Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7ujdWGX5SliE8M8nCuVgP-7KkS8.roa
File:                     7ujdWGX5SliE8M8nCuVgP-7KkS8.roa (raw, json)
Hash identifier:          k9Pdw+5AkzFNJ4YddZ4IyX8L7kOt0+U3HbCZABEOaaA=
Subject key identifier:   EE:E8:DD:58:65:F9:4A:58:84:F0:CF:27:0A:E5:60:3F:EE:CA:91:2F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01D2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7ujdWGX5SliE8M8nCuVgP-7KkS8.roa
Signing time:             Wed 01 Nov 2023 01:31:18 +0000
ROA not before:           Wed 01 Nov 2023 01:31:18 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:18 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=EEE8DD5865F94A5884F0CF270AE5603FEECA912F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:62:af:d1:84:84:6f:1b:bd:6a:1d:88:bf:
                    ac:e9:cf:59:1c:4f:d0:51:b1:7b:c0:a1:97:29:3a:
                    db:6f:04:24:bc:99:0a:88:b2:3a:25:6c:4a:c4:ed:
                    b1:d0:4f:97:6e:2a:24:02:4d:e9:d5:89:b8:74:cb:
                    f5:28:99:98:30:40:3b:13:47:76:de:1f:00:7c:46:
                    5e:b2:34:cb:22:1e:5d:8d:37:3b:7e:ae:7e:1f:0b:
                    5e:4f:63:3d:50:1f:e7:e6:3d:b2:3b:0b:60:a7:2c:
                    28:4e:39:ea:db:3c:79:ab:e3:3a:17:df:52:db:d2:
                    7e:88:df:4e:a0:31:f1:59:bf:b5:ef:d6:ab:14:cd:
                    5e:18:44:67:34:3e:1b:04:c5:89:94:b9:29:5c:d7:
                    7f:9e:e4:df:e3:d9:50:b9:66:af:82:2d:ac:25:67:
                    e6:2f:eb:8c:de:50:9f:7a:b0:e9:f5:0c:f0:c9:21:
                    fe:b6:4a:65:b9:4c:a7:85:c1:94:0f:58:71:f4:8f:
                    2a:1f:d6:ca:70:65:b7:9f:01:4b:5e:f3:79:d7:60:
                    a3:13:8f:ad:16:d1:7b:9c:fc:74:31:41:41:2b:74:
                    1f:c5:14:63:a7:a8:2c:9b:ba:07:39:70:0a:24:33:
                    ed:da:e0:43:95:95:d7:89:c5:9f:71:91:68:a0:ab:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E8:DD:58:65:F9:4A:58:84:F0:CF:27:0A:E5:60:3F:EE:CA:91:2F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7ujdWGX5SliE8M8nCuVgP-7KkS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b8:a3:55:e4:ba:13:1b:fd:e7:c4:84:e4:10:19:c7:9c:18:cd:
         c0:8b:aa:ce:82:79:f0:30:e9:c2:2a:0b:f0:49:cf:0d:65:07:
         99:d8:43:83:b9:83:ab:fc:ef:6e:6b:87:0e:9d:b3:cd:b3:34:
         5d:2e:6c:74:c9:d4:38:9c:db:83:5f:db:ad:b9:94:7d:93:a4:
         8f:5a:e6:46:74:71:be:41:d4:db:35:21:98:37:b7:c9:17:84:
         c5:f9:66:dc:73:b7:0f:3e:9a:05:cd:c3:99:8c:72:00:22:05:
         f6:fc:28:9e:80:7a:fc:22:37:57:16:6a:50:18:5e:7c:ed:d8:
         d4:73:33:0c:fd:fc:07:b7:68:4f:2b:1e:3d:0b:fb:76:d7:23:
         d8:a9:cb:6e:fc:47:47:70:25:45:be:45:75:36:f5:fa:ce:3c:
         4c:9f:85:13:8b:fd:07:7c:04:69:62:fd:c4:11:3b:c1:e8:25:
         f6:2a:c1:43:4e:94:29:27:ee:76:80:48:96:de:b1:4e:b2:b3:
         e6:b3:63:b3:7c:c8:8b:d1:34:0a:a0:6e:2f:d6:a2:69:60:b9:
         3b:4a:02:c2:d8:83:e9:dd:6c:21:ed:cb:c0:75:5f:4b:8c:fd:
         b2:48:ba:9c:3e:a1:35:fa:aa:57:ae:2d:3f:01:04:f0:0c:0b:
         8c:64:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org