Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa
File:                     dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa (raw, json)
Hash identifier:          eCMg7iAR1vRjmkCv3R7JisdFSbwgAj30vFWegoDaovE=
Subject key identifier:   74:D2:91:03:44:5A:58:E3:76:10:76:96:3E:07:C6:EA:0E:AB:04:E4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01D5
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa
Signing time:             Wed 01 Nov 2023 01:31:20 +0000
ROA not before:           Wed 01 Nov 2023 01:31:20 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:20 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=74D29103445A58E3761076963E07C6EA0EAB04E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:83:9e:36:91:fe:22:0c:17:57:0a:cf:b0:
                    2f:71:8e:3a:0a:9d:77:2d:a1:3d:a1:56:7b:e6:2c:
                    33:4f:ca:a3:38:c0:60:6d:a5:a6:97:87:b8:45:83:
                    ed:27:55:64:21:85:1b:d6:3d:f8:fb:a5:0e:ac:63:
                    84:73:cf:3e:8e:a5:42:fe:d8:b4:0a:2b:24:32:14:
                    2f:9d:48:c4:50:60:b8:78:94:cc:14:6b:92:ed:a3:
                    c8:bc:91:68:02:af:2b:09:3d:d9:e8:87:bf:ec:83:
                    1a:a0:e9:27:60:89:b3:3a:c4:12:68:99:4c:d8:bf:
                    07:11:90:22:2d:08:32:76:16:96:e1:b2:6d:c0:84:
                    fe:ef:ea:b4:c1:fc:6f:51:05:af:2f:72:61:47:e1:
                    d4:83:63:40:74:66:1e:49:d4:90:27:d1:53:ab:f9:
                    2e:69:4d:fb:11:84:b9:2e:f9:c6:d5:b7:06:7b:81:
                    8a:fc:a5:ac:8d:fd:91:78:29:10:cc:43:73:54:cc:
                    e9:04:94:1b:7a:3e:64:26:71:3e:de:77:a9:89:1c:
                    92:fb:29:a8:ed:4a:ac:dc:dc:59:e3:4b:1d:ab:53:
                    60:bf:46:e5:51:ca:4a:23:bb:46:1e:f5:6b:70:9c:
                    3e:99:15:5d:ae:58:d9:8b:5f:4a:49:eb:21:3d:85:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D2:91:03:44:5A:58:E3:76:10:76:96:3E:07:C6:EA:0E:AB:04:E4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dNKRA0RaWON2EHaWPgfG6g6rBOQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:16:fe:3a:85:eb:8a:be:75:89:0d:fd:0d:fd:44:ce:b9:6b:
         56:fb:cd:27:83:49:41:99:71:85:b6:e1:30:02:34:87:6a:75:
         5d:75:ff:d0:22:55:a8:33:21:67:a7:37:b7:b0:c8:fe:ff:59:
         6c:bf:b5:b1:52:20:20:49:a6:c1:98:57:16:b3:5f:e8:a9:81:
         7d:b7:a1:9a:9d:53:50:4f:55:17:fd:73:7b:f6:f1:20:02:0a:
         be:3d:28:ab:4b:a3:1c:13:44:f4:f3:a7:70:89:9b:96:70:93:
         e1:02:36:a5:bb:a2:e3:49:85:b6:05:e9:6a:1d:f2:9c:b7:75:
         90:72:99:40:86:78:6a:f9:c8:c4:a2:10:d2:58:3a:28:fc:49:
         77:77:03:b5:f9:c2:98:17:3f:a8:08:28:50:4d:4e:68:f3:64:
         8f:79:06:dc:06:e0:7b:5f:7b:43:c9:da:77:88:d4:45:0f:49:
         e5:c0:0b:30:51:e7:46:67:d1:29:74:75:ae:c8:15:f9:7b:72:
         87:b6:5c:12:e5:d4:45:e1:e4:c9:ff:22:cd:9b:3c:03:cc:ef:
         28:22:79:17:ef:38:55:06:b8:7b:e3:63:d5:14:93:d5:91:03:
         4a:d9:30:d7:1e:f0:c8:06:09:15:37:ca:77:ca:8b:20:72:81:
         64:9e:bf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org