Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/jURGa1GPMN6Bgl7UdBJKtiqiQTk.roa
File:                     jURGa1GPMN6Bgl7UdBJKtiqiQTk.roa (raw, json)
Hash identifier:          XtyfnIb1goG9ral9J0Ypg1YHrOD2qpDxnVNTlHCf3lU=
Subject key identifier:   8D:44:46:6B:51:8F:30:DE:81:82:5E:D4:74:12:4A:B6:2A:A2:41:39
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       2A
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jURGa1GPMN6Bgl7UdBJKtiqiQTk.roa
Signing time:             Thu 05 Oct 2023 03:26:05 +0000
ROA not before:           Thu 05 Oct 2023 03:26:05 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        122.249.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:26:05 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8D44466B518F30DE81825ED474124AB62AA24139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:24:3e:6b:8f:8f:c9:04:06:2e:8f:6f:30:
                    cf:59:ed:76:87:c9:8e:cb:2a:55:75:60:87:d3:1e:
                    be:f1:d3:c8:dd:54:32:62:81:54:a5:4a:88:58:6b:
                    3a:73:98:67:50:44:2b:a8:06:0f:a5:d6:40:3b:a3:
                    8a:74:44:e2:3a:cf:7f:77:e1:65:fc:5e:21:9e:5d:
                    ab:36:19:18:37:94:6f:b1:d9:55:af:86:d4:6e:a9:
                    35:de:60:59:79:df:74:1f:d0:db:7e:77:a5:22:47:
                    6f:6a:bd:22:9f:65:c6:81:a9:85:ae:bf:78:50:05:
                    be:4e:eb:fe:d4:27:43:bb:a9:df:44:5c:72:47:46:
                    b2:bc:19:b4:61:66:a0:55:4c:72:49:0c:ed:9f:73:
                    e4:10:3d:b4:ab:64:15:0c:8e:c9:a9:d4:28:ec:a5:
                    2b:25:a1:1b:7e:7e:b0:3f:bc:79:ed:dd:ea:26:c9:
                    d9:ba:1f:41:61:90:f9:39:7f:bd:0a:bb:52:71:15:
                    79:e3:d9:87:fb:e4:d5:83:57:ee:b4:38:e5:fa:96:
                    82:9f:a6:b9:a1:e7:79:e5:b0:7e:f7:b3:71:63:93:
                    52:93:60:f9:3f:1a:ec:44:a1:24:07:be:af:e3:fe:
                    be:9a:97:79:d4:70:53:79:26:39:c5:92:f8:2e:ea:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:46:6B:51:8F:30:DE:81:82:5E:D4:74:12:4A:B6:2A:A2:41:39
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/jURGa1GPMN6Bgl7UdBJKtiqiQTk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:d5:ea:5b:27:59:9f:b3:cb:92:6a:16:91:c0:4d:5a:2f:
         cc:d8:c8:65:51:b8:73:d0:c4:f6:4e:c0:36:65:2e:9c:e3:e9:
         0e:f8:23:38:03:b0:1d:de:9c:c9:e7:38:6e:fe:cd:8c:ec:f7:
         97:4d:dc:46:8f:f9:14:a4:11:ae:33:8c:8a:99:49:f4:15:11:
         05:a3:30:fc:48:78:7f:d8:97:b2:10:f6:cf:c0:35:45:98:6a:
         e3:0e:57:11:e6:3d:f3:7e:bf:18:b1:84:f5:f3:5e:d6:f6:ae:
         cf:5d:97:31:f6:b1:6d:f6:81:27:f1:69:9e:26:ca:42:01:9a:
         56:f6:12:e0:f9:9b:99:ea:73:f9:56:73:31:6d:3e:5c:41:5d:
         c5:21:57:45:1f:fb:34:34:cf:bc:34:16:d2:e3:ea:24:b8:49:
         9b:8a:51:90:42:3f:34:40:ba:11:dd:e4:6c:19:86:76:1b:d7:
         64:70:79:8d:15:83:72:30:cd:74:b7:ce:72:d3:e3:94:5e:2e:
         55:06:67:77:12:27:ca:21:bf:c9:d8:10:2d:c0:e7:f7:bb:94:
         cb:84:57:19:b0:49:3b:19:8e:24:f9:e6:25:fe:c1:cb:5e:16:
         94:24:a8:16:22:72:8c:fb:10:c8:cf:15:17:c6:90:98:59:42:
         7f:36:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:47 2024 by rpki-client on console-ams.rpki-client.org