Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fnKYFv_oaUum6q_qasrZZs7aqT8.roa
File:                     fnKYFv_oaUum6q_qasrZZs7aqT8.roa (raw, json)
Hash identifier:          PyVZqOxmnvYmIt5059m49eXdm+mHjbV7cEEwNalEnpQ=
Subject key identifier:   7E:72:98:16:FF:E8:69:4B:A6:EA:AF:EA:6A:CA:D9:66:CE:DA:A9:3F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01D8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fnKYFv_oaUum6q_qasrZZs7aqT8.roa
Signing time:             Wed 01 Nov 2023 01:31:23 +0000
ROA not before:           Wed 01 Nov 2023 01:31:23 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:23 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=7E729816FFE8694BA6EAAFEA6ACAD966CEDAA93F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:1f:96:92:81:03:8a:81:cc:c6:10:b7:81:
                    a1:6e:90:4c:a5:f7:2a:b8:b3:36:26:9a:1a:82:a9:
                    16:48:a4:fd:b7:2c:df:61:8c:99:07:f7:50:b6:6f:
                    12:e0:98:26:6d:3b:8f:45:d2:cd:29:82:2b:6e:d2:
                    78:7b:cf:9d:13:4b:44:79:da:de:e7:aa:82:7b:20:
                    0f:3a:66:f9:d4:29:66:00:d4:d1:9d:b0:18:f9:7c:
                    23:cf:f0:a3:48:27:77:34:39:cd:c9:cc:2b:2a:a0:
                    70:16:90:1f:0e:06:07:ea:b3:60:32:a2:45:a6:57:
                    f7:df:66:1a:c9:cb:43:b4:c1:fd:4b:9b:0d:4b:78:
                    65:04:b9:54:b6:0c:58:f3:98:53:41:74:cd:99:88:
                    dd:af:8f:e7:dd:2a:5c:8d:d1:e3:35:61:0d:f4:f5:
                    b6:3a:03:3b:53:45:2d:f6:8b:e1:21:5e:99:57:22:
                    12:cc:f3:67:f1:99:13:13:58:59:95:0a:9f:ad:0f:
                    f7:69:e2:26:a8:ea:28:57:51:9f:7d:a9:39:1d:02:
                    a2:91:0a:4a:e3:79:60:3f:b8:e0:a1:9a:89:cb:fc:
                    2e:10:d5:f0:7c:24:d7:c8:b8:17:14:f6:6d:18:02:
                    e0:59:58:65:07:8b:51:0f:ec:d9:42:f6:0c:46:48:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:72:98:16:FF:E8:69:4B:A6:EA:AF:EA:6A:CA:D9:66:CE:DA:A9:3F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fnKYFv_oaUum6q_qasrZZs7aqT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:8a:fb:57:ee:ac:57:09:7b:73:1b:d9:54:4d:23:e5:1e:1f:
         d0:2c:32:c7:6e:d6:6b:b2:dd:26:7e:f8:94:54:ce:20:75:ea:
         65:9a:74:a9:4b:22:69:ac:10:1b:69:c4:eb:ee:1f:fa:c3:10:
         c8:5e:23:5a:a2:6f:7f:95:5e:a1:5c:68:ef:a7:b7:bd:8a:10:
         8f:ac:c2:16:6c:f0:ea:67:b5:97:1b:1d:38:0b:df:a2:fc:75:
         54:66:06:91:f7:90:9c:c1:2e:4f:fb:20:e8:2f:d6:7c:76:c3:
         85:1b:1f:bc:0b:3f:7b:79:55:e4:97:39:47:03:0b:42:bd:ab:
         ea:73:ef:be:b5:2a:8b:b7:4a:50:a5:b8:b9:bb:d2:53:09:5f:
         fb:9c:72:67:94:4d:78:a3:0f:f8:ac:5e:22:89:da:52:e2:32:
         3e:b6:f9:df:eb:2a:a5:bc:7b:11:9f:57:8e:c6:8f:1c:e7:be:
         72:eb:51:41:24:22:c7:d3:2f:5c:b8:ae:56:13:74:7d:ba:8d:
         46:7a:6c:24:ae:bd:94:c9:50:52:f9:25:db:7e:62:97:33:21:
         03:8d:38:a1:46:1e:a6:91:ae:d0:02:09:d5:89:c2:e1:ea:24:
         92:e8:6b:c1:52:d8:57:9d:bc:5e:7b:91:4b:94:b8:74:81:dc:
         4b:35:05:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org