Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/hJ_xDgCCV-b_33If8LoxWCf7Nr4.roa
File:                     hJ_xDgCCV-b_33If8LoxWCf7Nr4.roa (raw, json)
Hash identifier:          FZEUl7Svee9WY14afzp69bpmlo78ExuBFEkiajCZH8o=
Subject key identifier:   84:9F:F1:0E:00:82:57:E6:FF:DF:72:1F:F0:BA:31:58:27:FB:36:BE
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       4F
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hJ_xDgCCV-b_33If8LoxWCf7Nr4.roa
Signing time:             Sun 31 Mar 2024 01:32:50 +0000
ROA not before:           Sun 31 Mar 2024 01:32:50 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        122.103.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 01:32:50 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=849FF10E008257E6FFDF721FF0BA315827FB36BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:c4:22:d3:60:f5:5b:90:ec:48:60:ee:49:
                    d7:c9:cd:41:7b:85:04:1b:96:7c:04:75:f4:b5:a3:
                    41:c8:59:5f:d1:21:77:54:3b:4d:1c:57:5b:fb:31:
                    58:4b:c6:88:97:76:bf:5f:8b:ac:84:84:5c:ce:a0:
                    5b:d1:17:1d:de:7c:14:1a:3e:a9:b2:06:92:09:85:
                    44:d4:7d:72:e7:ca:0e:9b:04:71:08:44:a3:33:33:
                    5e:54:b6:c0:d9:bc:59:43:1b:81:f0:08:41:02:0e:
                    ae:66:2b:02:42:b6:c8:90:77:f0:68:b5:bd:28:81:
                    54:1d:b6:50:ab:32:46:ca:d5:aa:5e:f6:3f:af:ac:
                    1d:96:96:13:89:54:61:0b:a6:1e:1b:96:6f:ce:6b:
                    38:6b:3a:79:13:ea:6e:99:c7:98:be:e0:6f:93:d3:
                    22:23:e1:05:08:5c:45:07:fa:03:0a:09:b7:04:1f:
                    52:d0:d2:ba:56:f3:ac:08:6b:2d:f1:31:56:2a:fe:
                    0f:ed:61:96:d6:d0:83:53:8c:be:d3:93:a4:77:26:
                    3e:b7:1e:66:3a:6a:2f:fe:76:b8:7b:dc:12:4a:d1:
                    1d:94:9b:29:a1:bb:38:ca:6f:fe:8c:4f:24:94:9e:
                    77:f8:3b:67:0a:67:20:db:ae:97:2a:1e:95:fb:55:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:F1:0E:00:82:57:E6:FF:DF:72:1F:F0:BA:31:58:27:FB:36:BE
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/hJ_xDgCCV-b_33If8LoxWCf7Nr4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.103.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         af:6b:8d:0f:9c:b6:3a:63:13:34:e0:37:ae:0a:76:53:55:63:
         30:fe:14:04:9e:17:25:f3:a9:88:c6:30:95:90:69:e1:5e:66:
         90:ea:71:77:a2:10:6d:62:5d:d1:f0:6a:1a:8c:e3:e0:47:da:
         fa:ab:61:a7:99:46:61:0e:38:89:7c:b0:b4:02:92:8e:2a:e5:
         a1:a1:d9:03:be:39:48:7b:c2:a2:a9:e7:35:03:b9:0a:c8:ff:
         c5:2f:5e:f1:09:6c:17:89:86:22:11:58:dd:07:a3:0b:33:57:
         0d:04:54:0d:0f:17:77:56:c5:b8:e2:59:91:f5:19:97:4d:82:
         dc:52:29:79:a7:4b:43:03:57:d0:61:31:41:2d:31:af:63:81:
         71:ef:3d:74:83:8f:a9:f6:cd:92:13:fd:77:06:b1:32:91:cd:
         ed:2f:0d:21:94:f4:d6:fa:dc:71:e1:83:78:e1:f3:96:f2:ec:
         6a:a3:6e:28:4b:3c:6d:17:ba:99:be:09:b2:55:63:61:33:23:
         80:7f:97:c4:3d:f9:58:eb:0e:9f:42:e3:bc:88:61:10:f3:00:
         c1:ce:04:db:a2:af:dc:00:1e:5d:07:d0:6a:6a:ab:70:23:48:
         f3:cb:10:bd:e9:d9:9d:1a:57:97:3f:4c:c1:a6:b1:05:c4:85:
         e6:f5:e8:c6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTI0MDMzMTAx
MzI1MFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODQ5RkYxMEUwMDgyNTdF
NkZGREY3MjFGRjBCQTMxNTgyN0ZCMzZCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALgaxCLTYPVbkOxIYO5J18nNQXuFBBuWfAR19LWjQchZX9Ehd1Q7
TRxXW/sxWEvGiJd2v1+LrISEXM6gW9EXHd58FBo+qbIGkgmFRNR9cufKDpsEcQhE
ozMzXlS2wNm8WUMbgfAIQQIOrmYrAkK2yJB38Gi1vSiBVB22UKsyRsrVql72P6+s
HZaWE4lUYQumHhuWb85rOGs6eRPqbpnHmL7gb5PTIiPhBQhcRQf6AwoJtwQfUtDS
ulbzrAhrLfExVir+D+1hltbQg1OMvtOTpHcmPrceZjpqL/52uHvcEkrRHZSbKaG7
OMpv/oxPJJSed/g7ZwpnINuulyoelftVyHUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSEn/EOAIJX5v/fch/wujFYJ/s2vjAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL2hKX3hEZ0NDVi1iXzMzSWY4TG94V0NmN05yNC5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAV6Z4AwDQYJKoZIhvcNAQELBQADggEBAK9rjQ+ctjpjEzTgN64KdlNVYzD+FASe
FyXzqYjGMJWQaeFeZpDqcXeiEG1iXdHwahqM4+BH2vqrYaeZRmEOOIl8sLQCko4q
5aGh2QO+OUh7wqKp5zUDuQrI/8UvXvEJbBeJhiIRWN0HowszVw0EVA0PF3dWxbji
WZH1GZdNgtxSKXmnS0MDV9BhMUEtMa9jgXHvPXSDj6n2zZIT/XcGsTKRze0vDSGU
9Nb63HHhg3jh85by7GqjbihLPG0Xupm+CbJVY2EzI4B/l8Q9+VjrDp9C47yIYRDz
AMHOBNuir9wAHl0H0Gpqq3AjSPPLEL3p2Z0aV5c/TMGmsQXEheb16MY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:40 2024 by rpki-client on console-ams.rpki-client.org