Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/u4PNZBo0DlE4YAA8MkUT9GXLPDA.roa
File:                     u4PNZBo0DlE4YAA8MkUT9GXLPDA.roa (raw, json)
Hash identifier:          xjyD+FsZ6oRTwg6j5Wi1MYCBFApYFnVKz+hXBTE7+hQ=
Subject key identifier:   BB:83:CD:64:1A:34:0E:51:38:60:00:3C:32:45:13:F4:65:CB:3C:30
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       7E
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/u4PNZBo0DlE4YAA8MkUT9GXLPDA.roa
Signing time:             Sat 31 Aug 2024 01:34:09 +0000
ROA not before:           Sat 31 Aug 2024 01:34:09 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        220.147.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:09 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=BB83CD641A340E513860003C324513F465CB3C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:8e:4a:d4:ab:21:ae:48:27:e5:1d:9f:f0:
                    2a:e6:6e:30:e3:c4:1e:05:d8:d3:0a:c6:2d:eb:2e:
                    6c:eb:1b:d7:a5:35:de:f5:ed:79:42:32:ec:ac:e3:
                    ad:88:73:d6:78:4c:4d:64:6d:76:b2:58:29:a0:ae:
                    e8:95:69:b3:21:a3:0b:6b:17:65:d9:18:9f:12:f1:
                    8c:e2:63:6d:78:b8:3e:29:83:c9:c8:07:2b:f6:25:
                    2a:e2:62:41:2f:48:0f:a8:44:33:3f:5a:6e:61:ce:
                    a9:ab:a4:f7:85:90:40:0c:c1:bf:f7:d1:a8:73:85:
                    6a:e0:af:88:33:0a:b1:ca:f1:8c:4e:74:7e:12:a2:
                    c4:73:a8:5c:49:b4:af:f1:47:e2:57:99:1d:40:50:
                    8b:33:0e:6a:97:e9:aa:4a:13:f4:77:03:29:9b:e8:
                    1d:3d:2a:a1:65:16:05:14:03:89:69:50:83:16:d5:
                    b2:9d:63:26:d1:41:86:ff:d6:29:c3:f2:2d:50:b1:
                    e7:c7:3a:3c:d7:aa:37:2c:38:ac:02:43:51:f3:49:
                    2d:f2:98:9c:a9:d7:c0:84:1a:67:ba:1d:e9:02:42:
                    82:5c:a6:ab:f5:1c:e6:b5:28:0f:29:89:e6:97:dc:
                    10:05:2d:4e:0a:23:d1:b9:21:12:bf:2b:14:81:ed:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:83:CD:64:1A:34:0E:51:38:60:00:3C:32:45:13:F4:65:CB:3C:30
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/u4PNZBo0DlE4YAA8MkUT9GXLPDA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.147.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:34:e0:d8:3e:62:1b:71:f6:34:8c:c0:15:8e:75:3a:1f:be:
         7d:7b:9e:db:6d:2f:42:8b:ba:23:25:5f:fa:42:60:f6:97:09:
         25:1f:8a:59:91:13:1f:16:b1:e9:a8:03:76:8b:c8:b7:b4:a7:
         c3:3c:5e:87:07:c7:f8:3c:7e:3e:bf:f7:b1:e6:4c:c0:ea:7f:
         5b:4f:d1:bd:69:96:c9:a7:12:ff:70:b9:38:f0:ac:5e:bb:6a:
         aa:81:d3:78:29:af:13:61:e5:b3:95:ea:28:3d:68:ad:ee:1e:
         8a:fd:ed:0e:44:47:fc:1c:20:ff:f7:38:ff:fd:6d:05:f3:e1:
         8b:0d:b0:b5:35:ca:95:76:6e:44:fe:e4:d9:ea:91:91:03:fd:
         c5:b1:76:43:32:41:91:ad:a7:86:04:e5:62:76:94:14:c3:00:
         d3:3f:cb:4a:98:ff:d4:98:c3:38:9f:7b:91:48:ae:43:3e:a2:
         e4:0f:88:a3:2b:b5:bc:56:4e:26:ce:f9:f2:ae:3a:9f:70:60:
         7d:1d:a5:55:28:ce:f0:bf:77:5d:40:d0:06:dd:2e:44:48:87:
         89:e2:25:ec:1f:d8:16:90:90:0d:70:3c:7c:2b:b1:b8:26:89:
         f7:5f:91:53:34:bc:6b:34:04:41:a0:2b:8f:ae:d0:11:3b:e9:
         d3:0f:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:19 2025 by rpki-client