Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/HI_vSqWI6159gzUCwvdZcU_kMDQ.roa
File:                     HI_vSqWI6159gzUCwvdZcU_kMDQ.roa (raw, json)
Hash identifier:          /EyR5aFVIHUhWyqcjVp8hwEVH03U7L5RIu/+2qCfkps=
Subject key identifier:   1C:8F:EF:4A:A5:88:EB:5E:7D:83:35:02:C2:F7:59:71:4F:E4:30:34
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0196
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/HI_vSqWI6159gzUCwvdZcU_kMDQ.roa
Signing time:             Tue 01 Aug 2023 01:28:13 +0000
ROA not before:           Tue 01 Aug 2023 01:28:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        112.78.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=1C8FEF4AA588EB5E7D833502C2F759714FE43034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:6b:34:96:4d:2a:a0:bc:e4:7e:19:e7:8c:
                    b2:00:c3:ed:91:13:95:f1:d0:df:15:51:d9:e0:4a:
                    c3:7f:10:4f:a5:ba:ca:88:24:bd:61:73:2c:10:7e:
                    ff:d7:bf:34:0f:28:67:44:11:e7:99:a4:22:9e:ee:
                    d2:cb:37:b8:f6:16:0d:40:28:d8:62:68:42:a8:02:
                    71:5d:26:f2:e2:b5:d6:f5:10:d1:75:93:ab:69:7a:
                    0c:a2:a4:88:b5:76:23:17:72:5f:18:dc:d9:9e:e2:
                    c8:9b:94:f6:bb:0b:35:8f:68:b4:6d:dc:d2:20:47:
                    f9:8c:56:fa:10:77:2b:cb:bd:31:44:cf:a0:7b:f1:
                    fa:b7:32:b4:1b:5c:5b:e4:9b:91:11:0f:77:94:a8:
                    e1:30:40:46:3c:62:d4:db:31:37:d3:2d:72:88:00:
                    f6:de:1a:86:5c:ea:41:0b:97:69:6f:a1:39:6c:d0:
                    97:04:4b:6a:c9:71:c6:b9:1b:2d:c6:29:0c:19:7c:
                    22:33:97:9f:2b:6c:28:79:58:d1:2e:96:bc:27:0c:
                    df:ed:51:9c:06:79:77:d1:90:3c:93:6a:e6:d7:7e:
                    04:78:34:05:de:41:d4:0d:4d:c3:af:c7:c6:76:8a:
                    93:fa:5e:29:3e:17:4e:cf:55:57:13:35:1d:8f:65:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:EF:4A:A5:88:EB:5E:7D:83:35:02:C2:F7:59:71:4F:E4:30:34
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/HI_vSqWI6159gzUCwvdZcU_kMDQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:41:86:ef:8e:e6:08:89:f9:73:a7:9d:ea:5d:21:4d:ac:ef:
         7e:43:02:cf:26:53:25:15:4b:39:6c:17:d2:66:9d:a9:5b:00:
         7f:ba:fa:1d:a0:11:40:29:3f:2a:43:7b:a6:53:bb:25:65:8e:
         3f:28:78:14:42:02:8c:04:98:6b:20:e8:51:aa:f7:be:a5:98:
         3f:57:b4:c8:75:15:7f:b6:38:65:19:c4:de:45:b3:f5:86:64:
         08:d2:e6:2c:c7:e3:b2:47:1f:9f:bb:67:b6:41:09:32:ca:17:
         67:5c:c3:b1:1e:87:c0:74:89:22:f6:a9:5f:2e:04:c5:d9:c6:
         5a:18:b8:e2:cd:ec:3d:e2:c3:69:a3:14:95:9e:1a:8d:5f:a7:
         95:92:c4:55:1e:92:cf:e0:75:dd:bf:7f:d7:5c:7e:52:f1:56:
         6d:9f:51:94:60:5c:d6:d2:50:13:02:d1:2d:79:ae:1a:96:2a:
         6c:ef:17:cd:58:6c:e6:dc:61:27:0c:8e:35:1b:af:db:e3:15:
         94:59:60:df:38:52:80:a7:56:7a:48:f7:5d:8f:66:f4:86:a3:
         84:21:15:4a:37:60:b8:19:29:7c:da:29:e8:f1:72:a4:ed:85:
         58:b8:97:a3:45:58:79:04:e5:65:f9:c9:69:ac:43:94:2b:0d:
         ab:75:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org