Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/yehUoCNNOjghGlpwxIdWBboTDec.roa
File:                     yehUoCNNOjghGlpwxIdWBboTDec.roa (raw, json)
Hash identifier:          V+1GyN0SJtay6NhYRaD+Y8BClKlTSqrjyxKdiGvP0dc=
Subject key identifier:   C9:E8:54:A0:23:4D:3A:38:21:1A:5A:70:C4:87:56:05:BA:13:0D:E7
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       3B
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/yehUoCNNOjghGlpwxIdWBboTDec.roa
Signing time:             Thu 05 Oct 2023 03:29:12 +0000
ROA not before:           Thu 05 Oct 2023 03:29:12 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        220.150.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:29:12 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C9E854A0234D3A38211A5A70C4875605BA130DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:e3:5c:e1:48:50:f7:9f:cd:d4:26:2c:09:
                    dc:a6:5a:6b:8d:30:48:53:8b:ef:ec:77:ad:e2:68:
                    24:8e:af:ea:16:6b:0d:e1:9f:31:e8:28:0e:85:89:
                    3e:14:06:f6:32:bb:ed:25:55:c8:77:d4:5a:38:94:
                    1a:37:da:a2:db:26:91:87:9f:43:43:a7:09:f9:11:
                    15:d9:58:82:96:b8:2f:46:e1:a9:7a:26:ce:1f:02:
                    2e:af:d0:bd:e8:b4:ac:d7:40:d7:38:b6:73:4b:99:
                    46:8c:f6:84:fd:87:c3:42:8b:36:40:f3:39:5e:eb:
                    2b:00:dc:21:51:95:64:8f:47:2d:51:9f:da:93:53:
                    14:04:46:2a:dc:df:9b:b5:99:62:e7:62:47:58:fd:
                    4e:3f:4d:a1:78:79:6f:de:78:3b:ef:17:6b:d8:f5:
                    b6:34:13:2f:3c:c6:6b:da:71:4c:9f:6a:c7:fc:f1:
                    80:2d:f8:af:46:b6:1e:cd:a2:54:24:ba:3c:74:47:
                    0a:e8:2e:18:ad:cd:04:6b:db:a5:fd:a8:c7:3c:a3:
                    7a:d6:8f:da:ab:16:b8:12:38:e9:0c:f9:30:08:f7:
                    47:fb:67:3a:17:6e:a0:3c:e1:3f:f0:a5:83:87:b7:
                    99:d4:c6:e5:aa:ab:ec:b1:dd:fe:08:77:6c:79:0b:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:54:A0:23:4D:3A:38:21:1A:5A:70:C4:87:56:05:BA:13:0D:E7
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/yehUoCNNOjghGlpwxIdWBboTDec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:25:36:25:88:2b:0b:0d:31:3c:06:64:b9:94:1b:aa:39:
         83:ea:15:81:1c:52:19:57:89:1a:f5:9f:a6:a6:e9:cf:6c:ec:
         ef:49:5f:33:da:89:dd:c0:ff:d4:9b:f3:9a:22:43:85:9f:e1:
         7c:1e:c2:52:15:aa:bb:99:21:9b:0c:91:86:40:b4:de:7e:75:
         02:19:fc:fa:d6:8c:ed:9e:ab:91:c3:cf:61:b0:de:3d:5c:0c:
         ea:2c:0b:b8:9e:b8:84:39:13:2d:99:b4:b4:e2:dc:8b:b9:8d:
         b6:3c:b4:37:d9:62:13:8e:90:55:20:71:0c:3b:90:cf:02:4c:
         df:5f:6f:75:c1:69:2b:22:cf:bf:c5:66:78:57:b2:ae:aa:fc:
         ef:29:12:87:12:e5:45:01:0e:77:9c:08:12:ca:a4:17:64:60:
         1d:ce:9f:32:d0:19:ac:fc:c6:06:cc:69:bf:86:dc:d0:b7:b3:
         a5:50:0c:df:d9:df:a8:cf:b3:97:7f:28:a3:67:bf:d4:2e:51:
         9c:59:b6:f0:d1:88:2e:d1:8e:6c:3b:dc:ac:e6:50:0e:d4:22:
         0f:f2:a5:bd:a1:c4:98:80:3d:6b:1a:84:d0:aa:55:77:a8:bf:
         22:13:e7:e2:43:cd:37:fb:42:c3:82:40:70:fa:93:0b:fd:11:
         b1:30:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org