Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/z8cdI9Y005vI5nNEwEZk5BTDIOw.roa
File:                     z8cdI9Y005vI5nNEwEZk5BTDIOw.roa (raw, json)
Hash identifier:          JstRW0CsaJ7NI0lCN6O3fu0Y3OBaIy3uslWg7kK+S6w=
Subject key identifier:   CF:C7:1D:23:D6:34:D3:9B:C8:E6:73:44:C0:46:64:E4:14:C3:20:EC
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       6E
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/z8cdI9Y005vI5nNEwEZk5BTDIOw.roa
Signing time:             Sat 31 Aug 2024 01:34:03 +0000
ROA not before:           Sat 31 Aug 2024 01:34:03 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        121.1.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Aug 31 01:34:03 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=CFC71D23D634D39BC8E67344C04664E414C320EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:a4:6d:29:2f:3e:da:26:5e:31:36:43:8c:
                    82:80:63:e5:8d:f7:17:57:68:04:bd:90:b7:13:d0:
                    8d:12:de:94:e5:ea:07:8f:b0:af:c2:20:21:50:6c:
                    72:f7:10:60:c5:fc:5b:5d:41:e1:e6:48:bb:c4:68:
                    90:61:34:7e:e3:64:bf:ce:30:19:9a:36:97:18:64:
                    b1:db:5a:a7:78:83:b7:3c:77:d7:44:1a:76:fd:b5:
                    5e:61:28:53:51:f8:af:6f:05:b2:67:c5:c0:34:e9:
                    84:c0:90:df:d8:36:b2:0a:e7:8d:2b:fa:18:fc:d0:
                    93:bf:ce:c1:b6:cd:5d:3e:db:ba:62:5d:b3:30:62:
                    eb:0d:2c:94:25:b6:c3:c2:56:1c:e8:ca:b5:6b:34:
                    cf:eb:fe:ff:f2:23:67:e4:39:d2:f3:ff:c1:59:d2:
                    26:66:be:72:48:53:28:fc:a8:46:5c:7c:b5:a0:3d:
                    db:ca:c7:f3:51:28:ab:75:8b:28:a2:ba:1b:a2:9c:
                    bc:f0:87:76:3a:a8:85:91:f4:3f:42:6b:46:1f:83:
                    08:bd:5e:ad:f1:23:7d:a5:3a:8f:6c:79:2f:b2:53:
                    58:05:ac:b8:9e:f5:33:4a:1d:37:51:d2:5d:96:b0:
                    ca:69:c9:45:92:d1:a3:94:69:ea:3e:8e:af:f5:76:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:1D:23:D6:34:D3:9B:C8:E6:73:44:C0:46:64:E4:14:C3:20:EC
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/z8cdI9Y005vI5nNEwEZk5BTDIOw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.1.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         28:86:25:03:29:c7:57:13:57:05:b4:ed:19:f6:4b:52:c9:d8:
         4b:22:22:04:53:1a:2e:73:42:9f:75:42:aa:da:4c:9f:b9:cf:
         07:a4:0a:4b:b9:36:16:55:da:ef:6b:7f:be:4d:67:d3:16:15:
         1a:83:8e:76:ca:c3:3f:af:9c:d0:e0:2b:98:9a:39:d3:80:80:
         fe:bd:de:21:53:86:78:5d:77:bd:a5:f7:88:5a:81:5a:d0:b1:
         39:98:d9:db:28:5a:11:9a:a0:d1:b5:ac:39:5c:9a:94:e6:cd:
         c9:99:d2:98:92:36:25:22:0d:12:22:0c:8d:91:83:a7:05:e7:
         05:1e:cc:f5:fc:e3:5d:78:7c:5d:61:7c:d0:72:aa:2d:45:f9:
         4d:d0:cf:82:45:b7:6a:a8:32:95:be:de:a1:3c:d9:94:df:55:
         68:02:65:28:83:fd:d3:a9:21:cc:cd:71:2d:e5:f3:fa:5d:ac:
         09:9a:f6:5b:b7:16:a2:43:e9:be:71:0d:c7:2c:cc:71:03:b9:
         9e:60:37:18:84:db:7c:12:50:a3:d6:09:23:98:12:8b:10:3c:
         a6:21:32:2f:f7:1a:85:0c:69:9f:87:ba:52:2a:4a:a7:d0:fe:
         da:d1:01:dc:0d:7c:ef:3c:d3:f6:6e:74:69:99:1e:bc:0d:6b:
         fb:cd:bc:c5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTI0MDgzMTAx
MzQwM1oXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0ZDNzFEMjNENjM0RDM5
QkM4RTY3MzQ0QzA0NjY0RTQxNEMzMjBFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANjSpG0pLz7aJl4xNkOMgoBj5Y33F1doBL2QtxPQjRLelOXqB4+w
r8IgIVBscvcQYMX8W11B4eZIu8RokGE0fuNkv84wGZo2lxhksdtap3iDtzx310Qa
dv21XmEoU1H4r28FsmfFwDTphMCQ39g2sgrnjSv6GPzQk7/OwbbNXT7bumJdszBi
6w0slCW2w8JWHOjKtWs0z+v+//IjZ+Q50vP/wVnSJma+ckhTKPyoRlx8taA928rH
81Eoq3WLKKK6G6KcvPCHdjqohZH0P0JrRh+DCL1erfEjfaU6j2x5L7JTWAWsuJ71
M0odN1HSXZawymnJRZLRo5Rp6j6Or/V2PzcCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBTPxx0j1jTTm8jmc0TARmTkFMMg7DAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL3o4Y2RJOVkwMDV2STVuTkV3RVprNUJURElPdy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAd5AYAwDQYJKoZIhvcNAQELBQADggEBACiGJQMpx1cTVwW07Rn2S1LJ2EsiIgRT
Gi5zQp91QqraTJ+5zwekCku5NhZV2u9rf75NZ9MWFRqDjnbKwz+vnNDgK5iaOdOA
gP693iFThnhdd72l94hagVrQsTmY2dsoWhGaoNG1rDlcmpTmzcmZ0piSNiUiDRIi
DI2Rg6cF5wUezPX84114fF1hfNByqi1F+U3Qz4JFt2qoMpW+3qE82ZTfVWgCZSiD
/dOpIczNcS3l8/pdrAma9lu3FqJD6b5xDccszHEDuZ5gNxiE23wSUKPWCSOYEosQ
PKYhMi/3GoUMaZ+HulIqSqfQ/trRAdwNfO880/ZudGmZHrwNa/vNvMU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org