Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HoOIskTEcVX-txo8oaUgZr4u-OY.roa
File:                     HoOIskTEcVX-txo8oaUgZr4u-OY.roa (raw, json)
Hash identifier:          dKWtJb/xYVsN1ec7ZB2mYEvDXNfTZFimC5dUCJXUo6E=
Subject key identifier:   1E:83:88:B2:44:C4:71:55:FE:B7:1A:3C:A1:A5:20:66:BE:2E:F8:E6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       014A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HoOIskTEcVX-txo8oaUgZr4u-OY.roa
Signing time:             Sun 01 Oct 2023 01:30:22 +0000
ROA not before:           Sun 01 Oct 2023 01:30:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18134
IP address blocks:        122.50.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1E8388B244C47155FEB71A3CA1A52066BE2EF8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:d8:fa:6a:d5:5c:3d:4b:b2:a0:86:0d:89:
                    d7:76:22:c5:d2:19:2e:8c:95:3c:d0:61:cb:fc:d3:
                    a1:58:0e:ac:3e:87:ba:ae:1c:5e:e6:8a:56:65:b7:
                    fd:db:ed:4e:e8:e5:89:18:35:43:32:2d:29:93:7f:
                    77:aa:52:79:0d:b1:aa:88:f6:2a:5f:b4:df:d5:08:
                    dc:6a:f6:d4:b5:51:bd:33:df:fc:6d:d3:cf:b3:e1:
                    a0:97:d0:88:dd:6c:81:cf:c2:b2:0e:c3:3f:dc:52:
                    89:81:08:f0:da:41:d8:2f:84:58:32:ac:53:c4:5a:
                    36:97:4c:76:3b:fc:9b:4b:d9:56:e7:5f:47:0c:d4:
                    6b:e6:6e:d2:1a:41:9f:7c:a1:b3:57:a1:88:42:00:
                    cf:d1:a1:e6:79:26:39:4e:8c:3d:ce:b4:9e:36:18:
                    53:8d:70:9d:46:82:56:a1:25:fe:43:28:d8:69:37:
                    8e:eb:2c:b6:fa:f6:a6:d9:24:2a:41:59:d0:8f:c6:
                    21:f1:3f:6a:bc:c4:03:a9:90:53:ff:fa:23:60:43:
                    9d:44:0f:f4:1b:03:b3:38:76:fc:20:22:7f:19:a7:
                    99:97:06:05:c4:35:cf:47:ae:e8:b1:eb:3d:49:ff:
                    db:d0:64:28:04:08:b7:5c:49:8f:ec:be:db:fc:1d:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:88:B2:44:C4:71:55:FE:B7:1A:3C:A1:A5:20:66:BE:2E:F8:E6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HoOIskTEcVX-txo8oaUgZr4u-OY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:50:17:37:8e:14:c7:b2:02:3e:2e:97:10:6f:26:ce:76:4d:
         c8:47:d6:80:bb:05:c6:a7:f8:b4:72:49:e1:6e:e9:3d:e4:66:
         78:29:27:80:b8:69:5f:7b:b7:01:c1:4e:42:3c:17:7e:9a:4e:
         b3:e2:a1:89:b3:9e:58:28:f4:1e:f6:79:31:c8:9f:f7:0a:ae:
         9f:77:8c:15:30:f0:fd:ad:2e:f1:15:7c:ce:c6:b3:6d:89:a4:
         57:13:89:65:f2:6b:09:55:56:50:93:c2:e6:ac:d2:cc:11:ff:
         64:fa:af:30:3e:af:02:c2:98:ee:f8:ea:60:af:3c:46:1b:31:
         1f:f7:a6:0f:bd:4d:6d:1a:4a:83:8f:5b:b2:94:de:cb:f1:0e:
         33:8d:d4:a0:cb:27:f5:b9:23:32:da:4f:2a:29:ec:62:7b:ce:
         00:53:5d:11:b2:c8:f5:10:bd:3c:9d:11:0e:ba:56:e3:ba:4a:
         16:82:ea:19:35:6c:49:2c:16:35:f2:f2:0c:dc:ce:81:62:12:
         1d:8c:8d:a8:7d:b4:65:61:35:5d:0a:2f:8a:65:d7:c8:48:aa:
         c3:f9:91:c6:79:d4:88:57:cb:13:d1:af:97:69:5c:05:9f:28:
         af:69:45:55:75:03:3e:c2:88:bb:f6:89:74:e5:70:07:03:cc:
         6c:4d:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org