Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/x3H2vxq0JSJeTI4Pw1ZEOkhXFH8.roa
File:                     x3H2vxq0JSJeTI4Pw1ZEOkhXFH8.roa (raw, json)
Hash identifier:          AzukHa2rVG9AkeftH4g4R0vAXHJcDsRMShf5D60hVHY=
Subject key identifier:   C7:71:F6:BF:1A:B4:25:22:5E:4C:8E:0F:C3:56:44:3A:48:57:14:7F
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       44
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/x3H2vxq0JSJeTI4Pw1ZEOkhXFH8.roa
Signing time:             Wed 27 Dec 2023 02:10:30 +0000
ROA not before:           Wed 27 Dec 2023 02:10:30 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        202.213.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Dec 27 02:10:30 2023 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=C771F6BF1AB425225E4C8E0FC356443A4857147F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:d3:a8:0d:be:c5:b0:1b:eb:7d:ce:9e:8c:
                    30:1a:2a:b9:d1:07:16:df:49:71:d9:c4:87:2c:11:
                    25:60:52:63:b9:5c:96:33:d8:6c:c4:70:e0:3a:08:
                    ea:46:51:b1:ca:bb:70:bd:2a:e8:53:30:21:f3:7e:
                    a9:8f:37:c2:a5:f4:ca:06:d3:56:2e:be:1a:16:05:
                    3a:99:48:5c:1c:17:c1:f8:73:6b:f9:42:3d:10:7c:
                    a5:15:fe:80:41:31:8c:96:1d:76:74:48:c7:f9:40:
                    3e:b7:e4:fc:49:23:cc:14:dc:a1:c9:8f:69:73:68:
                    fe:62:77:b9:08:3b:2d:f7:7c:cf:e5:4b:95:b2:09:
                    f6:82:0c:1f:67:30:29:30:4a:1f:a7:9c:24:88:cd:
                    a9:aa:61:2c:ad:88:52:bc:56:1d:ae:6d:e2:c6:2b:
                    e7:90:89:05:57:26:8d:49:27:8e:13:bb:e4:89:ee:
                    a5:e1:d7:60:67:f0:ce:fc:de:f9:a0:e0:87:02:5c:
                    25:28:04:e4:05:9e:77:47:f4:a1:b6:8f:a7:87:f4:
                    6b:d2:11:77:66:1b:c8:85:9a:ea:3b:da:ba:76:63:
                    45:80:5a:45:79:c4:68:e7:5e:6f:47:10:44:91:c3:
                    ad:b4:05:0d:27:18:50:86:10:2c:03:fa:cd:25:28:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:71:F6:BF:1A:B4:25:22:5E:4C:8E:0F:C3:56:44:3A:48:57:14:7F
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/x3H2vxq0JSJeTI4Pw1ZEOkhXFH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:ca:59:5c:35:94:41:da:54:00:9a:4d:f4:a6:0e:9c:9c:6e:
         9a:18:a7:3e:df:e1:e3:75:62:8c:1e:2e:25:ea:19:5e:df:db:
         db:b5:c2:b3:52:48:ec:8b:5a:5f:60:13:5e:18:08:de:ca:56:
         35:29:40:25:6e:91:ce:1c:32:39:3a:78:06:fa:80:ed:1e:c9:
         ac:4d:0f:12:ce:32:b9:e1:78:71:05:02:08:58:6c:3e:62:fa:
         08:76:ea:29:74:b5:87:87:2a:f6:4e:b1:c2:90:2f:0c:55:ec:
         d5:81:6e:0a:6f:db:26:55:32:6c:2d:e4:62:00:eb:73:71:4a:
         fb:2c:cf:d7:fe:2e:8b:b4:06:3c:4e:9c:b3:2d:87:88:b2:6d:
         5c:0d:98:e2:c0:4c:5e:8c:3d:3d:49:50:b7:fe:5f:f5:ea:de:
         3a:a2:a5:cf:12:b1:de:e4:3e:ad:b8:b8:35:11:24:da:12:0b:
         d7:da:2a:49:1c:06:af:4e:c7:2e:8e:64:df:fd:a7:8c:59:0c:
         8c:15:e5:d8:b2:c2:cd:b7:28:f7:b4:12:74:17:24:7f:27:d0:
         73:22:68:5c:72:7e:50:1b:dd:d9:6d:c8:b0:c4:46:4a:6b:97:
         2e:de:65:e2:05:85:2d:b6:e9:b8:86:91:89:06:6a:cc:f5:02:
         99:33:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org