Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eXEYRGDYjbDDcuTNfDSiUyxWUCU.roa
File:                     eXEYRGDYjbDDcuTNfDSiUyxWUCU.roa (raw, json)
Hash identifier:          D4harYsDhtFQuVth78BdSw2o0Kz/ofV6aLSHasbmzjc=
Subject key identifier:   79:71:18:44:60:D8:8D:B0:C3:72:E4:CD:7C:34:A2:53:2C:56:50:25
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01D3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eXEYRGDYjbDDcuTNfDSiUyxWUCU.roa
Signing time:             Wed 01 Nov 2023 01:31:19 +0000
ROA not before:           Wed 01 Nov 2023 01:31:19 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:19 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=7971184460D88DB0C372E4CD7C34A2532C565025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:2b:1b:72:ba:75:f5:89:17:58:1d:ea:9a:
                    b1:3b:1a:72:a6:11:44:91:76:6f:f6:e9:bd:4d:2d:
                    d0:bc:ca:79:c3:56:5d:6c:7a:04:81:92:e9:cd:6d:
                    ca:42:fc:00:d4:ba:2d:a0:59:1c:fc:70:1f:e6:40:
                    70:8d:0e:b8:4b:bd:04:cd:7f:f7:6a:8c:21:93:5e:
                    e3:85:d0:5b:0a:09:39:b1:2d:df:46:e7:6d:7b:50:
                    ca:ce:50:23:f5:ec:3c:b7:01:ef:b9:d3:b2:3a:22:
                    13:26:3a:0d:90:15:3c:32:c1:7e:ca:f0:91:06:50:
                    5a:a1:b6:db:19:64:f4:de:a9:a3:84:86:09:46:60:
                    1e:ff:47:96:14:5d:b2:26:4a:6f:3c:4d:d3:38:fa:
                    c3:40:45:9e:8a:6c:5d:b3:fa:5e:06:01:5b:b3:c1:
                    3d:0a:fa:82:f4:27:92:45:f2:a0:c0:ab:ab:e1:79:
                    44:bc:4c:4a:9e:f2:86:6b:bf:71:00:de:b8:9c:8f:
                    ee:52:20:16:5e:6e:e7:a8:1a:5a:c8:10:ab:7a:6c:
                    3e:e6:b3:74:d6:d3:b6:f0:7d:b3:b5:8d:6e:9d:43:
                    42:c2:bd:11:30:25:b8:bd:7a:c4:71:4c:54:fb:d3:
                    32:77:f0:85:41:d5:83:ef:2a:02:21:77:6a:27:10:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:18:44:60:D8:8D:B0:C3:72:E4:CD:7C:34:A2:53:2C:56:50:25
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eXEYRGDYjbDDcuTNfDSiUyxWUCU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f7:07:4f:31:b7:1f:72:a0:16:78:67:f0:8e:b6:41:48:cc:
         e0:82:4a:3f:24:d4:e4:62:27:9b:2d:b6:c7:26:d9:27:13:77:
         c0:d0:2b:de:3f:eb:88:3a:8e:ec:9c:a2:39:b6:91:ea:31:95:
         98:17:2b:97:d6:16:61:17:3e:9b:a1:ee:82:45:ae:f1:95:fa:
         93:fe:99:4f:9d:5e:66:99:3e:c3:19:c1:ba:89:82:6d:f0:c8:
         17:e4:be:76:0d:99:f2:5d:24:73:69:80:60:75:e0:0b:bb:f4:
         6a:de:c4:0e:23:9d:57:95:63:58:5f:36:3b:3b:85:ab:ee:df:
         cb:ef:d2:fb:0f:61:7b:ea:25:0d:fc:5a:8b:c3:3e:89:91:e9:
         6e:7d:da:8a:95:f2:f2:06:55:61:aa:3f:0a:eb:fa:2e:4e:24:
         e9:60:c7:26:c6:c7:b3:b5:15:f0:82:39:6a:b4:d7:51:b4:a3:
         d4:4e:f7:fe:56:30:87:de:46:74:c6:2d:53:e1:53:67:5d:f4:
         80:26:ad:7d:e2:ab:7f:3b:20:d6:8a:61:d8:eb:3e:e0:67:58:
         eb:4b:e4:12:de:83:ba:bb:95:08:1c:e3:bb:0b:25:e4:72:d5:
         6e:77:20:b0:e9:3d:4a:e9:a8:00:ab:6d:61:1a:41:df:4f:d6:
         78:a1:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org