Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ao1ikenLEW2EBk-XLAmxMK9a6K8.roa
File:                     ao1ikenLEW2EBk-XLAmxMK9a6K8.roa (raw, json)
Hash identifier:          S3yRisTdvSOZ+iffUTWzJ5j/ICfh9QXS4MQXYfQQ2Ro=
Subject key identifier:   6A:8D:62:91:E9:CB:11:6D:84:06:4F:97:2C:09:B1:30:AF:5A:E8:AF
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       5D
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ao1ikenLEW2EBk-XLAmxMK9a6K8.roa
Signing time:             Sat 31 Aug 2024 01:33:55 +0000
ROA not before:           Sat 31 Aug 2024 01:33:55 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        211.13.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:33:55 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=6A8D6291E9CB116D84064F972C09B130AF5AE8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:b8:96:0e:40:62:81:83:b8:72:aa:e5:5b:
                    78:9e:be:8a:58:22:b7:67:12:08:17:4c:6c:78:aa:
                    a0:65:95:76:f9:da:e4:7d:0c:e6:47:4a:80:12:7a:
                    82:42:42:25:7d:2a:66:b7:c3:74:72:8b:66:09:af:
                    01:7c:7f:c7:3a:a7:0c:eb:11:a1:c7:cb:07:cb:c3:
                    fb:be:0c:50:24:82:5a:e3:f6:32:72:bc:aa:8b:8b:
                    5b:b8:6b:23:ec:f7:52:37:25:80:8b:75:cc:36:a5:
                    34:96:77:1e:c3:a2:0d:74:6f:68:24:bd:67:48:ab:
                    b4:02:88:33:5c:c5:a1:03:52:dc:18:03:13:44:fa:
                    d9:dc:a4:d2:91:7a:b7:97:48:ff:30:19:81:e0:01:
                    f6:99:f9:12:e9:af:6c:c5:34:16:f4:11:26:cf:b7:
                    02:6a:77:6f:ca:f7:aa:6b:22:a6:9f:d8:5a:78:35:
                    8b:d9:39:35:0b:7a:a7:0d:06:22:0a:4b:0d:6f:7f:
                    fa:06:77:03:96:5b:98:9d:9a:2d:5f:62:ee:c0:ea:
                    6a:a5:93:8c:53:62:9b:af:de:c4:a8:92:36:ba:0d:
                    e2:fd:dd:72:b9:63:77:66:0c:f4:38:79:70:42:5a:
                    09:92:e0:54:ac:78:bf:ba:60:99:05:e3:e7:2b:88:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8D:62:91:E9:CB:11:6D:84:06:4F:97:2C:09:B1:30:AF:5A:E8:AF
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ao1ikenLEW2EBk-XLAmxMK9a6K8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:fb:23:bb:bd:76:bf:fc:32:3f:91:4e:a2:36:49:24:3a:97:
         34:83:96:7f:10:56:96:c3:50:b4:76:3b:68:27:85:6d:57:35:
         00:ec:75:bc:f0:7a:76:05:df:e9:c0:ff:6c:01:9a:90:51:1c:
         d8:4e:b3:07:9d:b2:35:59:9b:30:69:a9:b2:bf:ec:a9:bd:cf:
         b8:b6:de:a2:46:2e:a3:1b:01:a1:08:b2:99:02:3e:04:b4:ed:
         ab:98:d7:36:cf:74:96:1c:b9:05:c4:20:6a:77:03:5c:a2:4c:
         1d:b0:b3:c5:2f:95:4d:d4:64:e9:0d:fd:0f:f2:9e:a2:01:65:
         d0:d2:c8:21:32:23:cc:1a:41:63:b3:8a:ee:81:83:e5:b5:b6:
         09:1a:22:83:0e:4f:ff:4d:24:a2:41:08:4e:e8:1c:15:4c:12:
         9e:b1:73:64:c9:92:79:0c:8e:38:67:16:92:03:2f:ef:d2:8c:
         48:b5:aa:30:cb:2c:99:3b:73:0b:91:67:8d:65:79:62:73:78:
         36:26:ad:3d:c9:3f:e2:a4:55:dd:18:8d:f5:ab:f9:00:85:c9:
         91:51:b8:46:11:0a:63:9f:3a:02:b1:ab:fc:1c:8a:0a:dd:06:
         3d:3c:b8:ee:ff:d8:e6:4e:aa:38:7d:06:c6:1f:54:b3:e2:52:
         d7:43:82:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org