Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa
File:                     GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa (raw, json)
Hash identifier:          91JVLSq5v/et2QtQaUR1bp7TWjFDoDiAhgz/ixRbcP8=
Subject key identifier:   18:0A:06:F8:B4:3B:54:7E:6E:5C:C0:1E:7A:5E:C9:39:2E:8F:2F:7A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01B8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa
Signing time:             Wed 01 Nov 2023 01:29:18 +0000
ROA not before:           Wed 01 Nov 2023 01:29:18 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        112.78.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:18 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=180A06F8B43B547E6E5CC01E7A5EC9392E8F2F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:c9:b4:7b:1e:79:cd:f4:52:38:c9:5c:93:
                    a8:a6:31:63:86:44:10:2f:f6:50:67:64:be:18:61:
                    ac:c5:93:b6:b6:ee:37:64:c7:a0:4e:a5:ee:0e:19:
                    5d:7e:8b:3d:16:3c:fa:a7:71:72:85:39:f4:bd:68:
                    50:e1:b2:99:f9:de:24:28:3e:17:fa:5f:ed:c0:3e:
                    75:42:95:2d:f4:09:d9:95:19:a7:e9:f8:d8:6f:0c:
                    82:4f:53:52:65:40:51:b6:e0:26:34:ad:75:70:49:
                    8a:9d:5c:de:94:a8:18:fa:81:e0:82:ed:e4:97:a7:
                    3c:ee:db:a7:f7:cf:84:d6:e9:ce:0e:a3:58:c8:b4:
                    f9:47:25:b9:d1:c3:83:b7:3e:76:6a:0d:51:5b:e7:
                    da:4e:e8:85:70:69:80:1b:2f:4d:fc:b2:25:fa:fd:
                    9f:ff:b0:4f:e9:27:91:54:a8:17:6e:81:b8:5d:02:
                    33:30:eb:14:81:88:8a:8e:a7:69:31:e1:6c:03:b1:
                    40:cb:1f:e7:a6:a4:6d:d2:df:31:7e:75:5f:eb:65:
                    86:21:7e:2b:c2:b7:25:54:04:68:21:4e:a5:11:ef:
                    79:2c:7b:f5:46:67:80:bd:84:ce:e3:86:69:c5:f8:
                    aa:cd:5e:16:9a:ed:bd:16:b2:13:e0:ea:17:92:f5:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0A:06:F8:B4:3B:54:7E:6E:5C:C0:1E:7A:5E:C9:39:2E:8F:2F:7A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GAoG-LQ7VH5uXMAeel7JOS6PL3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:fe:e3:07:a9:34:e0:a7:46:d6:f3:3a:26:3d:3a:9b:da:d8:
         03:53:d3:8f:ee:ee:d2:01:81:e8:8b:95:7a:c4:15:ac:53:69:
         4f:19:0f:00:a7:25:25:a4:08:40:a7:4a:32:8e:4d:26:5d:4e:
         8f:4b:a2:22:08:73:89:e1:06:ac:1e:15:ab:e1:4f:3b:fb:3f:
         d3:24:82:5a:f5:fa:ba:64:5d:bd:9a:6d:b1:ae:2a:15:d3:75:
         97:0f:05:4f:50:1f:59:97:9f:b6:9d:d0:29:94:e5:f3:69:9b:
         d7:ec:83:d8:5c:2f:09:4a:48:67:9c:f6:81:53:2d:76:77:b6:
         f3:9b:e0:24:59:1a:81:90:a6:44:01:51:22:ce:03:4c:71:f6:
         ac:95:2b:a9:c8:2e:c0:b2:6b:9f:4c:f7:bb:b7:56:5b:82:da:
         01:11:07:36:f9:95:60:2a:19:5a:cc:08:65:8b:82:b1:31:b0:
         29:8a:47:11:90:0e:e5:33:f2:d8:09:62:c7:7c:89:f0:b2:4c:
         a5:08:d3:53:b5:aa:88:f5:77:49:86:7f:70:4f:e3:b3:10:9f:
         a6:c1:46:ab:52:08:17:83:56:b7:d9:f2:27:5c:be:e6:75:55:
         f0:9b:c8:07:c6:49:dd:15:67:50:1b:78:96:63:d8:62:3d:13:
         7e:1c:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org