Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/iXxCdjQOIW77TGu43O1g-cEHdh0.roa
File:                     iXxCdjQOIW77TGu43O1g-cEHdh0.roa (raw, json)
Hash identifier:          6pWuKMg6eJZIzNIJNIURuqR92I06DSOcYGojTegMAtw=
Subject key identifier:   89:7C:42:76:34:0E:21:6E:FB:4C:6B:B8:DC:ED:60:F9:C1:07:76:1D
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       4B
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/iXxCdjQOIW77TGu43O1g-cEHdh0.roa
Signing time:             Sun 31 Mar 2024 01:32:47 +0000
ROA not before:           Sun 31 Mar 2024 01:32:47 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        36.3.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 01:32:47 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=897C4276340E216EFB4C6BB8DCED60F9C107761D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:1c:dc:d8:51:9c:6a:f8:6c:33:01:04:96:
                    d5:cd:c2:a6:25:b6:13:3d:7d:51:b7:0d:ae:f3:50:
                    6e:c2:38:76:b6:33:32:b1:1d:e8:bf:1f:9b:ec:de:
                    5c:41:e5:6b:a0:f3:79:74:a1:95:82:3b:50:47:f2:
                    3c:62:c0:9d:1f:14:3c:6a:99:88:8f:c2:fb:3e:8f:
                    10:72:13:f8:23:20:b2:d6:f5:ae:30:ec:ab:3a:4b:
                    81:8f:a7:c5:32:d4:2f:04:e2:b8:f5:43:9a:ed:09:
                    1a:87:17:81:d1:b6:86:84:4d:40:51:01:50:ea:5a:
                    0c:83:0f:52:58:8b:37:ca:e7:5a:da:af:a3:48:8d:
                    f8:18:bf:43:e3:25:f7:c8:22:f1:13:95:3d:c1:96:
                    09:1c:54:4c:27:ed:50:59:63:3f:c4:75:1f:b6:66:
                    36:dd:e8:48:56:a5:39:89:df:ca:f3:30:61:ae:75:
                    34:d1:ef:3b:22:80:95:ed:b1:39:c0:4d:1f:d4:ed:
                    27:e2:8a:c8:d6:85:8c:e2:16:8b:32:72:14:1d:db:
                    9e:0d:9e:00:96:e4:11:3e:22:82:49:b2:77:47:be:
                    a1:3e:77:b6:a8:e0:ce:2f:38:81:a8:af:a4:a1:a6:
                    aa:4f:5f:8a:13:9a:06:90:f7:c6:89:58:c4:5c:2c:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7C:42:76:34:0E:21:6E:FB:4C:6B:B8:DC:ED:60:F9:C1:07:76:1D
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/iXxCdjQOIW77TGu43O1g-cEHdh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.3.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:73:9c:b8:58:c1:b5:6d:5e:86:6b:d6:56:e2:e0:ee:38:
         f9:df:7f:39:f7:17:2b:13:24:85:61:ba:e0:32:cb:ef:f9:62:
         f3:57:e1:61:30:e9:e2:d5:52:a9:44:c7:79:7a:88:12:e5:35:
         84:ca:8c:e2:fa:1e:5d:b7:75:f8:a4:db:b6:80:05:c7:2f:22:
         c6:3e:b2:67:5e:01:c7:48:c9:01:da:85:ef:5d:7b:07:68:7e:
         0b:fa:f1:05:1b:07:43:75:cf:57:9b:37:d3:db:02:96:bf:fe:
         89:16:76:20:df:f2:f9:3b:6e:08:db:e1:7a:5f:df:77:98:85:
         1a:2c:d5:0a:70:88:d2:8b:7b:5b:87:03:b9:45:e1:a1:e6:f5:
         6d:f5:19:d9:45:d0:88:54:fb:95:53:7c:f7:dd:c1:0a:9d:41:
         47:6f:c9:6a:7e:ea:c4:2b:de:02:55:b6:1a:04:b2:a9:49:51:
         12:83:04:cf:8e:b5:26:ef:a0:b0:2e:47:d1:00:39:a8:8e:7c:
         b4:58:fa:cf:4c:91:31:56:7d:c4:b7:be:4d:15:6a:81:33:6e:
         97:bb:64:e1:c2:a8:74:57:00:8e:74:53:fe:f3:b0:c4:d3:83:
         df:2a:59:9d:0c:d0:7e:d1:78:aa:08:1b:70:e0:3c:76:fb:81:
         b2:00:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org