Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/a3BYZd5I1a72ewz7g8RhaNHCJrc.roa
File:                     a3BYZd5I1a72ewz7g8RhaNHCJrc.roa (raw, json)
Hash identifier:          1XX6GFm36WXzh/rt/yaOBebOilUwILMXbacRauxw6DI=
Subject key identifier:   6B:70:58:65:DE:48:D5:AE:F6:7B:0C:FB:83:C4:61:68:D1:C2:26:B7
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       019C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/a3BYZd5I1a72ewz7g8RhaNHCJrc.roa
Signing time:             Tue 01 Aug 2023 01:28:15 +0000
ROA not before:           Tue 01 Aug 2023 01:28:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6B705865DE48D5AEF67B0CFB83C46168D1C226B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:2c:09:50:08:39:76:fa:a3:68:0d:0c:47:
                    3d:e2:ec:df:2b:4b:01:a8:41:6b:76:10:bb:3d:75:
                    dd:ae:15:13:45:74:ef:00:8d:ce:ee:42:cc:9d:f6:
                    18:59:81:8d:b9:76:b0:e8:df:e6:f7:30:c5:ef:a7:
                    8b:60:40:79:f5:6a:4b:08:00:19:84:50:76:4c:7b:
                    43:26:32:bc:2b:53:ab:cf:35:32:3a:52:2b:23:60:
                    0e:8b:28:60:dd:0a:d7:5a:e0:46:4c:a1:fb:1b:ea:
                    4e:da:45:33:ff:05:d4:87:54:65:56:cf:65:f1:b7:
                    bc:10:92:95:50:3f:7d:c5:ba:51:fd:a8:b5:84:fe:
                    63:46:29:c7:2b:e5:4d:1e:e4:f5:7d:c1:0f:3e:ab:
                    99:73:81:0b:ec:eb:5c:cc:b3:de:6c:78:06:3e:ed:
                    8b:2d:5a:a7:b8:a6:1a:26:21:e8:7e:95:3e:61:eb:
                    7c:4b:e0:3e:6a:83:49:de:42:91:25:bb:2f:0b:d6:
                    a0:37:68:f2:01:d6:e1:43:35:e7:b3:b8:0c:73:87:
                    48:00:c6:57:ee:bc:5d:79:19:17:7b:6b:09:54:a7:
                    d5:37:33:d0:61:39:21:3a:41:d9:60:46:59:74:03:
                    dc:5f:55:05:0c:6c:4c:63:b8:98:b3:de:45:42:34:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:58:65:DE:48:D5:AE:F6:7B:0C:FB:83:C4:61:68:D1:C2:26:B7
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/a3BYZd5I1a72ewz7g8RhaNHCJrc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:d0:40:be:0c:e1:75:98:4e:08:9b:e5:ac:d1:d6:9b:4c:
         68:4f:89:f8:01:fb:3e:42:6a:22:67:cc:3e:54:5f:f3:3b:f4:
         55:b3:19:52:95:31:3e:c6:7b:05:d7:d7:60:5f:6e:ba:69:55:
         85:26:b1:e9:c2:1d:11:7e:84:46:30:68:1a:27:b7:d3:bd:fb:
         64:e7:95:ef:9c:ca:56:f9:6e:b1:29:89:2f:bb:db:fe:18:f2:
         8b:a0:ab:71:9b:24:3b:6a:d9:11:ee:9d:bb:de:da:23:e8:e9:
         59:1f:6e:81:df:d9:1e:cf:01:19:2e:47:2f:ad:14:dd:0b:ee:
         94:5c:13:e0:f4:9b:52:9c:a4:63:fe:62:31:c0:e4:7c:1c:c8:
         84:1d:42:75:1e:76:e1:cd:22:ce:c6:22:0b:a3:dd:c3:79:a3:
         13:13:dd:43:32:0f:de:f8:0c:ff:66:4d:82:af:78:c1:70:43:
         d4:df:8c:ec:0b:af:f5:cc:bd:4e:c9:aa:c8:06:68:09:38:66:
         36:76:72:34:58:ee:24:c6:ee:46:ac:90:6c:f3:06:b2:07:7b:
         d4:59:8a:f6:a7:b3:59:44:8e:de:7c:b5:3a:ff:8d:d1:a4:1d:
         76:88:90:d5:8f:f4:c7:29:ff:8b:d1:2a:5c:9a:74:fb:49:cc:
         3b:42:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org