Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/kX-LGxJriW2BbxC_ALIVosIKaTk.roa
File:                     kX-LGxJriW2BbxC_ALIVosIKaTk.roa (raw, json)
Hash identifier:          q59Idy89xk5Z4N3SpF+eCjmxppVvqpp0+WApE/0MuYQ=
Subject key identifier:   91:7F:8B:1B:12:6B:89:6D:81:6F:10:BF:00:B2:15:A2:C2:0A:69:39
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       0E
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/kX-LGxJriW2BbxC_ALIVosIKaTk.roa
Signing time:             Tue 15 Aug 2023 00:56:46 +0000
ROA not before:           Tue 15 Aug 2023 00:56:46 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     38628
IP address blocks:        120.50.160.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Aug 15 00:56:46 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=917F8B1B126B896D816F10BF00B215A2C20A6939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:29:39:82:f5:d2:c6:d3:9a:a1:93:01:2e:
                    61:f5:af:a8:b1:bc:81:af:13:d4:d7:98:f5:aa:e7:
                    ed:7d:c8:df:a5:a3:04:45:f0:54:5d:a6:0d:0b:d2:
                    b6:1c:14:cf:26:9a:57:e7:69:24:42:02:9e:bb:eb:
                    7d:2d:ff:bb:37:15:c2:ae:05:fe:3a:c6:b8:77:3c:
                    8d:fa:48:c1:3a:84:1e:a6:5c:2a:97:ee:9b:f0:80:
                    02:ab:57:48:60:a0:9c:48:4f:2c:9d:c9:5b:28:25:
                    32:0e:c8:02:d5:13:4f:5b:1f:ab:cc:52:0c:6a:39:
                    4f:a3:04:94:af:25:ef:c1:0d:d7:58:ce:8f:49:de:
                    a2:65:bf:f3:f6:92:16:9d:91:ce:aa:2b:18:2b:ac:
                    d8:b2:2f:5e:96:5e:8f:3c:8f:a5:a4:e5:25:1a:c6:
                    7a:dc:bc:c1:07:9e:d0:a0:30:f6:4c:c9:b7:ae:3e:
                    cb:87:e0:dd:dc:e7:e7:ae:43:2e:76:89:af:ed:80:
                    ca:0f:c9:0a:9d:da:55:1d:ee:c4:74:d1:e9:a1:d4:
                    a8:e0:9e:ca:39:03:ae:48:ba:88:01:2f:c0:3a:2b:
                    c7:0f:40:70:e3:f4:3b:b3:e6:87:45:3a:57:a2:bb:
                    65:4b:6b:82:69:59:22:4d:cf:7e:a4:66:a7:94:c4:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7F:8B:1B:12:6B:89:6D:81:6F:10:BF:00:B2:15:A2:C2:0A:69:39
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/kX-LGxJriW2BbxC_ALIVosIKaTk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.50.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:25:bf:aa:c5:34:f1:94:90:6d:21:c2:1e:48:01:8c:81:c7:
         bd:f6:bd:ba:21:3f:2b:e9:5e:5d:1e:c3:6b:f5:b4:6e:a4:d9:
         8e:fd:f4:28:be:69:e1:7a:0a:bf:10:b4:79:1f:55:e6:51:7c:
         66:19:f5:55:1c:80:a6:10:b7:17:c1:0b:66:b1:5a:2c:1d:ea:
         b0:76:c3:45:49:f4:78:9a:21:c7:97:21:0f:0b:f3:7b:c4:19:
         3b:d9:d4:05:a9:91:32:a8:9f:53:65:62:0c:a7:39:6e:38:36:
         dc:96:42:b1:d8:96:03:11:63:62:a9:3c:6c:1f:31:33:c5:33:
         7b:5a:82:fd:00:b8:d8:58:f9:8f:41:35:fd:10:6e:9e:8d:b4:
         79:bc:8e:a5:da:03:43:40:4c:9b:f0:7f:0d:14:83:19:8a:cf:
         d3:16:e2:3b:54:5b:c5:f7:b8:53:3f:c9:d1:fa:d1:eb:11:dc:
         4a:c6:94:e9:72:2c:c8:d4:93:96:19:07:a1:e6:8b:23:b5:3c:
         d9:1c:78:d1:58:2e:90:43:54:04:8f:e6:19:10:43:b4:3e:5e:
         ef:96:00:4c:12:c4:3e:98:36:12:41:7c:00:ad:ba:ec:b8:fe:
         fc:7a:04:0d:85:c0:26:25:29:87:44:c0:82:7e:d7:a3:d0:05:
         39:75:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:42:01 2024 by rpki-client on console-ams.rpki-client.org