Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MYaTffUnxtvu9INRcusyejTCQQs.roa
File:                     MYaTffUnxtvu9INRcusyejTCQQs.roa (raw, json)
Hash identifier:          0QmdzcSiFde69UwkzDY6xwn+cXaYXaT+hVDZWfLINNs=
Subject key identifier:   31:86:93:7D:F5:27:C6:DB:EE:F4:83:51:72:EB:32:7A:34:C2:41:0B
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01C4
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MYaTffUnxtvu9INRcusyejTCQQs.roa
Signing time:             Wed 01 Nov 2023 01:29:25 +0000
ROA not before:           Wed 01 Nov 2023 01:29:25 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:25 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=3186937DF527C6DBEEF4835172EB327A34C2410B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:04:49:fe:dd:64:8b:84:59:c4:da:1d:d3:
                    8a:1e:c2:bb:4f:b6:98:ba:4b:8a:cb:ed:f0:c7:20:
                    61:75:8c:ad:10:36:7a:87:a5:09:6e:ff:65:3f:07:
                    77:0d:57:ab:7c:6d:bd:e0:9e:32:ac:ec:97:76:ee:
                    a6:e2:df:88:cc:96:4e:01:8b:4b:32:e7:fa:3b:06:
                    e8:5a:7d:02:ca:c1:b8:02:41:3f:09:16:ad:53:0e:
                    05:55:a5:d0:cc:30:64:77:12:c1:e4:48:85:b0:45:
                    02:bb:1f:8b:c6:de:49:c1:0e:9a:a9:e0:d2:27:ab:
                    5f:8a:64:35:7e:bd:94:bf:df:30:b0:b0:38:f6:c0:
                    b4:98:95:1c:4b:fd:3b:58:a1:3c:e6:3d:59:1c:97:
                    9a:83:34:58:9a:98:3b:49:a9:1e:e5:af:91:b0:67:
                    6b:ae:d2:09:e6:84:9c:94:34:ee:12:45:15:20:56:
                    ec:8c:2c:a1:8a:24:56:39:34:ce:af:62:ae:3a:da:
                    cb:db:1b:fd:8d:5d:f9:b3:07:75:af:0f:28:f8:c9:
                    49:2b:67:5c:29:0e:ed:36:75:33:ee:e7:c0:fc:a9:
                    f1:f9:c3:4d:98:ec:28:55:12:03:4f:e8:d8:2c:7e:
                    c0:ed:81:b9:ec:82:97:ca:e1:15:e2:c2:4e:ef:10:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:93:7D:F5:27:C6:DB:EE:F4:83:51:72:EB:32:7A:34:C2:41:0B
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MYaTffUnxtvu9INRcusyejTCQQs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:7d:be:2f:da:6f:04:67:89:23:3e:7b:9e:a9:ab:27:6b:96:
         08:a2:90:85:34:89:4f:72:60:fd:6e:7d:4a:45:b2:48:70:72:
         28:2f:48:56:22:4f:12:41:0c:95:a3:15:6a:4b:d5:96:be:15:
         2b:d1:74:53:43:89:d2:d0:b9:af:34:bf:5c:77:c0:da:09:22:
         de:53:97:51:8a:b1:65:d9:73:e0:ad:81:61:ca:9e:70:d4:eb:
         31:bc:22:95:91:30:73:d8:57:84:da:58:25:f2:c7:7c:7b:34:
         d0:b1:b8:37:1a:44:62:e5:5f:64:50:3e:4a:b3:c4:fe:b9:b0:
         ad:43:ca:08:de:66:9f:81:b3:9b:a2:5a:94:38:cd:8f:f9:cc:
         d9:3f:8c:9d:f3:59:c6:d7:27:7b:4c:d8:71:b6:d3:92:fb:36:
         f8:4a:bf:9f:06:81:03:b1:c9:5e:70:bd:5b:81:4a:a9:84:84:
         14:5d:30:58:30:9a:af:ea:f3:bd:95:37:46:02:e2:cc:a6:9e:
         67:e6:e3:cb:bd:4d:9c:18:57:16:87:fe:69:12:fb:4b:f0:5c:
         5b:13:00:cc:f0:a9:b6:9d:80:6c:75:38:73:ea:4a:4a:cc:92:
         30:4c:9a:f7:f7:d6:72:26:a9:0a:2d:f6:e6:99:95:20:8b:82:
         9c:2e:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org