Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/x6cR1fBVFcg-GC8BGaJotytunWQ.roa
File:                     x6cR1fBVFcg-GC8BGaJotytunWQ.roa (raw, json)
Hash identifier:          A9CCo5VqnwljvA78AA6ryVFry6OnJAZT8PdmYxd/1Ow=
Subject key identifier:   C7:A7:11:D5:F0:55:15:C8:3E:18:2F:01:19:A2:68:B7:2B:6E:9D:64
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       16
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/x6cR1fBVFcg-GC8BGaJotytunWQ.roa
Signing time:             Tue 03 Oct 2023 07:46:40 +0000
ROA not before:           Tue 03 Oct 2023 07:46:40 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        14.3.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  3 07:46:40 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C7A711D5F05515C83E182F0119A268B72B6E9D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:3d:1f:88:77:be:40:7c:e3:c5:d0:2f:8c:
                    9d:21:55:11:84:bd:5a:97:9a:3d:6b:a0:76:d6:d3:
                    17:10:84:4e:ca:a5:ca:71:fd:61:71:4c:56:e6:c4:
                    ed:92:5f:3b:c9:eb:8e:3f:9c:f0:ee:7d:9d:3d:e7:
                    ff:c6:78:9c:96:b4:f2:c1:3b:2e:ae:4f:7f:11:81:
                    0f:c7:16:1b:5e:92:9c:9d:d7:98:24:86:83:3a:c3:
                    46:1b:29:ad:b4:fe:52:ca:a9:c3:7c:fb:02:cb:ed:
                    4c:68:50:49:c2:48:aa:90:d8:d4:10:88:65:0f:99:
                    42:a7:e0:47:ce:4e:62:13:30:fd:f0:97:e9:86:4c:
                    50:59:65:14:3f:f7:b0:8e:dc:c5:d9:6d:d6:8a:0d:
                    54:3a:78:ca:9d:d7:d2:59:61:c4:d3:01:16:a8:97:
                    5b:79:2b:4c:22:40:e4:4f:a5:af:81:bc:8a:b5:31:
                    7c:f8:95:87:b8:52:17:91:da:c2:f0:ca:b3:45:dc:
                    ff:8c:3a:7d:ff:39:9f:85:28:3a:36:89:5d:24:c1:
                    0a:9d:e5:49:d6:fd:14:c1:77:b2:cb:2e:b5:61:5b:
                    09:63:b5:10:d2:ca:97:33:64:57:9c:a2:3c:e5:bd:
                    69:15:90:bc:d0:ca:39:7a:9c:e4:5e:73:3d:fd:2d:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A7:11:D5:F0:55:15:C8:3E:18:2F:01:19:A2:68:B7:2B:6E:9D:64
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/x6cR1fBVFcg-GC8BGaJotytunWQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:cb:1b:2a:29:39:3f:b7:58:62:5a:aa:77:c1:3a:77:4c:
         76:71:a8:59:73:d6:d5:cd:cd:8a:77:74:74:71:e8:7a:d4:6e:
         af:d1:02:83:47:a8:e3:f0:ab:70:65:5d:0e:c8:3c:a3:57:7d:
         c1:6d:64:ca:c6:24:d8:47:70:6b:93:f3:9e:17:80:f5:8a:15:
         d7:ff:73:38:da:c6:47:b6:fa:72:2c:f7:cd:0e:68:06:47:7c:
         57:75:3c:da:d8:f9:54:a5:41:fc:85:89:14:b7:3f:68:f4:16:
         98:08:fe:c7:98:09:81:96:99:e4:30:a3:6e:23:90:ec:44:e6:
         fb:9c:54:bc:50:c1:b2:58:f2:14:16:78:bf:11:95:0a:2f:31:
         5d:92:2f:6b:d7:db:8f:c3:da:ca:fd:38:90:18:c7:7e:84:00:
         39:55:b6:de:b5:98:be:29:11:64:d3:49:61:5f:3b:db:ab:6c:
         d8:32:24:84:1c:a4:25:ba:39:11:4a:25:23:af:9e:e0:ff:3f:
         ca:fe:ee:fc:97:a7:10:04:92:d4:21:ca:d0:62:38:07:88:1e:
         d6:1a:fe:f6:7a:08:a4:e5:83:4c:a9:87:e7:7d:7e:7a:16:06:
         78:57:95:18:45:8d:45:ce:4a:ae:5a:87:02:33:32:a8:df:59:
         a9:33:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:58 2024 by rpki-client on console-ams.rpki-client.org