Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/OI9cRek3tevUSi_xhCyiHshAbbk.roa
File:                     OI9cRek3tevUSi_xhCyiHshAbbk.roa (raw, json)
Hash identifier:          rJFjrq6GoH86QO0bMna4fpGELXmMd98lGaRVZvuPUT0=
Subject key identifier:   38:8F:5C:45:E9:37:B5:EB:D4:4A:2F:F1:84:2C:A2:1E:C8:40:6D:B9
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01C3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/OI9cRek3tevUSi_xhCyiHshAbbk.roa
Signing time:             Wed 01 Nov 2023 01:29:24 +0000
ROA not before:           Wed 01 Nov 2023 01:29:24 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.208.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:24 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=388F5C45E937B5EBD44A2FF1842CA21EC8406DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:39:5c:58:fc:d3:a5:a3:60:f4:d9:7e:2c:
                    43:81:cf:b9:11:fb:b6:c6:f8:32:82:54:3f:ce:e8:
                    fb:4e:f3:33:a9:32:5d:3c:43:82:a7:e4:61:af:a4:
                    e8:3f:40:75:bc:c0:0e:ca:ce:ed:98:8f:2f:ba:c5:
                    74:75:6d:da:4b:05:d6:28:f2:c7:ab:7f:4b:a9:4c:
                    8f:29:43:43:78:8e:97:5a:c7:52:18:b0:ab:a5:b8:
                    0a:69:86:7a:3a:e1:99:08:8c:d3:ea:a6:2b:1d:e1:
                    44:be:37:4a:b4:24:2c:64:94:b6:a4:df:ec:5e:32:
                    8a:b7:a2:30:62:e5:21:a2:75:13:28:40:d9:2e:31:
                    3e:46:1d:6f:f3:61:00:0f:a8:23:e2:01:88:7c:18:
                    34:6a:1d:39:a7:f5:ee:7b:bb:83:68:1f:87:97:1b:
                    5a:67:45:ce:5f:5b:46:cd:ca:98:36:94:0f:d2:7e:
                    87:ec:8a:a9:43:b5:09:83:3a:f5:65:b0:40:7a:bd:
                    37:17:0f:ac:08:30:1d:c3:cf:55:28:de:9e:05:1f:
                    fb:66:df:8d:cd:de:bc:e8:e8:50:77:28:af:3d:46:
                    40:95:39:b7:e1:c6:80:fe:de:7f:0c:b2:97:42:66:
                    16:c4:47:17:7b:db:cc:96:c9:d7:19:da:04:25:33:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8F:5C:45:E9:37:B5:EB:D4:4A:2F:F1:84:2C:A2:1E:C8:40:6D:B9
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/OI9cRek3tevUSi_xhCyiHshAbbk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:d5:76:7f:e9:ef:78:17:3c:11:bb:14:f9:9c:46:a0:78:
         97:00:4b:fe:99:af:2b:77:68:11:79:fd:4d:02:f4:98:02:15:
         f1:8a:c6:37:b2:ac:15:2f:1d:70:d5:a4:21:cc:bf:bb:ec:c9:
         e2:db:ca:95:9c:ae:2c:d9:74:c7:fb:74:f0:2c:f0:f7:c9:ae:
         0e:e3:f0:49:1c:b4:81:28:85:00:48:78:4a:a3:af:bb:3a:e6:
         31:7f:12:8b:55:76:5e:10:77:74:7c:b4:75:2c:fd:c2:37:30:
         d1:02:f6:d6:59:cb:b7:e5:90:14:f2:15:c6:37:6f:12:c2:d5:
         fe:10:a4:d2:b2:3c:7d:06:17:0f:75:a0:73:4d:7c:37:1a:08:
         c6:77:5e:d4:70:e7:5e:24:d9:08:dc:76:32:5a:63:13:bb:e2:
         e5:84:75:7e:cd:77:94:a3:8e:8a:4a:d0:73:8f:b7:a8:14:15:
         65:20:92:54:47:14:dd:86:e2:08:61:6c:97:5f:0b:15:6f:6d:
         ca:a1:fa:e9:4a:6d:33:d5:3f:a6:27:21:8e:21:d9:2d:f8:6b:
         07:94:51:31:13:a9:f7:4e:0a:f6:ee:d6:18:de:c2:54:18:7f:
         7c:d3:40:5a:73:45:25:7c:52:fe:2c:34:93:d4:b4:1a:b3:b5:
         a7:34:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org