Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZXlXwzdw8jbnqm_XYWULYpv5mqU.roa
File:                     ZXlXwzdw8jbnqm_XYWULYpv5mqU.roa (raw, json)
Hash identifier:          LUxTgAcmFe0NLt2XZ4OT3K/nBuhvJ+hmEC8LGTLdRvU=
Subject key identifier:   65:79:57:C3:37:70:F2:36:E7:AA:6F:D7:61:65:0B:62:9B:F9:9A:A5
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       5C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZXlXwzdw8jbnqm_XYWULYpv5mqU.roa
Signing time:             Sat 31 Aug 2024 01:33:54 +0000
ROA not before:           Sat 31 Aug 2024 01:33:54 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        14.3.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:33:54 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=657957C33770F236E7AA6FD761650B629BF99AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:85:a1:fb:0f:38:5c:82:a2:47:99:7e:78:
                    11:c9:83:2c:b3:94:ad:d8:5a:61:1a:df:93:7f:8e:
                    4f:75:6e:d7:b4:51:7d:4a:47:3f:96:de:81:76:b1:
                    d8:8c:1c:78:dd:18:ba:d6:dd:3b:e0:d4:51:c9:65:
                    50:d6:d7:03:f8:d6:b3:9f:f5:7e:f3:f8:cd:be:a8:
                    d5:50:d7:b6:48:29:56:c9:d6:c8:99:76:c0:88:38:
                    9a:0c:70:8f:aa:1a:1a:e5:57:62:42:2d:60:93:bf:
                    62:46:39:70:3f:0e:de:bc:8d:69:55:db:94:0a:ba:
                    c8:3b:55:de:01:17:e0:a2:c2:9d:8e:d0:12:45:1d:
                    aa:85:69:d3:7c:47:17:01:e0:ae:bc:b9:9f:71:db:
                    27:5c:10:4b:b9:2c:5c:c3:c3:d8:d2:e8:e4:ba:be:
                    e1:70:23:4d:eb:42:75:aa:ea:88:70:ef:9f:83:c6:
                    9b:5f:0b:84:53:46:12:9e:12:ab:52:58:70:eb:6d:
                    b2:e8:b0:30:21:35:7b:76:c4:0f:9b:04:7f:d7:42:
                    c0:c1:fa:e8:44:bc:2a:c9:45:6e:c9:bf:e0:be:c8:
                    59:d8:4f:f3:b7:ed:18:57:76:80:6c:da:53:a4:dc:
                    2b:79:8f:b6:6d:62:e7:62:95:61:17:e2:ac:25:ed:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:57:C3:37:70:F2:36:E7:AA:6F:D7:61:65:0B:62:9B:F9:9A:A5
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ZXlXwzdw8jbnqm_XYWULYpv5mqU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:58:02:5a:ce:3f:17:65:a4:b1:9c:53:1d:44:bf:28:f8:
         c9:1e:a4:79:f3:28:bf:fd:aa:4e:2f:56:3b:67:7a:ed:c3:0a:
         f1:dc:8a:a1:0b:89:ca:a7:00:dc:bc:06:e9:86:75:d7:ee:5e:
         a0:1c:6e:6e:99:68:70:77:b5:a4:9a:2c:54:ca:e9:da:52:a1:
         79:cf:e8:ae:b4:5c:e1:4d:8c:2c:66:d6:99:b0:58:9c:fa:ac:
         22:6e:e2:5e:58:0e:50:4c:62:73:fe:5a:b4:7b:10:b6:b8:14:
         d1:df:95:ee:8e:cd:fc:96:9e:7c:35:41:9d:61:cf:39:26:8f:
         6d:b9:c4:82:9f:4b:9c:4f:fe:b8:12:55:3e:e5:c9:69:31:8c:
         c8:11:60:5f:5e:25:7f:fd:42:78:b7:0c:ef:ae:a5:c9:df:73:
         0d:f7:03:71:6f:43:e8:0e:54:b7:0f:22:48:f4:e5:d3:14:e9:
         c5:1d:3b:2a:dd:6c:8c:25:83:fb:b7:cb:dd:64:31:37:5f:0d:
         49:bb:26:f6:16:21:23:0a:8f:fd:0f:90:a8:9e:f8:72:75:ca:
         da:a0:89:76:b9:03:ac:c2:39:ef:91:df:08:2b:40:66:a0:06:
         46:b9:3c:fd:f5:37:b6:80:8a:35:95:ee:b6:ed:c0:2f:3e:64:
         de:9f:33:b0
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTI0MDgzMTAx
MzM1NFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNjU3OTU3QzMzNzcwRjIz
NkU3QUE2RkQ3NjE2NTBCNjI5QkY5OUFBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALgphaH7DzhcgqJHmX54EcmDLLOUrdhaYRrfk3+OT3Vu17RRfUpH
P5begXax2IwceN0YutbdO+DUUcllUNbXA/jWs5/1fvP4zb6o1VDXtkgpVsnWyJl2
wIg4mgxwj6oaGuVXYkItYJO/YkY5cD8O3ryNaVXblAq6yDtV3gEX4KLCnY7QEkUd
qoVp03xHFwHgrry5n3HbJ1wQS7ksXMPD2NLo5Lq+4XAjTetCdarqiHDvn4PGm18L
hFNGEp4Sq1JYcOttsuiwMCE1e3bED5sEf9dCwMH66ES8KslFbsm/4L7IWdhP87ft
GFd2gGzaU6TcK3mPtm1i52KVYRfirCXtG3cCAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBRleVfDN3DyNueqb9dhZQtim/mapTAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL1pYbFh3emR3OGpibnFtX1hZV1VMWXB2NW1xVS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAOAzANBgkqhkiG9w0BAQsFAAOCAQEABLRYAlrOPxdlpLGcUx1Evyj4yR6kefMo
v/2qTi9WO2d67cMK8dyKoQuJyqcA3LwG6YZ11+5eoBxubplocHe1pJosVMrp2lKh
ec/orrRc4U2MLGbWmbBYnPqsIm7iXlgOUExic/5atHsQtrgU0d+V7o7N/JaefDVB
nWHPOSaPbbnEgp9LnE/+uBJVPuXJaTGMyBFgX14lf/1CeLcM766lyd9zDfcDcW9D
6A5Utw8iSPTl0xTpxR07Kt1sjCWD+7fL3WQxN18NSbsm9hYhIwqP/Q+QqJ74cnXK
2qCJdrkDrMI575HfCCtAZqAGRrk8/fU3toCKNZXutu3ALz5k3p8zsA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:27 2025 by rpki-client