Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/fhrrbyTuimJRhwpfyv1-hxEURy8.roa
File:                     fhrrbyTuimJRhwpfyv1-hxEURy8.roa (raw, json)
Hash identifier:          rU7GI1CDckITVbeCjEhZwHfCxAFqf64s5ikvqtkiU60=
Subject key identifier:   7E:1A:EB:6F:24:EE:8A:62:51:87:0A:5F:CA:FD:7E:87:11:14:47:2F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       1E
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/fhrrbyTuimJRhwpfyv1-hxEURy8.roa
Signing time:             Wed 04 Oct 2023 02:42:48 +0000
ROA not before:           Wed 04 Oct 2023 02:42:48 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        218.219.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  4 02:42:48 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7E1AEB6F24EE8A6251870A5FCAFD7E871114472F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:9a:e1:1f:d0:ca:37:e9:dc:fa:33:62:c2:
                    08:da:53:80:cc:50:53:22:11:b3:4e:7f:19:8c:26:
                    be:e2:05:95:b3:91:3f:17:57:bd:67:3c:be:9e:f1:
                    22:13:1c:7a:0c:6f:f4:ec:60:0f:7c:3f:ef:b8:d5:
                    fb:a5:a2:95:41:f9:88:26:64:7f:bf:17:11:15:a4:
                    3e:fd:0b:3d:2e:61:2f:15:05:ed:1f:0a:e1:24:c4:
                    b4:de:e0:37:83:65:2a:6f:1c:93:58:8f:2a:97:96:
                    af:74:10:7f:49:0f:a9:bc:28:88:7b:15:59:18:64:
                    1a:14:c2:7d:df:12:54:12:39:1c:d8:2c:6c:5b:7d:
                    19:09:32:69:ef:2c:2f:7a:a6:72:ec:dc:34:8b:0e:
                    6a:c5:b3:fb:93:aa:84:90:a8:98:90:47:5f:d9:15:
                    96:32:1b:72:d0:e0:16:0d:c7:01:7b:90:7e:76:23:
                    ac:a0:7b:1c:35:4e:f9:72:a0:54:87:11:f1:2d:42:
                    83:b0:9b:28:20:99:e8:0e:2b:46:46:2b:c6:d6:14:
                    88:dc:d7:9d:b9:42:4d:19:87:9a:16:47:65:15:88:
                    de:f8:53:bf:44:a6:dd:77:87:23:5b:b9:8d:5b:e1:
                    a0:ca:ef:53:cc:2a:c6:9f:80:cd:45:d5:ba:15:94:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1A:EB:6F:24:EE:8A:62:51:87:0A:5F:CA:FD:7E:87:11:14:47:2F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/fhrrbyTuimJRhwpfyv1-hxEURy8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ee:a5:e8:bb:9a:2c:36:55:7d:b4:1e:60:97:78:67:b6:ce:80:
         6b:e2:f7:75:49:81:63:57:71:ff:16:b9:42:22:d1:bf:b8:03:
         58:62:f7:74:83:8a:c7:8c:ae:69:df:f4:81:8c:45:fa:c3:08:
         bc:34:46:69:81:65:6e:fd:1a:62:ea:38:80:01:d0:42:c1:f1:
         19:37:65:71:03:63:a2:21:f1:91:cb:f9:e2:a8:3f:d2:07:a4:
         cd:ae:64:de:f1:0d:9c:b4:fc:55:e7:18:80:7d:7c:2d:3f:08:
         57:aa:a2:51:1b:25:a2:90:e7:4f:25:35:e2:37:c4:41:56:78:
         a5:60:d8:da:d4:28:4a:69:6c:a8:17:22:98:a5:4f:44:f5:97:
         1d:ae:21:10:72:38:d4:be:bc:0e:83:b3:bd:bb:96:cc:29:21:
         a6:45:53:84:4d:61:ed:44:6d:3c:4d:9a:52:1f:b4:95:29:77:
         60:3b:d1:7c:32:a2:1b:35:93:b7:54:db:91:d1:cd:3b:59:a6:
         d6:b0:62:8e:67:1a:93:8a:b0:44:21:a8:87:83:bd:cc:43:71:
         a8:1e:b0:29:5a:73:d0:2a:d5:f8:86:0e:bf:53:d6:06:01:de:
         6a:91:11:7e:a9:b3:8e:c5:d5:9b:f3:dd:44:68:b5:35:9e:84:
         ca:53:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:44 2024 by rpki-client on console-fra.rpki-client.org