Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Wk6antHlw_mw1kCBcBm0AX0nqIQ.roa
File:                     Wk6antHlw_mw1kCBcBm0AX0nqIQ.roa (raw, json)
Hash identifier:          cNdVwLhUzIBgp0xQPGjJ+/eTnsBgqiGHMZIjd3V981c=
Subject key identifier:   5A:4E:9A:9E:D1:E5:C3:F9:B0:D6:40:81:70:19:B4:01:7D:27:A8:84
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01C2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Wk6antHlw_mw1kCBcBm0AX0nqIQ.roa
Signing time:             Wed 01 Nov 2023 01:29:23 +0000
ROA not before:           Wed 01 Nov 2023 01:29:23 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:23 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=5A4E9A9ED1E5C3F9B0D640817019B4017D27A884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:d4:c2:bb:9b:8a:dc:2a:df:8f:82:43:3e:
                    99:68:f1:f2:4f:d5:ef:6f:77:3b:80:20:aa:49:ca:
                    d6:53:28:31:4f:d1:3d:4b:c2:92:c8:30:06:51:70:
                    09:72:34:a7:14:c5:66:26:46:68:82:20:f6:9d:29:
                    78:e1:df:d6:5e:9e:e6:13:6c:36:76:9f:bf:fd:7e:
                    ef:e1:32:9c:78:1a:a1:e4:65:73:a3:ea:a7:4d:5f:
                    68:c0:57:f8:58:16:5d:5f:02:88:eb:aa:fd:8e:51:
                    71:38:69:fb:77:54:cc:78:4a:63:bb:6e:48:f6:26:
                    43:33:9c:55:dd:70:53:f3:b3:2a:b1:f8:96:a2:f1:
                    62:c2:a7:2e:67:9f:cf:1a:10:fd:a5:ec:19:73:83:
                    58:8c:9e:1e:25:dc:68:9c:c7:12:4a:cf:35:08:86:
                    45:07:b3:42:b8:9b:97:4a:fd:94:1d:ee:06:d0:37:
                    52:1d:50:a0:60:dd:5b:30:a4:23:9d:6b:fe:68:76:
                    45:0a:96:86:28:2a:ea:b7:83:26:2e:d3:00:d4:db:
                    fb:89:05:83:0a:bb:f4:e1:48:9d:07:dc:e0:30:34:
                    cd:db:14:29:74:1b:59:9d:c6:ab:6f:73:4b:9e:0e:
                    cd:4b:c7:c3:15:d5:5d:62:88:1c:41:19:ee:34:83:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4E:9A:9E:D1:E5:C3:F9:B0:D6:40:81:70:19:B4:01:7D:27:A8:84
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Wk6antHlw_mw1kCBcBm0AX0nqIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:1e:2b:1c:6d:1d:f2:da:6f:9e:51:24:4e:97:94:6e:13:40:
         74:b1:b7:68:be:a9:29:a8:07:8a:f8:db:66:88:38:74:ec:40:
         08:1c:05:47:27:af:f4:38:2c:35:d1:f6:aa:9c:06:ac:e2:e5:
         f5:0b:5a:49:94:19:e2:f6:7e:ec:0e:a6:4f:5f:06:82:ff:e5:
         0f:03:03:12:50:8e:52:5a:c8:37:26:86:6a:6e:c2:4d:7e:f6:
         9e:c0:da:ac:52:4a:99:b4:d0:d8:c1:f2:2a:80:d8:30:16:4c:
         c3:5a:61:94:d8:28:03:72:eb:83:9b:60:0f:46:14:e0:c3:e7:
         98:a1:85:b8:c0:4d:00:79:d8:77:dd:b4:71:65:32:d9:3e:1c:
         e7:ea:26:16:b3:5e:83:eb:77:4b:67:2c:dd:9d:cb:e9:19:f4:
         3f:fc:a4:1e:bf:14:ba:98:b2:0d:1a:29:da:bb:e9:cb:66:0c:
         8a:9f:08:4c:d1:e2:dc:70:6c:96:2c:df:89:1f:a6:e8:9f:2e:
         5a:c8:8e:f8:22:e7:64:b4:04:d9:40:41:21:bb:5f:b0:8b:19:
         1f:e5:a9:c0:ad:83:fd:19:56:69:1c:82:2f:00:7c:c2:f8:33:
         2f:e1:3f:32:82:5b:93:97:14:0f:44:a1:5b:e1:11:6c:e8:32:
         82:dc:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org