Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/sVz0G1gPX7X9hGA4BsrkhRzqOVA.roa
File:                     sVz0G1gPX7X9hGA4BsrkhRzqOVA.roa (raw, json)
Hash identifier:          T+59TryHs2OJXB+3XWxl6F84H1q6QTmeoQWGib5UiyY=
Subject key identifier:   B1:5C:F4:1B:58:0F:5F:B5:FD:84:60:38:06:CA:E4:85:1C:EA:39:50
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       71
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/sVz0G1gPX7X9hGA4BsrkhRzqOVA.roa
Signing time:             Sat 31 Aug 2024 01:34:05 +0000
ROA not before:           Sat 31 Aug 2024 01:34:05 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        150.9.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:05 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=B15CF41B580F5FB5FD84603806CAE4851CEA3950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:3a:ca:67:36:77:2d:35:be:c3:2d:78:66:
                    7f:4f:2d:cd:78:18:1e:8e:fd:62:da:a1:67:cc:3c:
                    f3:7e:cf:9d:27:52:8e:32:e3:8d:e4:cd:dd:a5:f5:
                    23:3a:e8:67:49:0a:a2:e4:41:cc:ff:24:a2:4e:5b:
                    5c:f6:cd:52:78:c1:ca:96:9b:7b:97:2a:22:55:51:
                    02:33:a7:17:47:3b:c4:fc:60:84:ff:85:85:e9:1f:
                    f4:ee:73:24:fe:b2:3e:d7:d5:ba:66:7a:96:f7:95:
                    56:06:bf:9c:0e:4f:6b:11:94:26:a6:e1:d2:29:5e:
                    b5:2e:bf:2b:18:a4:93:a9:52:22:ea:fc:d7:6f:40:
                    7d:1f:01:ac:d4:47:c3:91:66:56:d0:02:7e:75:70:
                    f6:19:3b:e7:27:be:20:ee:85:03:dc:5d:38:74:f6:
                    38:9a:ab:44:e0:6b:59:52:ee:9c:d1:6d:52:45:80:
                    5f:26:d5:30:5c:af:76:e8:31:63:da:d4:9a:56:e0:
                    c5:cc:4e:18:2e:81:c1:ce:75:26:29:77:7f:a1:1e:
                    85:02:17:eb:9f:77:4a:48:fb:41:e5:a9:3b:f0:25:
                    d8:5a:54:c4:38:1e:93:77:36:19:f8:b7:da:e7:cd:
                    8f:b3:53:76:cc:26:51:1f:a7:c2:26:62:e8:c9:61:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5C:F4:1B:58:0F:5F:B5:FD:84:60:38:06:CA:E4:85:1C:EA:39:50
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/sVz0G1gPX7X9hGA4BsrkhRzqOVA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:de:03:09:99:c9:50:92:74:fb:d1:8e:d7:4b:23:07:9a:0b:
         52:5b:1c:0c:8b:16:dd:00:05:d7:c8:de:65:a7:5f:26:a0:3c:
         3c:4f:69:62:c0:bf:2f:b5:f9:32:27:17:9b:52:d0:0f:bf:52:
         d5:6e:5c:96:76:16:c0:cf:be:72:b7:6e:25:86:6e:32:5e:22:
         88:80:81:55:9a:c6:ea:63:6c:53:8b:fc:49:36:4a:43:b3:16:
         37:99:af:30:3a:71:c4:b9:62:9e:ba:54:09:0a:3a:7b:32:ea:
         f4:7a:cc:32:55:f3:17:07:0e:20:4c:eb:67:06:25:82:98:9f:
         97:22:04:20:22:d0:1d:1d:07:b7:50:34:0c:a7:ed:08:8f:2d:
         bd:68:c8:57:4f:79:cf:4f:da:a7:ed:6b:fb:a7:27:12:53:e6:
         8e:54:5d:d8:04:e3:f3:ed:dd:20:ae:ee:26:14:f1:a4:cf:45:
         f1:c0:ba:03:2a:a8:35:3a:3b:64:aa:a9:1e:b1:20:ae:ba:a5:
         59:dd:ce:62:9b:f1:a1:8b:1d:d2:ee:d8:b4:d1:0b:8c:a0:75:
         7e:db:de:e3:d5:3e:25:96:a6:61:cd:66:7b:f6:53:5e:51:80:
         0e:c2:6a:7f:75:fb:b3:c8:c8:51:eb:18:d6:c0:ea:fb:3f:88:
         3b:03:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org