Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/WZLvbUvnh1ll7ibcVxJUtarGkQg.roa
File:                     WZLvbUvnh1ll7ibcVxJUtarGkQg.roa (raw, json)
Hash identifier:          bNvLkGKxqAvRt900JZFGnzWzNLeSXGr9eSnbaBtJTjc=
Subject key identifier:   59:92:EF:6D:4B:E7:87:59:65:EE:26:DC:57:12:54:B5:AA:C6:91:08
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       24
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/WZLvbUvnh1ll7ibcVxJUtarGkQg.roa
Signing time:             Sun 30 Jun 2024 01:32:38 +0000
ROA not before:           Sun 30 Jun 2024 01:32:38 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38628
IP address blocks:        120.50.160.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Jun 30 01:32:38 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=5992EF6D4BE7875965EE26DC571254B5AAC69108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:f9:39:16:17:3d:21:3b:bb:d1:c4:c2:4e:
                    f7:90:05:fc:c4:83:b7:40:6e:90:ae:7c:52:6d:47:
                    f7:90:6c:c7:9a:bc:85:9a:14:83:69:a1:6a:2d:17:
                    0a:a4:ea:68:f1:ad:1d:d3:bb:57:c9:86:bd:e3:50:
                    0d:78:6c:20:35:d2:30:09:99:11:4a:d5:f4:4e:ec:
                    09:7a:14:aa:6f:5f:e0:26:d5:60:a8:e7:b3:bf:24:
                    8a:4e:7e:ec:a9:bf:d3:81:74:d9:cd:b1:5f:fc:35:
                    40:b9:4b:77:90:1b:48:ef:e6:ae:6e:34:2c:13:82:
                    95:87:bb:6f:0c:61:47:fd:ba:f5:63:b7:71:ca:46:
                    ef:9a:cb:73:81:87:f7:cc:06:d5:4b:9d:25:1f:fc:
                    32:68:86:70:c9:78:c9:b6:f2:82:e3:55:ef:99:aa:
                    85:3c:da:f8:12:df:51:a8:51:49:52:9b:12:a7:b6:
                    7e:b0:90:11:e6:63:de:f8:4d:c2:3c:04:97:3c:18:
                    8c:98:0d:2e:bd:eb:3d:68:57:d6:91:46:68:be:98:
                    f9:82:63:7d:ab:03:f0:28:8e:65:24:78:7d:e2:0a:
                    b7:5f:3c:ed:08:cf:8f:c8:5b:bd:6a:46:0a:2f:45:
                    b6:8a:e2:02:20:30:26:2b:9a:75:ef:1c:f9:40:ae:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:92:EF:6D:4B:E7:87:59:65:EE:26:DC:57:12:54:B5:AA:C6:91:08
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/WZLvbUvnh1ll7ibcVxJUtarGkQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.50.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:e3:ff:b7:c0:1d:15:9a:41:8b:f6:79:5a:96:6f:f6:f0:0c:
         df:43:ff:b5:31:01:c8:59:98:73:84:ec:99:c4:80:62:0c:a5:
         4b:41:21:a7:03:17:b4:44:01:54:e9:72:4d:61:aa:58:6d:e6:
         a4:a0:4b:34:b8:82:a5:de:c6:1b:c4:6c:79:2b:f7:10:89:ce:
         90:da:14:d0:38:06:2c:87:b8:ae:d6:7b:83:88:37:4f:71:88:
         33:d0:75:92:5a:bc:e9:df:09:1c:81:f2:90:15:67:92:c2:c7:
         b8:8c:73:8f:61:04:78:47:da:c0:45:f1:6f:21:68:0a:e7:93:
         4b:4f:bd:d9:91:3e:e8:2a:2e:ca:ec:e8:fb:7a:64:90:2a:90:
         a5:98:ac:95:01:30:e3:86:1b:7c:40:8e:4e:90:80:af:f6:93:
         2c:64:5a:e6:93:20:47:69:68:26:5b:98:3b:f6:8d:90:00:4b:
         dd:e9:56:c2:0e:d3:5f:0f:0c:95:62:e3:4e:e9:a3:22:2f:59:
         7d:dc:8d:59:40:c5:41:ae:98:b7:91:ce:79:be:99:f9:40:15:
         ff:54:03:52:12:f2:74:16:de:44:a0:11:c8:7c:89:1e:74:37:
         11:ef:7f:4d:c0:34:b9:d6:46:b9:93:78:2c:84:ae:25:97:0e:
         33:07:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org