Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8VfNZV94uP9Du2038tnVuqu4s6g.roa
File:                     8VfNZV94uP9Du2038tnVuqu4s6g.roa (raw, json)
Hash identifier:          ilg+E6lMYiNcgWuCyRvpQ/GsmnryYEHgNdxI3OhLN6w=
Subject key identifier:   F1:57:CD:65:5F:78:B8:FF:43:BB:6D:37:F2:D9:D5:BA:AB:B8:B3:A8
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01F3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8VfNZV94uP9Du2038tnVuqu4s6g.roa
Signing time:             Sun 30 Jun 2024 01:29:03 +0000
ROA not before:           Sun 30 Jun 2024 01:29:03 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9371
IP address blocks:        202.255.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:29:03 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F157CD655F78B8FF43BB6D37F2D9D5BAABB8B3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:74:1a:e1:68:ea:a3:a3:16:ff:3a:bc:a5:
                    29:c0:7c:d0:27:4e:67:00:b6:4e:52:4b:4d:27:34:
                    4c:b2:fd:6d:b1:e5:14:bf:c7:9e:9b:a5:cc:c9:0f:
                    56:05:75:7e:7b:1d:77:ce:3e:e8:eb:8c:62:63:cb:
                    22:de:2c:4e:9f:f4:bb:a3:f4:3d:ab:e8:1c:29:47:
                    81:1f:cf:69:36:d1:31:d5:93:e6:d1:f9:dd:ff:6b:
                    bf:88:e7:7d:f9:3c:3d:24:e6:26:52:49:8a:77:25:
                    f1:c6:b7:97:f2:c8:4c:ad:2a:09:90:38:a2:2c:44:
                    04:e8:72:73:48:49:1c:31:09:69:97:7a:62:1f:53:
                    c7:d2:cb:0d:09:69:57:5f:56:66:14:3e:97:9c:35:
                    9f:aa:bd:58:0b:df:8a:ee:f2:a5:41:db:f8:20:7b:
                    14:32:d0:f7:4c:34:29:38:5b:c6:c7:7b:dc:7b:84:
                    fb:7e:f0:0f:c7:38:cb:0e:92:52:53:64:1e:7f:aa:
                    a8:d9:ba:23:f8:28:b1:8b:5c:08:f1:00:d7:af:87:
                    08:88:ab:a4:6e:cd:48:11:47:0e:b9:a8:03:3a:5f:
                    af:bc:37:ed:34:91:78:51:35:9e:35:ea:4d:f6:0c:
                    1e:e7:1c:b2:2c:dc:f8:e5:19:02:35:cd:90:2e:67:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:57:CD:65:5F:78:B8:FF:43:BB:6D:37:F2:D9:D5:BA:AB:B8:B3:A8
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8VfNZV94uP9Du2038tnVuqu4s6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:47:4b:32:5c:42:58:a0:8d:4f:2b:e1:f0:13:f0:21:bf:56:
         e6:21:e6:d5:78:20:53:dc:e4:dc:a2:f6:13:3d:a6:f5:59:8c:
         51:71:58:f8:a3:c1:9b:d8:23:b4:8a:9a:82:ab:71:be:4d:20:
         4f:b0:b0:09:35:63:06:56:17:4d:c8:a1:39:c3:d5:7a:c5:1d:
         a4:72:47:04:7b:1a:da:f4:48:4a:0e:f0:b6:16:2b:ce:60:71:
         16:1a:10:aa:cf:66:eb:07:49:17:0d:ed:0b:0d:aa:71:c5:6e:
         c6:f0:50:09:cf:f3:6d:02:eb:54:61:d0:e8:1a:e4:b1:6f:6c:
         3e:51:bf:62:2a:e4:85:42:1d:e5:0b:2b:c4:ec:e7:f3:5f:95:
         9f:b3:98:26:1d:5a:8d:e9:80:65:7b:33:36:eb:53:e7:4f:76:
         6c:2e:dd:c6:f4:54:bf:bf:3d:9d:18:68:49:03:94:42:0f:b4:
         81:ce:d6:8d:c6:c6:76:aa:27:15:0f:0d:fc:81:42:e4:b6:ab:
         65:4a:81:e8:1c:bf:a8:68:95:ae:e1:a2:f8:fe:be:b5:06:2f:
         ab:47:8f:6b:10:6a:51:8d:37:ec:43:c5:41:4f:cb:05:2d:4e:
         94:47:e3:82:a6:e6:62:3f:2a:60:b2:1f:a1:16:3a:ac:f2:28:
         98:52:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org