Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/kridHARN1AWnrLM3EiUSGWRlbAg.roa
File:                     kridHARN1AWnrLM3EiUSGWRlbAg.roa (raw, json)
Hash identifier:          iPluGqwnXBF8ACv2DFjNPnSPBnBMnjkxmqG8KJs5Dok=
Subject key identifier:   92:B8:9D:1C:04:4D:D4:05:A7:AC:B3:37:12:25:12:19:64:65:6C:08
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       3E
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/kridHARN1AWnrLM3EiUSGWRlbAg.roa
Signing time:             Sun 31 Mar 2024 01:30:25 +0000
ROA not before:           Sun 31 Mar 2024 01:30:25 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     23778
IP address blocks:        116.50.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Mar 31 01:30:25 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=92B89D1C044DD405A7ACB3371225121964656C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f6:d3:4d:a0:6d:ee:ce:3e:81:d2:79:34:7a:
                    d6:41:6f:e2:d6:13:8a:1c:a2:55:ab:1e:ae:a4:03:
                    dd:f1:0a:5c:b9:de:74:7b:dc:9e:31:f5:07:ed:73:
                    83:09:be:50:bb:57:67:a0:42:92:34:8f:c7:7f:79:
                    f3:3a:e3:50:76:d8:de:92:b9:34:cc:20:21:e0:9d:
                    b6:e2:54:54:ce:07:1b:bf:e9:9a:73:c7:e9:ba:06:
                    52:ff:db:2f:45:45:0c:fb:fc:3c:ef:2e:77:47:94:
                    d5:f0:74:6c:c6:dd:8f:9e:e7:1e:37:ae:78:1f:8b:
                    79:24:22:a4:03:6c:5f:b6:3f:9a:6a:18:67:a9:63:
                    e2:6d:d5:e4:8b:9c:3c:46:b5:e8:64:9c:fa:69:1b:
                    a0:de:bc:8a:47:8e:b4:3c:24:29:26:09:59:36:20:
                    81:05:62:a3:ed:f9:6c:a3:56:d5:95:43:ff:c8:e6:
                    5d:06:51:e5:d2:21:e2:31:07:98:65:bb:08:e9:8b:
                    eb:db:d8:52:36:bf:62:cc:33:a3:e4:9e:fc:08:b0:
                    34:66:1c:45:3b:be:24:33:fd:e2:df:cb:af:54:57:
                    32:e7:db:42:a4:d1:ea:86:1a:25:39:7f:db:4c:63:
                    9c:e8:5f:68:bf:53:f5:3f:da:a4:ce:07:10:23:38:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:9D:1C:04:4D:D4:05:A7:AC:B3:37:12:25:12:19:64:65:6C:08
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/kridHARN1AWnrLM3EiUSGWRlbAg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:be:52:31:09:47:0a:da:7c:dc:8f:bf:3d:23:74:05:ff:89:
         5d:e5:76:72:c2:4f:f2:26:ac:b7:c9:96:59:4e:a8:3c:74:b3:
         ce:16:51:ec:c6:08:53:48:a3:1d:45:64:95:d8:5d:2f:21:0f:
         b9:1c:21:9a:ef:e6:7f:95:79:4a:6b:2e:32:74:a1:cc:e8:fa:
         06:75:6b:e8:e8:13:53:24:02:b1:ac:a3:57:f5:3a:d7:c4:b1:
         a6:51:4b:96:60:f7:ba:4d:07:8c:82:ec:ff:b0:9e:eb:c6:c2:
         73:67:c8:24:4f:20:7f:42:99:e4:c4:7a:55:dc:00:a0:87:48:
         ba:a7:c4:2d:81:97:20:17:b1:be:5d:2d:8a:bc:09:75:e6:fc:
         d5:d0:da:a7:88:7f:31:95:de:a1:ff:84:27:6c:74:23:9d:a4:
         fd:f5:59:e6:38:9f:4e:61:e3:04:48:77:56:46:95:4b:eb:31:
         1b:76:5e:46:39:2f:bd:d6:26:21:3d:37:3f:4b:c8:f8:9d:f4:
         e6:6b:09:cf:d6:63:12:ff:11:ef:31:71:55:db:3a:19:f3:b9:
         a5:7e:e6:b0:57:2c:f8:85:41:72:e9:66:0f:0f:c5:95:fe:4d:
         97:14:81:17:4d:03:f6:bc:ae:83:fa:7a:0b:80:3e:6a:f3:b5:
         cf:30:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org