Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/e3jXKg5P9_8enSZIX28xw9wu3q4.roa
File:                     e3jXKg5P9_8enSZIX28xw9wu3q4.roa (raw, json)
Hash identifier:          h8MDK77wwPqB2CZb/xMylOgsO8MPHJolXLc3wqJhUQI=
Subject key identifier:   7B:78:D7:2A:0E:4F:F7:FF:1E:9D:26:48:5F:6F:31:C3:DC:2E:DE:AE
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       65
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/e3jXKg5P9_8enSZIX28xw9wu3q4.roa
Signing time:             Sat 31 Aug 2024 01:33:59 +0000
ROA not before:           Sat 31 Aug 2024 01:33:59 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        219.121.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:33:59 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7B78D72A0E4FF7FF1E9D26485F6F31C3DC2EDEAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:14:87:57:0f:6a:e4:b0:9c:cf:48:e0:4d:fa:
                    c0:59:20:51:54:ba:ca:cc:f7:88:b0:6a:ec:9e:7b:
                    e7:21:0b:9a:40:da:f8:a9:52:62:ab:31:2c:ed:e6:
                    3c:22:ba:dc:a1:8e:0d:ec:84:35:a6:a2:f9:ae:67:
                    64:50:2b:b2:19:1a:56:a4:e3:4d:ed:4a:b0:45:aa:
                    84:bf:df:9d:a3:ae:b3:f0:e5:dc:7e:cb:28:e6:9c:
                    69:b5:04:a9:26:38:47:a2:2a:8b:ad:a3:86:c1:d0:
                    5a:1b:ab:16:3a:24:6e:4d:86:e2:20:7a:09:0c:e0:
                    2d:f7:02:74:d3:04:5f:77:33:f6:53:a3:c9:bc:c1:
                    11:78:ee:49:20:95:d2:40:ce:85:76:af:21:eb:9d:
                    7d:09:3c:e5:a0:77:66:94:95:ea:8f:eb:b9:78:2a:
                    98:d8:e4:ff:4a:de:9e:f4:5d:4a:7f:1b:27:62:77:
                    0a:4a:b8:fb:2d:57:4b:45:be:0c:f9:a3:ad:6e:94:
                    28:52:9b:98:da:2a:93:24:c3:73:ff:24:fe:fd:d7:
                    65:b6:60:03:8a:58:6e:40:66:8b:05:0d:d8:66:4e:
                    01:41:bd:96:10:93:09:7b:8a:20:b2:6a:c5:ed:5d:
                    32:be:6f:96:5a:85:8f:51:56:7d:56:08:7c:26:66:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:78:D7:2A:0E:4F:F7:FF:1E:9D:26:48:5F:6F:31:C3:DC:2E:DE:AE
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/e3jXKg5P9_8enSZIX28xw9wu3q4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:d8:e9:b3:10:7e:c0:ff:9a:d7:b6:5a:a4:db:26:33:6c:0e:
         dc:ce:14:10:37:d1:ff:71:61:26:90:d8:5b:59:3f:9b:9f:31:
         2f:02:4d:38:be:63:68:c0:b0:47:7a:76:de:03:bd:25:9c:28:
         7b:3e:2f:79:b5:96:20:69:32:f7:99:df:48:9c:3d:34:36:5e:
         84:0c:b7:76:1b:99:6e:e4:f5:a5:31:4b:9e:75:cd:8d:4f:64:
         b0:16:97:fd:ea:62:90:11:b8:a4:c1:ac:dd:50:ef:11:1c:0f:
         3b:4e:33:de:2a:24:ce:a5:98:19:63:12:2d:c6:d1:b0:61:39:
         0b:49:d8:cc:7a:e4:0c:6d:7d:94:a8:86:e7:e1:e1:63:ab:d1:
         e2:41:9a:00:6a:2a:01:56:17:6e:60:c4:26:9b:59:7d:9d:ce:
         51:cf:eb:28:00:97:75:a2:eb:a4:e7:1f:1a:ab:85:74:89:25:
         09:e5:71:87:80:6c:b9:d4:4f:91:83:18:8f:ea:13:45:88:66:
         8b:9a:07:6f:7c:c7:b1:ba:a7:72:20:15:dd:53:ca:a8:f1:ab:
         75:01:6e:a7:cc:e2:dc:20:92:38:6e:2f:ef:a1:e3:95:65:92:
         82:1b:60:68:14:bb:52:b0:5c:6d:10:9a:13:76:7a:97:50:e1:
         9b:bb:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org