Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/zVyOq8-H8-Fae5iO0sNpc2JNDOk.roa
File:                     zVyOq8-H8-Fae5iO0sNpc2JNDOk.roa (raw, json)
Hash identifier:          2/YM3b+kKUk6Q0DMFqVKQo3G4tmfOpl3NSIB1O5qsEo=
Subject key identifier:   CD:5C:8E:AB:CF:87:F3:E1:5A:7B:98:8E:D2:C3:69:73:62:4D:0C:E9
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       35
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zVyOq8-H8-Fae5iO0sNpc2JNDOk.roa
Signing time:             Thu 05 Oct 2023 03:29:11 +0000
ROA not before:           Thu 05 Oct 2023 03:29:11 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        210.167.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  5 03:29:11 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=CD5C8EABCF87F3E15A7B988ED2C36973624D0CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:8a:33:a7:3a:4e:1e:4b:96:00:70:d5:1a:
                    dd:0a:4b:f2:35:b4:f7:5e:b5:a4:c7:7c:52:ea:d5:
                    dd:3a:2c:5b:29:81:09:fb:d6:22:30:40:4c:5a:39:
                    73:23:49:08:ea:72:51:45:7c:aa:2d:7c:0c:e8:e9:
                    7c:6a:28:3e:8b:ea:f4:0c:51:2c:52:87:46:f0:cb:
                    f8:48:5a:a5:0d:b8:83:ea:93:69:51:68:12:ef:42:
                    d1:51:78:c3:ef:3b:b5:96:97:3b:3c:3d:cd:15:53:
                    c6:ec:23:39:c9:2c:b1:d3:b2:cb:85:54:31:23:fd:
                    cb:31:9a:d7:49:17:1f:3a:25:a1:67:8d:1a:bb:8b:
                    97:ba:16:c2:2b:42:f8:23:d9:52:cd:71:13:aa:63:
                    dd:da:41:ce:62:a9:d8:86:d9:7d:76:cf:db:71:33:
                    f4:ee:de:d0:c2:6e:1b:b3:4f:cb:78:f6:e7:14:f9:
                    dc:43:60:d9:ea:f4:a4:6d:9d:d4:56:df:3a:93:0f:
                    b4:49:56:91:80:b0:2e:93:63:6e:34:61:73:4a:a8:
                    10:b0:91:7f:82:79:76:48:b8:b9:13:db:82:53:87:
                    16:25:e6:7d:dc:57:3b:09:fb:2e:c9:ef:f1:d2:70:
                    45:c7:68:9b:bb:57:3a:f7:ba:2e:08:ab:56:fa:c1:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5C:8E:AB:CF:87:F3:E1:5A:7B:98:8E:D2:C3:69:73:62:4D:0C:E9
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zVyOq8-H8-Fae5iO0sNpc2JNDOk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.167.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:98:2c:b2:36:09:1e:e8:2c:a8:5c:9c:cd:a3:66:4e:37:bc:
         7d:af:10:bd:c8:70:1e:b7:67:07:da:bd:2f:e7:e8:64:0d:80:
         d0:76:3e:04:b0:6d:97:ea:35:8c:47:f4:21:2e:60:dd:83:81:
         9e:e6:5a:16:f2:49:9e:ee:1c:8e:1d:16:c5:11:aa:05:a1:c4:
         d6:7a:fd:e5:35:aa:dc:d0:cf:32:79:a8:21:4f:85:f0:4e:37:
         da:4d:8a:c9:bc:6e:e3:38:2a:a3:2a:97:d2:ec:d9:ee:c6:9e:
         4b:50:77:5a:83:91:cc:70:12:44:b6:b7:dc:ed:70:46:89:72:
         ea:6d:5b:23:09:d6:84:53:3b:97:14:e5:15:0f:86:30:fc:75:
         7a:df:23:e0:80:57:7d:f9:52:87:f1:e2:a7:8f:a9:1e:a4:43:
         76:f3:d5:a7:37:bb:3d:60:48:9f:d6:14:55:d7:2a:c8:ab:e9:
         c0:f0:d2:42:ea:ef:ec:47:8b:53:cc:1a:0b:99:67:8c:ed:c1:
         f7:17:31:73:3e:20:b8:26:63:0d:2a:7e:f0:5d:67:cf:fc:c0:
         2d:46:8b:19:8b:71:0d:73:c1:c5:32:7d:67:f5:9b:18:36:f1:
         24:42:a8:53:45:cc:b4:7f:1a:ee:ca:41:45:9d:47:c6:b6:cc:
         f2:77:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org