Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/di2rzuotiE0z5LMLxpfZi2ReGrE.roa
File:                     di2rzuotiE0z5LMLxpfZi2ReGrE.roa (raw, json)
Hash identifier:          GZWgA1ciio0dOf78E5rd8hcChgIHE8OpSf7JMHfjd+k=
Subject key identifier:   76:2D:AB:CE:EA:2D:88:4D:33:E4:B3:0B:C6:97:D9:8B:64:5E:1A:B1
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01B3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/di2rzuotiE0z5LMLxpfZi2ReGrE.roa
Signing time:             Wed 01 Nov 2023 01:29:16 +0000
ROA not before:           Wed 01 Nov 2023 01:29:16 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:16 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=762DABCEEA2D884D33E4B30BC697D98B645E1AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:47:d4:a0:07:33:4d:4c:da:72:a3:1f:dc:da:
                    88:a1:74:a9:81:90:c5:97:c0:58:26:c1:5a:27:86:
                    10:05:65:ba:46:d9:1f:81:98:b1:24:db:b5:7b:3c:
                    e7:9b:e9:4d:05:b7:3b:78:f1:00:10:b9:00:16:db:
                    39:6b:bd:c6:e0:44:ba:6f:2b:63:bd:40:fd:0d:a7:
                    fb:68:a8:1d:16:f1:87:fc:4e:b5:3e:3d:45:f1:79:
                    8e:f7:90:89:12:0f:7e:21:f6:d3:50:83:1b:93:58:
                    63:cc:24:a3:0b:51:87:18:c6:40:51:fe:4e:40:de:
                    37:fe:8b:00:0f:88:86:6f:31:39:4c:40:fe:08:8e:
                    2e:24:47:98:cf:32:c9:7e:75:f0:6e:23:49:05:57:
                    23:07:28:8a:55:b2:ff:84:13:d0:c8:5e:5f:7b:fd:
                    25:8f:23:26:a5:f2:e9:24:1d:10:3e:fc:90:bb:a4:
                    48:fd:7e:80:65:95:c0:6d:d1:84:6c:b8:d1:32:bb:
                    1f:79:29:90:70:57:5c:9b:96:b0:11:be:99:35:40:
                    91:e8:7d:5d:46:54:7e:f6:3a:10:96:91:c1:66:8b:
                    88:e9:bb:76:95:31:6c:b2:0e:e8:4d:12:45:c5:ea:
                    17:1d:78:b3:36:8f:99:f8:fa:ca:27:87:a7:7b:df:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2D:AB:CE:EA:2D:88:4D:33:E4:B3:0B:C6:97:D9:8B:64:5E:1A:B1
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/di2rzuotiE0z5LMLxpfZi2ReGrE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:8f:b6:25:15:b4:5b:a7:dc:6d:0d:a3:68:ac:b1:56:7b:07:
         ed:47:de:cc:eb:e2:9d:2f:14:eb:28:26:25:97:8e:56:e7:16:
         6e:e9:41:f9:10:9a:53:9a:38:e2:81:ff:8f:fe:36:62:98:2b:
         d6:36:7e:95:8b:87:01:d1:d5:13:00:6e:f1:f6:34:4a:e3:37:
         bc:8f:f5:69:be:ef:55:47:50:38:28:df:ce:75:e7:1a:89:4a:
         21:ee:eb:ea:12:c1:ba:5d:9d:70:4e:5a:92:92:6c:2a:97:f2:
         40:e8:a4:10:57:30:01:14:34:00:54:0a:f0:5c:bb:65:f6:84:
         88:a9:7d:48:89:fa:02:c4:17:d3:da:70:fc:c3:20:88:31:95:
         81:9a:65:d6:b4:41:19:ef:23:60:56:b5:4f:9f:41:1a:ac:bd:
         7e:5c:69:04:d3:33:a2:5f:a4:9e:93:5b:4b:50:be:aa:03:9a:
         aa:b0:1a:41:b8:5d:0a:96:fb:19:9f:8d:56:a0:98:50:1b:f9:
         1c:7c:df:1d:80:cd:c0:77:33:99:ca:b8:35:bb:53:d0:8c:7d:
         aa:3d:b8:28:b5:5b:55:33:09:8f:86:c3:c8:81:a4:01:59:58:
         73:92:72:6e:76:6e:65:c6:88:de:30:27:22:4a:81:66:3c:1f:
         34:db:e7:b6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTI5MTZaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDc2MkRBQkNFRUEyRDg4
NEQzM0U0QjMwQkM2OTdEOThCNjQ1RTFBQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwR9SgBzNNTNpyox/c2oihdKmBkMWXwFgmwVonhhAFZbpG2R+B
mLEk27V7POeb6U0Ftzt48QAQuQAW2zlrvcbgRLpvK2O9QP0Np/toqB0W8Yf8TrU+
PUXxeY73kIkSD34h9tNQgxuTWGPMJKMLUYcYxkBR/k5A3jf+iwAPiIZvMTlMQP4I
ji4kR5jPMsl+dfBuI0kFVyMHKIpVsv+EE9DIXl97/SWPIyal8ukkHRA+/JC7pEj9
foBllcBt0YRsuNEyux95KZBwV1yblrARvpk1QJHofV1GVH72OhCWkcFmi4jpu3aV
MWyyDuhNEkXF6hcdeLM2j5n4+sonh6d732SpAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUdi2rzuotiE0z5LMLxpfZi2ReGrEwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9kaTJyenVvdGlFMHo1TE1MeHBmWmkyUmVHckUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQE0uCgMA0GCSqGSIb3DQEBCwUAA4IBAQClj7YlFbRbp9xtDaNorLFW
ewftR97M6+KdLxTrKCYll45W5xZu6UH5EJpTmjjigf+P/jZimCvWNn6Vi4cB0dUT
AG7x9jRK4ze8j/Vpvu9VR1A4KN/OdecaiUoh7uvqEsG6XZ1wTlqSkmwql/JA6KQQ
VzABFDQAVArwXLtl9oSIqX1IifoCxBfT2nD8wyCIMZWBmmXWtEEZ7yNgVrVPn0Ea
rL1+XGkE0zOiX6Sek1tLUL6qA5qqsBpBuF0KlvsZn41WoJhQG/kcfN8dgM3AdzOZ
yrg1u1PQjH2qPbgotVtVMwmPhsPIgaQBWVhzknJudm5lxojeMCciSoFmPB802+e2
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org