Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/lK6-z4_GHlu5OFiHcQLR5KX4LtM.roa
File:                     lK6-z4_GHlu5OFiHcQLR5KX4LtM.roa (raw, json)
Hash identifier:          MdBCVaVIZN1QIG2AC0ul6mLhazQNrotgvHF2GpLg1/Y=
Subject key identifier:   94:AE:BE:CF:8F:C6:1E:5B:B9:38:58:87:71:02:D1:E4:A5:F8:2E:D3
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       51
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/lK6-z4_GHlu5OFiHcQLR5KX4LtM.roa
Signing time:             Sun 31 Mar 2024 01:32:51 +0000
ROA not before:           Sun 31 Mar 2024 01:32:51 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        122.223.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 01:32:51 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=94AEBECF8FC61E5BB93858877102D1E4A5F82ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:48:ea:75:cc:34:5c:1b:8f:f7:f6:78:ff:
                    fa:2c:a5:a8:db:0e:0e:38:f4:2c:21:a6:b1:f2:5a:
                    77:2d:eb:33:f9:0d:5c:cf:75:dc:12:2c:dc:23:3f:
                    bd:cd:8c:cb:ea:81:4f:93:f7:77:4c:85:a2:64:ce:
                    c4:18:2f:68:60:81:2b:4f:bb:16:f4:09:0e:6e:83:
                    2b:73:4b:26:8d:66:fa:f3:ad:b1:26:3e:1b:30:91:
                    93:ca:8d:90:27:29:2f:a6:45:09:37:d1:aa:44:3c:
                    9a:7d:ac:e3:36:72:63:3d:7a:56:c4:ef:e4:c3:3d:
                    77:78:65:40:75:8e:13:4e:f1:36:00:26:30:15:80:
                    4d:19:a8:17:a3:24:41:ae:fd:a2:8b:06:94:1b:f6:
                    bc:96:43:95:24:8f:cf:ac:6e:4a:39:bf:31:8e:1f:
                    3d:80:15:ab:f9:5e:5b:cd:63:15:23:90:fc:88:ed:
                    57:9e:db:7b:e2:72:5b:b5:13:c9:6c:23:38:fe:04:
                    4f:1f:91:90:f2:40:ff:91:30:c7:f3:40:8e:50:4c:
                    48:b7:1d:e7:9b:6b:1f:9d:6c:da:b9:42:17:e4:67:
                    c5:4b:4a:35:57:82:2e:9e:4c:c0:ad:26:11:62:50:
                    0c:07:01:6d:57:a7:39:dd:c8:f1:38:47:6e:bc:77:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AE:BE:CF:8F:C6:1E:5B:B9:38:58:87:71:02:D1:E4:A5:F8:2E:D3
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/lK6-z4_GHlu5OFiHcQLR5KX4LtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.223.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:da:8f:89:31:2a:1c:c1:9b:cc:c0:a8:98:85:15:c7:0e:
         4b:15:ca:3d:92:fd:b8:50:61:a6:f5:ad:42:39:26:ad:db:77:
         e6:a2:a5:fe:b9:3e:37:7a:96:d9:f9:89:b0:a9:be:29:5f:0b:
         e8:b2:5c:11:cc:54:da:2e:85:e9:bf:e4:95:34:20:05:c9:58:
         4d:f4:16:a4:f8:78:81:59:b2:1b:4f:8e:55:33:04:95:1d:74:
         ba:b9:8e:41:01:7c:9d:1a:f9:e9:9f:22:1d:02:6e:fb:4e:f8:
         0b:b7:68:05:17:e5:c5:b7:e1:ef:91:71:da:f3:72:d3:a6:b7:
         41:06:cc:d6:30:d3:f2:a3:83:27:ff:31:b6:40:52:76:eb:a2:
         bd:46:7f:ea:8e:ae:0a:71:62:f2:1d:86:00:8a:af:84:1e:b3:
         88:de:8e:c4:bc:50:a2:a8:1d:21:d9:f8:ef:ab:eb:d4:a8:c8:
         a9:79:ab:0f:66:a3:fb:59:f4:b0:88:aa:d0:12:f8:cc:77:aa:
         1a:31:ad:1a:98:ff:d3:36:bd:31:0b:66:a7:24:70:51:6a:15:
         17:93:f1:51:9a:f5:4c:0b:51:3d:93:6d:3f:94:72:98:1e:90:
         0e:4e:83:0a:22:08:bd:de:75:07:0c:8c:bc:82:b8:a2:77:0f:
         c4:e5:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org