Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/h63LpreTP_koiw1eE3ZIgdvKr8Q.roa
File:                     h63LpreTP_koiw1eE3ZIgdvKr8Q.roa (raw, json)
Hash identifier:          7f/aWJTPF0FPjp9FoykKycAL80Fmc/jLm6+N9FLxwq4=
Subject key identifier:   87:AD:CB:A6:B7:93:3F:F9:28:8B:0D:5E:13:76:48:81:DB:CA:AF:C4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01B4
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/h63LpreTP_koiw1eE3ZIgdvKr8Q.roa
Signing time:             Wed 01 Nov 2023 01:29:16 +0000
ROA not before:           Wed 01 Nov 2023 01:29:16 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.180.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:16 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=87ADCBA6B7933FF9288B0D5E13764881DBCAAFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:91:56:71:1c:60:a3:2c:e6:04:7e:52:db:
                    2c:bb:7c:c8:45:d7:53:11:14:e0:60:ed:d3:ef:70:
                    1d:49:e7:87:e4:cf:43:48:93:00:a2:0b:9a:f3:5b:
                    7b:2c:11:b0:38:d6:6e:52:4c:50:74:40:dc:b5:61:
                    02:b1:e9:bd:24:a6:d3:be:f1:d7:53:34:63:16:90:
                    36:4b:fc:b0:09:f0:b4:63:7c:c9:28:5a:14:78:22:
                    12:3f:41:6c:b2:b7:21:ff:02:71:08:cc:8a:65:41:
                    d2:31:b2:c7:c9:4d:03:e5:23:18:21:7d:7d:40:65:
                    2f:62:08:55:4d:9f:d2:e7:8a:b7:a6:57:42:c1:8d:
                    65:6a:e5:3d:d5:6a:7b:16:c8:11:6e:ec:4e:bd:f3:
                    91:92:6c:cc:4c:62:f0:e4:82:26:a7:cb:f6:96:f0:
                    67:6b:22:7d:d6:5a:0a:73:45:4d:bb:52:72:0d:7f:
                    86:f3:13:45:88:18:43:ac:6e:57:b9:73:13:cb:cc:
                    8e:ce:01:20:4b:87:25:97:ca:2c:ba:66:6b:4c:cc:
                    f9:89:5f:69:21:c7:68:91:00:63:7c:8a:54:09:b0:
                    5e:a3:46:3a:fe:16:e5:14:d0:d3:15:70:00:1e:da:
                    59:70:3a:0c:44:7e:4b:93:0e:c5:5f:83:f0:6a:2b:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AD:CB:A6:B7:93:3F:F9:28:8B:0D:5E:13:76:48:81:DB:CA:AF:C4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/h63LpreTP_koiw1eE3ZIgdvKr8Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:7a:24:a7:df:5e:d0:d5:b8:31:fd:1a:73:2e:16:36:c6:c8:
         a9:4b:ef:be:ea:48:79:b9:9f:5b:64:1d:1d:c0:1e:f9:41:06:
         95:38:14:7e:52:91:d3:3a:cf:8d:75:40:47:29:e9:e0:05:12:
         bc:5d:40:ed:1b:d5:59:75:11:93:13:e3:a4:b5:d6:3c:3e:ec:
         8d:a6:c9:15:62:46:d5:84:9f:3d:ff:39:47:28:3f:e7:1d:07:
         d6:df:b9:f3:9a:a2:c5:ac:8a:64:ac:af:74:cf:04:b1:ed:20:
         f6:10:ca:48:09:be:e1:33:1c:8f:22:e9:b0:74:f0:7d:72:60:
         ff:1a:bc:ea:bf:bb:95:75:23:8f:f8:68:05:63:a1:35:0d:54:
         47:1b:52:97:40:61:99:fd:1d:5d:7f:d0:2f:3e:87:b7:86:68:
         4e:92:fc:90:fe:81:ec:d1:87:fc:b0:d1:15:75:64:1d:f3:56:
         72:0f:3e:09:76:f3:8d:97:9f:67:10:12:7a:35:df:35:29:6d:
         ba:98:25:0f:7c:c5:fb:13:bb:64:67:78:2e:8b:3d:1c:22:ea:
         aa:63:4c:05:e6:8d:20:46:ee:ba:0c:19:6f:c6:cf:bd:2a:99:
         2c:d0:71:df:ba:c3:3c:35:62:5d:24:f0:0b:2c:db:88:a2:61:
         ae:51:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org