Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/kUauEl8BBccNN0tXH3q41vyeo9I.roa
File:                     kUauEl8BBccNN0tXH3q41vyeo9I.roa (raw, json)
Hash identifier:          INoPJr37xYiwSku9eqOcSEhFrPbGj2TJRJCwAGZlhF0=
Subject key identifier:   91:46:AE:12:5F:01:05:C7:0D:37:4B:57:1F:7A:B8:D6:FC:9E:A3:D2
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       6A
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/kUauEl8BBccNN0tXH3q41vyeo9I.roa
Signing time:             Sat 31 Aug 2024 01:34:02 +0000
ROA not before:           Sat 31 Aug 2024 01:34:02 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        116.70.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:02 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=9146AE125F0105C70D374B571F7AB8D6FC9EA3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:6e:0f:f3:08:e3:2f:b4:87:02:22:b2:cf:
                    46:09:67:44:77:95:ce:b0:d4:51:f2:02:b2:7d:6b:
                    12:36:22:0e:1a:4e:9b:bf:ab:f3:d1:aa:68:31:62:
                    7c:8a:58:15:80:49:b3:d0:5c:a8:80:70:23:60:e0:
                    b5:fc:ea:ba:37:b6:f6:6a:99:df:8b:a9:67:5e:ad:
                    5c:45:ac:b6:0c:42:7a:59:61:a0:8e:b8:44:64:39:
                    26:62:fc:11:f3:ee:be:91:46:d1:b3:b5:b3:7c:c1:
                    b7:b8:bc:3f:47:83:b9:8e:f1:35:9b:f9:10:df:77:
                    fd:db:3f:fd:bc:d3:5f:db:56:9b:d2:b8:4f:a6:c9:
                    d6:d9:f9:ec:06:b3:2c:26:81:c7:48:9c:66:72:9d:
                    44:56:f6:5d:c2:5c:9b:ee:d0:7f:5d:c5:07:d1:b8:
                    d9:a6:07:28:d3:b7:aa:2c:3d:c9:be:c1:b6:09:03:
                    5a:f5:fb:93:b5:95:dd:dc:ba:36:ec:5b:13:9b:f0:
                    eb:98:00:7b:5f:c8:da:2b:c3:9d:d4:3b:f7:6f:71:
                    60:cf:31:85:ad:37:62:da:d1:e5:30:fe:92:d2:4a:
                    ba:b4:59:7c:f8:f8:5f:c2:82:c4:76:c9:1c:cf:f2:
                    8e:e8:58:28:77:0c:c9:5d:07:31:0d:4a:b1:75:57:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:46:AE:12:5F:01:05:C7:0D:37:4B:57:1F:7A:B8:D6:FC:9E:A3:D2
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/kUauEl8BBccNN0tXH3q41vyeo9I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.70.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:81:b6:0d:6b:8b:3b:fb:ca:fa:ec:ed:3c:0d:c9:51:8e:
         e8:00:96:cd:2d:ea:f0:c8:55:76:9e:a9:12:b2:66:b0:8f:d9:
         63:78:1d:3e:58:a6:d9:73:82:5b:8b:df:df:2c:12:f5:c4:12:
         a5:e6:00:97:1c:f3:81:9e:8b:a1:ce:0e:7d:de:4a:5e:67:9a:
         6f:1c:4d:86:8f:7e:7c:28:dc:e5:4a:c2:b7:fc:67:e0:af:ad:
         7a:8a:00:33:a3:30:65:af:26:71:e3:a0:72:61:eb:03:c9:33:
         35:2d:9a:57:8c:aa:69:60:a8:9e:be:54:11:f7:28:05:af:86:
         78:b8:56:4f:f2:0f:46:04:cd:23:1c:31:d8:de:8f:c4:9a:52:
         19:9e:b5:86:b4:f9:45:81:b3:93:c4:5b:79:8e:70:49:e0:db:
         a3:30:89:d2:72:32:1c:ca:77:49:71:aa:e3:dc:2c:f4:e4:b9:
         d0:6e:bc:d1:a2:a9:31:e2:d5:d2:f3:98:c7:e9:b4:d3:5a:74:
         6e:7e:07:fb:ab:58:71:54:e2:30:8c:be:a8:e2:e7:a6:71:4e:
         f0:bf:89:b5:7a:bf:2f:d9:c2:1b:d4:d3:f9:50:8f:8e:b4:b9:
         aa:4d:bc:43:d3:dc:1f:75:0d:50:86:fd:70:ad:fd:87:db:07:
         12:97:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org