1:f2:cc:ea:9b:eb:28:d1:
                    1c:39:c7:9c:47:f4:2b:79:e6:8b:85:c2:30:67:66:
                    e6:4c:6f:81:b6:e7:ae:b3:7d:82:9f:da:43:2b:b2:
                    bd:05:13:43:3c:3b:ae:df:8d:38:1b:46:4c:8f:fb:
                    00:db:70:c1:70:6b:b6:0b:fd:c5:50:77:4d:a4:31:
                    d8:82:09:31:f4:c6:36:89:07:0f:89:fd:b5:03:d9:
                    1e:84:cc:4f:30:22:e1:12:30:22:42:b7:30:3d:e2:
                    63:8e:89:90:ad:a9:bc:31:fd:1c:10:8a:7a:bb:71:
                    15:45:0d:84:67:a1:ca:b3:0a:84:3b:b7:fd:ab:7a:
                    63:36:47:c7:f9:f7:b6:e7:b1:27:9c:8c:ed:fe:70:
                    2d:04:20:40:9c:16:4a:63:9d:2d:29:57:e1:9d:14:
                    92:36:9d:8f:31:04:a0:f7:81:98:1a:e9:97:a6:a3:
                    00:13:51:19:c6:dd:39:33:d8:1b:86:ea:3d:62:9f:
                    14:41:ff:39:28:23:16:27:a0:e7:04:b5:72:f4:e8:
                    06:05:d7:63:de:f5:a4:e3:26:af:df:2b:3c:9e:4e:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:72:03:66:5F:65:E4:6F:36:D2:D1:C1:7D:A5:F8:47:48:EE:FE:58
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZHIDZl9l5G820tHBfaX4R0ju_lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:30:0e:c8:77:4e:7d:ac:e5:ff:ec:7a:eb:b8:d9:c5:ed:e1:
         7f:43:93:9b:fc:0f:4d:cc:9e:ea:4f:71:d7:76:8b:2f:58:94:
         30:4b:f6:44:3f:1f:28:d8:f1:74:24:5f:53:88:8b:67:92:bf:
         49:cb:06:7e:2c:34:be:fa:9a:c4:a0:14:9c:c5:25:89:2b:10:
         b0:80:5a:29:c1:6e:89:33:85:01:13:c0:1f:83:12:bc:60:05:
         b3:6e:3c:09:0a:f9:6a:ae:a1:38:b2:30:f1:04:65:a4:ee:c2:
         e2:35:3a:b1:42:8a:d8:eb:c6:68:ed:b6:62:06:13:e7:fb:95:
         ab:d8:33:f2:14:61:65:82:b4:c9:35:57:79:24:47:08:97:38:
         47:ad:9c:c8:a3:54:d0:e8:29:50:b4:b0:56:2c:19:56:9c:92:
         08:10:1d:a4:f2:80:56:05:b4:c6:52:cb:95:9d:f5:21:a8:8c:
         61:e4:25:88:3d:3a:f4:e9:b4:f9:ed:01:fa:2c:82:3b:25:a0:
         ec:8e:9c:8a:59:eb:73:a9:aa:56:6d:cc:18:e9:76:26:dd:07:
         54:3f:df:3e:63:46:71:e3:30:f8:4d:4e:df:79:4f:47:6f:39:
         36:cd:df:01:d3:92:ec:9d:ec:d2:6e:31:fa:5e:c0:73:e2:16:
         fc:48:1b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org