Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Buet1Sh1cSna3s5ab_QrZjm1IsM.roa
File:                     Buet1Sh1cSna3s5ab_QrZjm1IsM.roa (raw, json)
Hash identifier:          Pv8Hpa1xte7L57Vtm8Hq1eGQPDd+fxPM32wcz8vF5vM=
Subject key identifier:   06:E7:AD:D5:28:75:71:29:DA:DE:CE:5A:6F:F4:2B:66:39:B5:22:C3
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01C9
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Buet1Sh1cSna3s5ab_QrZjm1IsM.roa
Signing time:             Wed 01 Nov 2023 01:31:14 +0000
ROA not before:           Wed 01 Nov 2023 01:31:14 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        112.78.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:14 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=06E7ADD528757129DADECE5A6FF42B6639B522C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:19:89:e6:a4:2e:62:f8:55:a5:9c:e3:4f:
                    b9:c8:e8:7a:f8:fb:67:30:bd:e3:8d:4a:72:72:37:
                    47:64:d3:c6:d1:8f:ff:2d:dd:81:64:49:06:cb:92:
                    63:67:27:7e:13:7f:39:bb:a9:31:70:12:47:d7:45:
                    8d:eb:61:e7:12:bd:65:c8:c6:81:da:98:78:a1:b1:
                    3c:91:9b:3b:89:77:10:93:df:6a:c2:e5:eb:ba:30:
                    11:72:14:0d:72:ca:b3:4e:8c:06:b7:be:22:55:84:
                    ee:69:14:8f:82:08:fa:c4:29:51:be:71:f8:df:83:
                    bb:7a:c7:bd:89:c9:d4:b0:a5:6a:19:98:52:ec:52:
                    63:0d:91:52:79:7c:be:2e:fd:88:e9:f3:b6:d8:65:
                    d6:13:39:9e:e3:68:bd:61:35:60:ee:4b:bb:88:f3:
                    f4:10:27:dd:35:ba:a3:29:1b:41:67:62:ba:e8:1c:
                    98:32:9d:cc:b1:77:b9:56:8c:0b:e6:44:10:1f:b5:
                    cc:a8:e2:59:89:b9:20:28:82:0d:6c:9f:57:17:2a:
                    9c:45:76:83:3f:80:59:0e:f9:51:a1:b3:e8:91:ad:
                    4a:90:7a:49:ad:8d:54:9a:63:3c:36:a2:56:32:2d:
                    e5:67:eb:a8:22:92:95:f5:84:84:33:aa:b8:18:63:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E7:AD:D5:28:75:71:29:DA:DE:CE:5A:6F:F4:2B:66:39:B5:22:C3
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Buet1Sh1cSna3s5ab_QrZjm1IsM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:fb:f6:ba:4a:09:4b:15:95:cc:b5:d3:be:2f:c7:6d:f6:fc:
         1a:e5:75:71:ec:3e:fd:73:95:e0:dc:5e:40:19:4f:d5:a1:f5:
         87:e0:37:63:04:f4:ba:57:33:75:1c:4e:e7:1c:0c:24:68:3d:
         cc:51:9d:50:89:4e:0d:c3:87:34:f6:4e:5f:cf:28:13:5f:91:
         f5:9d:d9:0a:3a:06:47:10:fa:9f:24:70:5b:bb:30:d7:6d:78:
         2d:c0:f9:47:0f:5a:0f:5d:c7:2c:6a:3c:e9:d3:c3:04:c5:5a:
         db:0e:ad:cf:f4:d5:1e:1e:8f:c5:e0:e3:36:33:d2:a0:e8:01:
         78:1d:28:68:27:99:47:89:24:2a:60:ff:a7:7a:92:7a:1b:21:
         31:a6:23:c4:ea:4d:47:e7:fe:86:f0:4b:d0:87:3a:ef:c2:8b:
         9f:15:f1:24:c7:eb:f4:d2:98:a7:16:03:24:e2:f6:b9:31:33:
         61:41:f1:d6:70:93:6b:45:cd:d0:2f:c5:ff:3d:11:46:8b:d2:
         da:12:92:6e:31:bd:96:d5:fc:09:b3:bc:24:3d:25:dc:e6:02:
         22:c7:12:76:1b:44:8a:0e:1f:5a:61:9a:7b:39:6f:2f:48:9b:
         ef:da:52:59:6f:2c:87:7b:b6:97:b5:f8:c5:cb:84:b5:2b:f9:
         85:f3:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org