Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/l750xBHaTCXm7cu_owcnTtSz4A8.roa
File:                     l750xBHaTCXm7cu_owcnTtSz4A8.roa (raw, json)
Hash identifier:          bLUaER0HYbhykQ4d3a0BgzvvCxcM/Nc6x6qIiXuXXXQ=
Subject key identifier:   97:BE:74:C4:11:DA:4C:25:E6:ED:CB:BF:A3:07:27:4E:D4:B3:E0:0F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       33
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/l750xBHaTCXm7cu_owcnTtSz4A8.roa
Signing time:             Thu 05 Oct 2023 03:29:09 +0000
ROA not before:           Thu 05 Oct 2023 03:29:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        203.189.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:29:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=97BE74C411DA4C25E6EDCBBFA307274ED4B3E00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:6e:a3:37:b1:b2:bf:99:e5:ab:a7:24:b1:94:
                    e2:1f:3f:99:e9:a4:37:2f:f5:3f:a1:ff:36:52:df:
                    a3:ce:a9:b9:1f:98:61:53:1b:bb:a3:55:73:7c:c5:
                    05:94:ab:1a:1a:d6:32:6c:29:f2:6d:18:79:81:8d:
                    49:45:8c:1a:58:cb:bf:ea:35:40:4d:a9:05:4d:b9:
                    de:b6:a4:d9:fe:b6:17:a3:93:3d:c6:ef:21:bf:a6:
                    88:98:02:6b:8c:60:3c:86:52:27:b8:bd:da:93:ef:
                    6b:2e:69:07:d2:76:b6:0e:03:ba:84:58:2d:3c:25:
                    42:f9:8d:40:4f:0d:ac:cd:06:94:6b:2f:b0:bf:62:
                    a4:52:a0:eb:2f:b1:92:55:e7:3e:da:0a:cc:df:c3:
                    02:5d:2e:db:15:77:be:f0:46:50:f1:eb:7e:90:87:
                    06:ff:8f:c7:de:c5:09:d2:c2:97:93:c0:10:63:06:
                    e7:2c:0e:74:85:96:cd:2d:33:e1:e3:42:ec:1c:46:
                    0c:b6:e7:45:e1:28:2b:dd:27:04:e2:50:f5:40:dc:
                    17:14:56:fd:b3:12:df:46:bc:6b:2a:89:b9:2a:46:
                    38:0c:7f:2d:47:1b:46:b1:70:39:c3:fd:8f:75:dc:
                    22:e0:e9:65:cd:30:aa:71:59:ad:b5:f0:40:25:2b:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:74:C4:11:DA:4C:25:E6:ED:CB:BF:A3:07:27:4E:D4:B3:E0:0F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/l750xBHaTCXm7cu_owcnTtSz4A8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.189.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:53:de:4b:c6:63:df:4f:83:71:5d:1d:ac:44:04:61:0a:ab:
         e6:6d:71:3d:31:9c:a7:f8:02:6f:e4:f7:48:be:95:a2:d8:35:
         bb:16:87:18:5c:62:f2:f3:67:19:2b:1f:74:ff:39:4f:16:76:
         11:a0:ff:84:04:52:7f:8c:45:fb:d3:c0:3c:08:c7:6e:63:8f:
         94:18:74:5c:a0:b4:a3:37:fa:8d:dc:ba:5d:f1:83:5c:11:2a:
         29:11:74:8d:ef:ea:20:39:df:3f:ab:3d:77:92:64:69:f2:80:
         da:2e:d6:5a:00:02:9a:a7:96:b4:67:c8:b5:b8:ce:88:43:12:
         a6:11:55:d6:11:5b:9d:c2:43:7f:ed:ac:35:9f:65:c0:b3:dd:
         df:8e:51:ba:51:5a:df:cb:5e:c7:e9:5e:ae:4b:8f:4e:69:68:
         18:69:9f:7b:61:da:57:3b:44:28:93:e3:41:e2:08:7d:0d:a8:
         13:ef:cd:90:e4:53:73:35:d6:fb:a7:2e:52:e6:d8:9c:f5:34:
         0f:7b:f0:f1:d3:19:3f:54:a8:15:8f:6f:46:c2:66:00:42:5f:
         ad:18:74:18:f7:8b:1d:05:3c:3e:81:91:89:71:aa:7b:db:0a:
         08:83:eb:9f:df:56:b8:1b:8e:6a:02:66:ee:2c:6b:cc:57:09:
         04:37:4b:31
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTIzMTAwNTAz
MjkwOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoOTdCRTc0QzQxMURBNEMy
NUU2RURDQkJGQTMwNzI3NEVENEIzRTAwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAP9uozexsr+Z5aunJLGU4h8/memkNy/1P6H/NlLfo86puR+YYVMb
u6NVc3zFBZSrGhrWMmwp8m0YeYGNSUWMGljLv+o1QE2pBU253rak2f62F6OTPcbv
Ib+miJgCa4xgPIZSJ7i92pPvay5pB9J2tg4DuoRYLTwlQvmNQE8NrM0GlGsvsL9i
pFKg6y+xklXnPtoKzN/DAl0u2xV3vvBGUPHrfpCHBv+Px97FCdLCl5PAEGMG5ywO
dIWWzS0z4eNC7BxGDLbnReEoK90nBOJQ9UDcFxRW/bMS30a8ayqJuSpGOAx/LUcb
RrFwOcP9j3XcIuDpZc0wqnFZrbXwQCUrGocCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSXvnTEEdpMJebty7+jBydO1LPgDzAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL2w3NTB4QkhhVENYbTdjdV9vd2NuVHRTejRBOC5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXLvSAwDQYJKoZIhvcNAQELBQADggEBAFRT3kvGY99Pg3FdHaxEBGEKq+ZtcT0x
nKf4Am/k90i+laLYNbsWhxhcYvLzZxkrH3T/OU8WdhGg/4QEUn+MRfvTwDwIx25j
j5QYdFygtKM3+o3cul3xg1wRKikRdI3v6iA53z+rPXeSZGnygNou1loAApqnlrRn
yLW4zohDEqYRVdYRW53CQ3/trDWfZcCz3d+OUbpRWt/LXsfpXq5Lj05paBhpn3th
2lc7RCiT40HiCH0NqBPvzZDkU3M11vunLlLm2Jz1NA978PHTGT9UqBWPb0bCZgBC
X60YdBj3ix0FPD6BkYlxqnvbCgiD65/fVrgbjmoCZu4sa8xXCQQ3SzE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org