Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ozn8UnRQQ8jzrStxe8R0P-UQWME.roa
File:                     ozn8UnRQQ8jzrStxe8R0P-UQWME.roa (raw, json)
Hash identifier:          IfgmUlYFMxd0eCpCofs7BIwYUVYWJQQBEa6dwE74dXI=
Subject key identifier:   A3:39:FC:52:74:50:43:C8:F3:AD:2B:71:7B:C4:74:3F:E5:10:58:C1
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01F0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ozn8UnRQQ8jzrStxe8R0P-UQWME.roa
Signing time:             Sun 30 Jun 2024 01:29:02 +0000
ROA not before:           Sun 30 Jun 2024 01:29:02 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7684
IP address blocks:        49.212.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:29:02 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=A339FC52745043C8F3AD2B717BC4743FE51058C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:ec:2f:ce:a7:87:9f:30:6f:30:12:1d:67:
                    18:ba:e8:18:25:a0:d7:53:94:05:8f:0b:47:16:98:
                    3c:ec:8b:79:9d:cb:df:25:48:84:c1:ec:7a:99:aa:
                    44:8d:d6:77:db:e9:d7:3d:0d:0e:7a:92:70:5c:6d:
                    cc:dd:70:8a:9e:c4:0b:a8:c1:da:aa:58:b7:1e:2a:
                    62:02:52:4c:f4:47:17:cf:2a:0e:d6:8f:84:d6:51:
                    27:5a:eb:93:f3:df:c4:26:6d:6f:2d:17:04:f6:8a:
                    75:5b:0e:08:f6:c6:ea:dc:97:56:64:67:12:c6:ba:
                    3d:9e:58:9e:04:19:a0:5c:f6:0d:d4:cb:52:7c:37:
                    cf:7c:ea:b2:6c:24:62:c8:ed:77:34:cd:b2:a9:e0:
                    44:ea:ec:e6:8f:5f:6e:1e:0c:bf:37:21:f1:d8:60:
                    09:00:c5:e5:b5:f1:a9:1b:59:bf:ef:8c:f6:1b:d5:
                    4b:7c:e2:4b:48:dd:eb:8f:cd:e1:2e:c3:08:0d:0c:
                    fd:69:07:68:cc:a7:d7:eb:7f:54:be:bf:c5:05:24:
                    ac:16:a2:7d:bc:a7:b2:ac:a3:8c:63:63:b3:ca:0a:
                    15:81:ac:e0:4a:73:9f:75:2b:7b:15:2a:39:da:79:
                    33:49:a4:55:63:24:c4:7d:79:8f:51:2f:f5:2b:7e:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:39:FC:52:74:50:43:C8:F3:AD:2B:71:7B:C4:74:3F:E5:10:58:C1
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ozn8UnRQQ8jzrStxe8R0P-UQWME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:ee:2b:fc:dc:5f:25:39:7d:3c:e7:42:ae:04:f2:4b:9f:39:
         0a:83:17:d5:5d:fb:e1:b4:05:52:21:e1:5f:e8:ae:ff:b6:45:
         a4:ce:5e:05:81:4d:99:80:9c:8c:9d:a6:e9:81:8a:d3:4a:3a:
         6b:d6:8c:8c:f2:9a:12:e8:b1:38:49:28:4b:c7:53:f0:84:5b:
         8a:2b:ea:56:f7:07:3d:b9:cf:65:27:ba:cf:ed:29:b5:ed:fb:
         99:46:c3:62:c4:08:a8:30:fe:bc:5f:7a:55:9d:c9:e7:01:97:
         9d:ce:5c:dd:f5:73:c0:fc:6f:56:2a:25:1a:e2:dc:67:dd:80:
         2a:b2:45:85:28:ad:07:ba:da:52:93:a8:f2:7a:28:41:89:4b:
         b9:b2:41:0d:68:5b:d8:4f:8e:ec:1e:3e:9b:3c:8d:a2:d2:3a:
         97:7c:fc:9a:9c:33:21:d2:11:4c:ab:19:16:ee:73:66:5a:7e:
         34:17:be:29:2f:e6:cd:3e:89:d5:73:5e:3e:4c:18:4b:da:71:
         cb:0f:b0:61:0f:d4:b3:87:8d:7d:67:bb:74:a6:af:69:f2:4e:
         31:a6:7b:c2:4f:9e:81:c8:d2:ba:c1:5b:f3:f7:da:32:37:36:
         24:b9:de:35:10:3b:03:10:0c:29:40:e3:19:1c:89:19:6a:a6:
         68:e2:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org