Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/tH2ESnrDXlH-G2fwhu9dUtARXLM.roa
File:                     tH2ESnrDXlH-G2fwhu9dUtARXLM.roa (raw, json)
Hash identifier:          kL6MNtdgC4sfieKZjTFl3BtdGeMMcNAOZK/aO1//EvU=
Subject key identifier:   B4:7D:84:4A:7A:C3:5E:51:FE:1B:67:F0:86:EF:5D:52:D0:11:5C:B3
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       18
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/tH2ESnrDXlH-G2fwhu9dUtARXLM.roa
Signing time:             Wed 04 Oct 2023 02:42:47 +0000
ROA not before:           Wed 04 Oct 2023 02:42:47 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        211.120.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  4 02:42:47 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B47D844A7AC35E51FE1B67F086EF5D52D0115CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3b:48:59:ec:03:90:6b:15:96:ee:e3:b5:0e:
                    09:86:7b:38:4d:3f:7b:01:fa:80:cd:a9:c8:60:f8:
                    02:cc:8d:68:3f:aa:f9:d8:3e:01:a4:db:98:32:33:
                    da:8d:3c:e7:1d:69:ec:e3:3b:b0:f8:46:47:56:6b:
                    c3:11:8b:20:3a:f3:8f:6f:8b:aa:da:d2:af:83:3e:
                    eb:81:6a:5a:7b:8b:9d:64:15:91:dd:d3:0d:f0:b0:
                    14:41:02:e8:f7:ae:90:4b:6b:19:8b:74:5f:de:49:
                    f9:6d:39:93:15:22:ed:a0:35:94:3e:e3:ea:03:07:
                    0e:ff:81:5f:be:6a:2c:65:c4:86:9f:f0:36:19:97:
                    41:5e:e3:4e:a0:d2:8e:d3:14:a3:89:57:40:0c:53:
                    86:79:62:be:b3:3f:5a:bc:d2:1b:f8:4a:28:b0:71:
                    4d:85:0e:78:9c:d6:c5:93:ce:7e:46:d8:88:7c:9b:
                    99:6a:6c:49:82:f1:9f:f8:47:b7:ad:4d:1d:fd:4d:
                    92:62:d7:ba:83:b2:66:b6:ff:b4:64:17:de:b3:d0:
                    ca:f7:b7:69:9b:2d:33:92:cc:f3:3c:31:8c:a1:6d:
                    ec:85:92:c5:e1:07:33:01:ff:23:af:78:01:93:07:
                    1d:17:ac:f4:3e:5d:8d:19:79:38:91:4c:33:3f:2a:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7D:84:4A:7A:C3:5E:51:FE:1B:67:F0:86:EF:5D:52:D0:11:5C:B3
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/tH2ESnrDXlH-G2fwhu9dUtARXLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:68:49:dc:f6:63:c7:55:df:57:f6:54:38:c5:bb:7e:9a:2b:
         c7:3d:dc:c9:cb:5b:e1:16:bc:92:1b:40:18:70:3c:67:95:ba:
         df:75:98:43:89:ae:64:db:aa:51:78:87:83:83:56:49:a0:c8:
         23:48:8b:4c:dc:ee:ed:7a:20:52:a2:4d:71:3c:67:c3:04:36:
         a9:32:0f:20:84:c6:5a:e3:89:f5:7c:d3:02:54:da:bc:8d:11:
         6c:b7:c9:d3:23:64:e6:51:5c:5c:23:4c:b6:c5:4a:7e:09:74:
         3b:da:17:4f:f2:e2:57:4f:7e:11:ec:fc:d1:f6:ea:4b:27:eb:
         69:a8:2d:71:39:ff:8d:08:cd:16:a0:5e:f0:ec:a4:5f:71:ab:
         85:b9:69:e1:0d:eb:e0:2d:e7:f2:4f:0c:84:40:d8:7c:d2:b6:
         2e:e1:79:1b:23:9e:21:b3:5c:1f:fd:ce:55:32:82:b3:5d:fc:
         29:6b:95:6d:19:79:c7:e1:0e:85:9a:65:00:f0:0e:bb:ed:80:
         00:98:03:1f:9f:6a:29:10:59:20:c7:5e:ee:fa:33:77:39:56:
         15:92:f6:5a:43:c8:7f:ff:9e:c2:b2:dd:c8:97:45:4b:9c:f8:
         73:ed:b4:a2:d2:dc:c6:39:de:c8:be:83:a8:e6:e8:ce:4b:53:
         ff:54:3d:c2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTIzMTAwNDAy
NDI0N1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQjQ3RDg0NEE3QUMzNUU1
MUZFMUI2N0YwODZFRjVENTJEMDExNUNCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPc7SFnsA5BrFZbu47UOCYZ7OE0/ewH6gM2pyGD4AsyNaD+q+dg+
AaTbmDIz2o085x1p7OM7sPhGR1ZrwxGLIDrzj2+LqtrSr4M+64FqWnuLnWQVkd3T
DfCwFEEC6PeukEtrGYt0X95J+W05kxUi7aA1lD7j6gMHDv+BX75qLGXEhp/wNhmX
QV7jTqDSjtMUo4lXQAxThnlivrM/WrzSG/hKKLBxTYUOeJzWxZPOfkbYiHybmWps
SYLxn/hHt61NHf1NkmLXuoOyZrb/tGQX3rPQyve3aZstM5LM8zwxjKFt7IWSxeEH
MwH/I694AZMHHRes9D5djRl5OJFMMz8qK8kCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBS0fYRKesNeUf4bZ/CG711S0BFcszAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL3RIMkVTbnJEWGxILUcyZndodTlkVXRBUlhMTS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXTeEAwDQYJKoZIhvcNAQELBQADggEBAENoSdz2Y8dV31f2VDjFu36aK8c93MnL
W+EWvJIbQBhwPGeVut91mEOJrmTbqlF4h4ODVkmgyCNIi0zc7u16IFKiTXE8Z8ME
NqkyDyCExlrjifV80wJU2ryNEWy3ydMjZOZRXFwjTLbFSn4JdDvaF0/y4ldPfhHs
/NH26ksn62moLXE5/40IzRagXvDspF9xq4W5aeEN6+At5/JPDIRA2HzSti7heRsj
niGzXB/9zlUygrNd/ClrlW0ZecfhDoWaZQDwDrvtgACYAx+faikQWSDHXu76M3c5
VhWS9lpDyH//nsKy3ciXRUuc+HPttKLS3MY53si+g6jm6M5LU/9UPcI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org