Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa
File:                     aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa (raw, json)
Hash identifier:          mRHpP1lP4BqxVubALWMzScXa1ksILLa59jikM7BxabE=
Subject key identifier:   68:82:4A:BC:3D:2A:56:5A:92:9D:71:EC:7D:ED:1D:10:4B:BB:5D:15
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01CF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa
Signing time:             Wed 01 Nov 2023 01:31:17 +0000
ROA not before:           Wed 01 Nov 2023 01:31:17 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        110.74.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:17 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=68824ABC3D2A565A929D71EC7DED1D104BBB5D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:3c:b0:cb:62:6e:74:d8:2e:6b:11:24:24:
                    28:21:08:eb:06:54:57:33:5e:ff:5a:15:e7:2f:41:
                    af:b3:0e:24:8f:d8:7c:79:ba:56:4e:97:b7:5f:7b:
                    56:dc:d8:b3:0e:70:cf:9f:b5:66:71:ae:a7:ed:c8:
                    ec:09:2d:c2:42:98:d1:90:72:16:04:53:b8:7f:cb:
                    df:bf:3c:b9:af:3f:a3:63:05:a0:0b:8c:cf:57:8e:
                    e0:a6:a8:c1:86:88:56:2d:07:f8:75:05:1a:63:a6:
                    3b:a5:14:4f:34:4f:a2:23:42:7a:9c:76:1e:0c:b5:
                    f1:59:2b:42:0c:0a:6d:20:05:4f:94:c8:f8:c2:70:
                    aa:15:f0:8f:f5:09:72:e9:51:e7:cf:e6:ab:16:c3:
                    84:63:c7:83:9f:9c:7d:d7:54:6b:de:c7:1a:32:31:
                    3e:ea:d5:75:79:8e:5b:3a:c5:f0:56:84:5e:26:a5:
                    12:8a:ef:b4:be:09:be:b7:c2:01:f8:83:52:5b:57:
                    c8:3f:23:ff:a2:2b:45:83:48:1d:5b:03:01:5f:51:
                    f2:fa:e5:a2:45:22:13:06:c5:2a:e5:64:f5:60:27:
                    a1:32:24:78:dd:cf:0e:96:a6:ed:50:a4:06:27:3b:
                    71:10:68:ca:54:01:26:03:ab:3e:1f:c5:52:38:b6:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:4A:BC:3D:2A:56:5A:92:9D:71:EC:7D:ED:1D:10:4B:BB:5D:15
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/aIJKvD0qVlqSnXHsfe0dEEu7XRU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:8c:cc:53:b5:97:4f:7d:a9:0f:bd:f4:56:e1:d6:67:39:
         7b:5f:ce:50:08:e5:ca:76:68:bf:3f:ff:a2:01:44:7f:d1:f5:
         1a:21:93:be:c3:2a:0d:7c:62:5a:19:47:9a:70:e3:d9:5e:31:
         49:d1:ed:e6:66:9e:cf:65:a5:b3:8b:6b:55:d7:77:f4:dc:19:
         3f:91:fa:b3:90:a0:0e:c1:c2:c9:20:04:13:e4:f5:46:8d:8e:
         c8:4e:f6:51:2a:47:b2:1e:ad:12:d0:a2:d4:f7:e3:53:3a:1e:
         c9:35:bc:1d:73:7d:81:b1:00:2c:df:7c:02:c4:6d:14:25:f2:
         07:9b:8d:92:1c:34:e2:6f:65:87:ea:06:94:6d:a9:be:2f:f7:
         36:77:c3:c1:91:18:bd:cc:86:d0:d7:4f:48:dd:c8:8e:79:66:
         d9:53:31:2f:75:0d:cf:42:2d:a3:0a:fc:e4:e7:28:e2:85:18:
         89:fa:a0:69:a3:29:67:a0:38:e3:d1:40:df:7d:13:70:26:a3:
         98:73:34:98:e0:ac:05:fc:de:cd:f2:a3:db:8e:23:53:c9:4a:
         9e:a0:ec:55:8c:56:f5:5c:8c:bc:15:07:72:b1:04:94:dc:98:
         04:77:b7:82:91:58:b9:13:64:95:a5:5c:9a:19:9a:38:9b:f0:
         99:c6:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org