Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/x_UpBLpjXwhaA_yWUODx9d1UzmA.roa
File:                     x_UpBLpjXwhaA_yWUODx9d1UzmA.roa (raw, json)
Hash identifier:          6hZ5e0fr1aMal53yOVsocV2y6f24db9VrkPVzERmgm8=
Subject key identifier:   C7:F5:29:04:BA:63:5F:08:5A:03:FC:96:50:E0:F1:F5:DD:54:CE:60
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       40
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/x_UpBLpjXwhaA_yWUODx9d1UzmA.roa
Signing time:             Wed 27 Dec 2023 02:06:29 +0000
ROA not before:           Wed 27 Dec 2023 02:06:29 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        124.155.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Dec 27 02:06:29 2023 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=C7F52904BA635F085A03FC9650E0F1F5DD54CE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:34:7d:c5:6b:f8:8c:cc:d2:26:cc:c7:1a:
                    36:e6:23:f9:fc:44:e3:c8:23:21:98:d6:9f:95:52:
                    db:70:7d:6d:14:5e:d5:6f:97:9c:31:ab:d5:3b:d6:
                    87:eb:b5:ab:44:c8:9a:1f:dd:21:04:55:52:c1:93:
                    b7:12:35:24:5e:3e:f7:98:49:f2:9d:1e:f5:84:ca:
                    8e:ed:f4:20:41:d0:08:42:e3:65:96:e0:2e:a8:55:
                    31:bf:6e:53:33:7e:fa:c0:b9:6c:8e:a6:6b:8f:85:
                    49:d9:77:ed:33:da:93:23:ed:81:3d:a7:ca:98:b3:
                    52:bd:4f:65:65:fc:80:bd:87:0e:8d:8a:82:56:20:
                    e9:d6:9d:c3:1d:56:a3:7c:da:fc:5a:e9:0e:d9:6d:
                    39:6a:b5:92:82:0c:bd:82:b5:8f:72:87:c4:29:7b:
                    cc:1b:47:4c:aa:70:d8:d3:a9:0e:d6:24:99:d1:c9:
                    37:4e:85:a1:aa:a0:da:a0:1b:6f:8e:85:e2:8c:5b:
                    35:bb:ee:c4:c6:a7:65:66:b6:ea:1b:fb:51:3e:5b:
                    9a:15:93:3d:2d:cd:31:d5:a3:1d:ff:97:c6:c1:92:
                    9b:f3:e9:15:c5:1b:62:9c:db:15:47:d1:46:51:50:
                    fa:f3:db:35:5a:27:8a:bf:46:ea:55:14:41:e1:31:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:29:04:BA:63:5F:08:5A:03:FC:96:50:E0:F1:F5:DD:54:CE:60
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/x_UpBLpjXwhaA_yWUODx9d1UzmA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:ed:71:79:16:48:a6:79:3f:5c:b7:16:c9:e1:87:b6:1e:
         fc:4a:96:29:7d:2a:21:9e:76:10:71:42:32:29:97:ac:c9:7a:
         fa:87:a1:f7:90:99:2b:c4:d4:f0:f3:84:d0:53:de:c6:c2:1a:
         e7:04:78:00:49:27:4e:7c:98:9a:d1:0e:a5:0b:33:f5:0d:5f:
         1a:01:bc:f4:57:cd:87:62:7c:11:3d:5f:98:e1:c5:91:4a:6a:
         3a:8d:28:0d:2a:68:2b:a9:f7:98:f0:a6:ba:b6:4c:5e:57:9c:
         c9:50:9b:1d:fe:1e:b4:0b:ca:ec:60:04:c0:55:79:c5:b8:53:
         b9:14:68:bb:45:58:6e:57:49:ef:15:c8:ab:69:ca:42:82:e5:
         bd:5d:c9:d7:c3:49:fe:0c:14:d9:ef:ac:8e:8e:10:b3:64:a1:
         d3:33:66:e9:52:a1:e3:16:a6:f9:d3:78:5d:2d:5e:18:e5:11:
         a0:40:a4:ac:f1:22:b1:1b:e5:c4:80:88:17:5c:f7:c6:c7:2f:
         a1:53:9d:a4:8b:7f:d6:a4:77:64:6b:a4:d2:6c:5e:6a:b7:9e:
         49:c1:d3:26:72:64:72:e2:0e:a1:dc:70:80:02:ba:27:fe:c4:
         03:a0:3f:e5:36:92:68:78:6a:0f:d7:2b:79:a7:52:c9:62:2c:
         b9:e6:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:44 2024 by rpki-client on console-fra.rpki-client.org