Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WGEypx-jU3N7r-lagMQWDnO3xEQ.roa
File:                     WGEypx-jU3N7r-lagMQWDnO3xEQ.roa (raw, json)
Hash identifier:          a5/OHDCU0yp7dkMgVa92gcsS0czyhP9xFJX8JNkrYuQ=
Subject key identifier:   58:61:32:A7:1F:A3:53:73:7B:AF:E9:5A:80:C4:16:0E:73:B7:C4:44
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01D1
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WGEypx-jU3N7r-lagMQWDnO3xEQ.roa
Signing time:             Wed 01 Nov 2023 01:31:18 +0000
ROA not before:           Wed 01 Nov 2023 01:31:18 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     10013
IP address blocks:        112.78.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:18 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=586132A71FA353737BAFE95A80C4160E73B7C444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:aa:c2:f2:6d:26:03:59:b3:5a:81:d1:50:
                    10:e1:91:2c:11:5b:9e:57:2b:2f:ff:2d:cc:eb:92:
                    d5:30:29:90:6e:84:a2:54:b5:33:92:07:2d:c2:3a:
                    38:d8:1e:f1:95:6d:d4:6a:24:33:6f:ec:c8:dc:c1:
                    05:fc:30:93:a7:00:98:49:43:84:7f:26:41:04:f5:
                    10:3c:76:ca:74:49:f2:70:28:c8:98:0b:1b:47:56:
                    bc:99:ab:72:3e:dc:27:de:71:f8:51:6d:41:cd:b1:
                    2c:15:24:88:d6:b4:be:ed:78:e3:a6:d6:36:fb:ee:
                    56:7d:02:2f:5b:83:25:62:8c:2c:a8:22:20:12:67:
                    bf:5a:b7:51:00:48:57:27:7d:f6:b5:1e:a2:20:9a:
                    f9:8b:cd:f8:29:35:37:56:10:ce:ae:76:d3:fb:4b:
                    54:94:ed:0e:8b:1e:b6:2b:a2:e4:3d:ce:cc:07:6f:
                    c4:19:dd:06:ab:fc:34:73:2b:f2:8d:cc:cc:80:dd:
                    42:59:09:d3:d2:04:49:b4:df:ef:0b:fc:ac:cb:8d:
                    56:78:50:dc:9f:a9:74:b2:76:b3:75:ba:4e:08:81:
                    e9:91:80:73:60:48:26:e9:33:96:3b:43:7a:89:56:
                    c7:ee:91:ba:e3:aa:26:14:12:bc:01:d3:13:52:94:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:61:32:A7:1F:A3:53:73:7B:AF:E9:5A:80:C4:16:0E:73:B7:C4:44
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WGEypx-jU3N7r-lagMQWDnO3xEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:04:bb:f1:06:cf:bc:69:36:86:a6:28:11:e5:3b:eb:a5:
         da:ce:da:de:dd:7e:e5:f6:f9:68:2f:a9:16:86:8f:a3:8c:df:
         65:cb:53:ac:3f:32:30:58:a0:a3:88:4a:b0:ec:9e:07:4d:de:
         05:0b:cc:18:7f:c8:d0:e2:f5:da:4a:68:36:3e:d4:92:44:0e:
         60:01:22:05:a5:10:03:2e:04:d4:a9:89:b7:95:c7:6a:0f:3b:
         3f:26:8b:1e:80:d4:36:84:cd:8d:bb:a0:5c:07:2a:eb:f0:80:
         bc:40:f0:fe:de:43:a4:51:9e:d6:1b:f3:35:1c:46:9b:63:86:
         89:f1:b3:f2:a4:44:60:cc:ec:9a:bd:87:81:a9:4f:8c:a8:b5:
         5a:2c:46:f9:4d:8d:92:54:c3:f8:b9:41:78:61:f9:c7:51:db:
         92:79:f1:a5:1b:80:36:6d:f5:af:c6:39:ce:2d:4d:99:fe:74:
         9d:74:05:95:87:e5:fe:a2:dc:ec:a5:04:94:69:d1:73:c4:3f:
         03:67:23:eb:c3:8f:3e:49:f6:4c:ac:b6:e8:df:2f:45:07:d0:
         f1:a7:20:c5:4a:98:bf:36:cb:89:f2:5e:d1:e7:56:10:7d:5e:
         f1:c0:81:08:d5:a3:9b:02:97:de:f0:ef:57:c6:c4:3f:d1:bf:
         ad:bb:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org