Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/EylVvSxhnojuPi1rkXwE_Wjx2rY.roa
File:                     EylVvSxhnojuPi1rkXwE_Wjx2rY.roa (raw, json)
Hash identifier:          9hcbXUnTag8F/+pmmIS2yLAB2havIkXde092Fl3hUGE=
Subject key identifier:   13:29:55:BD:2C:61:9E:88:EE:3E:2D:6B:91:7C:04:FD:68:F1:DA:B6
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01B7
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/EylVvSxhnojuPi1rkXwE_Wjx2rY.roa
Signing time:             Wed 01 Nov 2023 01:29:18 +0000
ROA not before:           Wed 01 Nov 2023 01:29:18 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:18 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=132955BD2C619E88EE3E2D6B917C04FD68F1DAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:59:ac:7d:c5:58:28:ef:98:66:50:7b:56:26:
                    0a:67:e6:22:e8:16:d4:aa:d7:72:8c:6b:d2:26:68:
                    a6:b5:1f:d2:43:b3:34:ab:07:77:fe:fd:71:f2:b6:
                    5a:1d:22:65:02:10:21:38:32:ac:15:31:2c:45:ea:
                    c0:81:a1:45:83:97:f3:22:97:b2:20:d1:84:44:28:
                    68:71:3e:6c:e8:80:a7:00:f2:9a:a9:e4:13:f1:70:
                    c3:21:72:de:2f:28:14:b1:ac:4f:a3:26:57:17:26:
                    3a:aa:a0:06:b5:e8:bc:01:b4:a6:c6:9d:db:74:4c:
                    d4:61:e1:90:29:1e:a0:00:a2:bb:ba:30:33:c4:52:
                    55:f6:85:da:3c:63:73:30:8d:11:9d:f4:7e:ce:ea:
                    66:cb:34:0f:39:9e:06:a5:57:22:6d:66:71:e1:22:
                    26:17:9f:20:20:95:82:87:92:20:2c:d7:4c:d7:0a:
                    23:6d:e8:ed:a8:18:28:d6:ee:c5:11:e6:48:03:7d:
                    cd:a3:6a:0e:77:6f:a6:e6:a9:da:ad:00:c4:a4:25:
                    6a:2d:e5:ae:7f:07:34:45:bf:ec:88:ec:0a:e2:49:
                    58:43:cb:e5:b7:5b:8c:4a:60:3e:07:7c:bc:8f:f0:
                    ca:fc:2c:d2:24:9d:d4:38:9c:c3:1a:07:6c:bd:06:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:55:BD:2C:61:9E:88:EE:3E:2D:6B:91:7C:04:FD:68:F1:DA:B6
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/EylVvSxhnojuPi1rkXwE_Wjx2rY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:b0:ba:f1:3e:4d:0d:cf:6c:ba:95:f2:1e:8b:ce:ad:56:
         f8:2e:91:77:3b:88:f7:46:99:09:69:32:96:4b:94:d5:15:03:
         5c:e2:ff:8b:04:aa:4e:a5:46:fb:6e:8f:b1:cf:cf:af:ac:e8:
         b4:9d:fe:c1:e0:40:c7:00:59:a9:e5:4b:e9:88:a9:55:97:2f:
         1c:11:bb:34:bb:a5:13:cb:03:1f:66:b1:4b:4b:79:bb:4b:0f:
         14:f9:5d:a3:80:a2:0b:b5:37:d5:65:83:71:d3:5f:95:55:3a:
         df:8e:42:a7:92:d6:fc:ac:5b:53:ab:d5:43:8a:89:ee:da:a1:
         06:27:67:2e:4f:d1:dc:1c:c0:92:7e:2c:23:2e:63:bd:5f:37:
         94:83:ae:18:c0:b2:ab:5a:0f:ca:67:e8:87:dc:d3:f1:5f:6a:
         8e:b2:ae:5c:83:b6:62:51:de:4e:43:b5:94:c8:ca:96:a4:b4:
         f4:44:c9:2b:27:87:6b:32:e9:64:95:38:97:af:6c:ba:77:dd:
         59:10:a2:d2:91:bb:f6:3b:7a:71:71:50:a8:dd:61:ef:28:9d:
         14:d8:74:f9:5d:ce:1f:df:11:21:f5:cc:e1:0f:a8:2b:f4:0a:
         63:14:c1:d4:7b:dc:8d:b8:3f:0f:44:5e:57:a7:3c:18:f3:7d:
         ab:1b:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org