Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ftNA0wjILMS39uUTh0bTdzGNoIk.roa
File:                     ftNA0wjILMS39uUTh0bTdzGNoIk.roa (raw, json)
Hash identifier:          RDhUSdnOE1IvwI1flByT7F3IKJtSZ6HOwvBDcry6xGs=
Subject key identifier:   7E:D3:40:D3:08:C8:2C:C4:B7:F6:E5:13:87:46:D3:77:31:8D:A0:89
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       52
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ftNA0wjILMS39uUTh0bTdzGNoIk.roa
Signing time:             Sun 31 Mar 2024 01:32:51 +0000
ROA not before:           Sun 31 Mar 2024 01:32:51 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        122.223.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 01:32:51 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=7ED340D308C82CC4B7F6E5138746D377318DA089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:39:fd:9b:96:51:f0:90:cf:72:90:b1:1b:
                    fb:e2:85:8d:34:8d:b2:88:4f:70:67:c6:fd:ec:f4:
                    36:98:db:59:ee:9c:98:51:a6:31:f0:54:25:e7:c9:
                    cb:fb:a4:4d:16:20:7a:db:7c:4a:b8:71:e9:1c:1d:
                    2b:78:86:c5:76:44:74:66:66:fc:0b:54:a6:7b:52:
                    72:f1:d8:3d:44:be:4b:c5:fe:17:a8:3e:76:32:fc:
                    4a:05:9c:36:8f:13:bd:d6:b5:41:c3:9d:36:4f:ff:
                    28:55:74:85:71:c2:df:cb:7e:96:ff:f2:45:2b:d0:
                    4f:e0:b9:ff:d9:cf:74:db:de:25:ad:af:0c:f0:fb:
                    19:60:45:84:b8:89:aa:ed:55:fa:be:a6:f2:4c:fc:
                    aa:15:12:1d:32:52:d4:f7:2b:ab:f9:9f:e5:00:8a:
                    39:23:af:19:2a:8e:64:b9:fb:2a:3c:65:88:5d:4f:
                    40:5b:48:73:87:1f:19:49:1d:bd:f4:9a:79:7f:ee:
                    df:f7:e3:54:37:72:f9:41:11:b4:7d:44:76:b5:48:
                    9b:85:96:1a:e8:58:b9:e0:10:19:e5:39:3f:59:a3:
                    6a:94:17:5c:82:c2:c5:40:07:e2:aa:e5:98:76:d3:
                    bd:3b:40:e3:b8:73:f7:d2:fa:fd:8e:59:5a:b7:89:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:40:D3:08:C8:2C:C4:B7:F6:E5:13:87:46:D3:77:31:8D:A0:89
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ftNA0wjILMS39uUTh0bTdzGNoIk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:37:19:14:0f:21:98:d2:30:6c:38:75:24:7d:93:d2:bc:24:
         2c:59:f6:63:44:ed:8a:c6:a2:dd:14:6b:8c:be:5d:72:45:8d:
         ef:3b:27:49:67:f7:d2:08:3e:4e:c0:72:1c:60:24:09:77:d2:
         c9:6b:11:15:f1:e4:6d:86:d4:cd:1e:2e:4b:9a:4c:38:19:d1:
         3e:da:b0:31:52:6b:2d:08:61:bc:ce:be:03:00:09:2d:53:e6:
         88:1e:c9:34:76:bc:a2:82:d7:fd:e3:ed:20:aa:57:c2:09:29:
         a3:a8:f2:dd:f5:ff:cc:53:e8:b9:dd:e0:54:62:b1:f3:93:07:
         c4:f8:d6:e7:39:8b:08:45:54:5d:20:6c:a1:fd:da:4e:07:c5:
         c5:7c:99:26:df:ff:2b:db:e0:dd:23:9f:50:e0:61:3a:5a:56:
         d9:8f:d6:65:f5:d5:9f:47:c6:ec:a2:12:61:da:90:20:e1:84:
         5e:fc:01:b2:0b:a7:bd:fb:7b:ec:c0:ac:4d:bf:81:7f:76:86:
         19:e8:af:bf:f1:a9:6f:9d:cb:d0:60:ef:cd:7c:2f:14:24:57:
         41:0e:8b:67:7f:f2:ed:6d:3c:4f:54:a0:dd:5e:dd:bc:d9:2b:
         07:07:3b:20:ee:59:14:e9:a9:d9:97:43:09:c5:7e:1e:f1:43:
         84:29:ad:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org