Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/szccFILbUH8qsrvbYVfJgcxOhBU.roa
File:                     szccFILbUH8qsrvbYVfJgcxOhBU.roa (raw, json)
Hash identifier:          /84odtsPzjrdEFvcMg7bJ0m6gJdRFMHyyfmVB/Ri/8Y=
Subject key identifier:   B3:37:1C:14:82:DB:50:7F:2A:B2:BB:DB:61:57:C9:81:CC:4E:84:15
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01B2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/szccFILbUH8qsrvbYVfJgcxOhBU.roa
Signing time:             Wed 01 Nov 2023 01:29:15 +0000
ROA not before:           Wed 01 Nov 2023 01:29:15 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:15 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=B3371C1482DB507F2AB2BBDB6157C981CC4E8415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:47:32:25:9a:16:29:6b:64:94:07:07:5c:
                    90:10:19:68:db:98:12:4c:2d:f5:df:5b:f3:4f:c3:
                    d9:59:59:11:28:15:97:32:09:00:d5:f3:a5:9c:2c:
                    49:8b:d2:d3:4c:78:68:4a:24:82:d1:4e:cd:96:ff:
                    5b:04:dc:65:ee:5f:68:6d:ed:46:f6:4f:84:2a:e0:
                    9d:3a:d4:1e:9d:8a:5c:b5:13:ce:fe:be:c0:ec:74:
                    20:5a:df:25:c3:a5:fc:60:7a:9a:71:9a:d5:a9:b0:
                    88:a3:5d:af:95:5b:97:0e:6e:2b:f6:ff:90:90:07:
                    80:bc:69:86:aa:64:6b:1f:48:1d:b4:e0:02:f6:af:
                    4a:c0:4d:36:79:f4:f9:fa:96:19:7c:1c:12:53:7e:
                    0a:e9:29:e1:68:c9:c4:f7:b4:91:21:e1:ec:b2:b6:
                    96:15:81:4d:4b:db:2e:fa:69:b7:cb:f3:2e:20:d6:
                    fe:80:1e:3e:e4:99:7b:a1:5c:f8:92:6f:a2:b8:60:
                    8e:54:fc:06:eb:4d:c8:bb:3d:b6:fc:c2:b2:68:b5:
                    06:f0:87:46:b6:fd:e1:9a:c2:c4:42:37:15:5a:56:
                    31:40:5d:22:6d:a5:73:29:04:17:83:63:5a:31:0c:
                    90:5a:01:5e:7d:f8:da:4b:13:2e:93:f9:88:ec:f0:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:1C:14:82:DB:50:7F:2A:B2:BB:DB:61:57:C9:81:CC:4E:84:15
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/szccFILbUH8qsrvbYVfJgcxOhBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:8a:3a:00:e0:2e:ef:a9:9b:b0:51:b8:5b:98:5e:5a:6b:
         e6:f5:96:0f:46:20:e1:81:af:56:69:17:f8:c3:e1:9a:90:c6:
         ec:e7:51:ef:7b:a7:71:14:94:2f:c8:30:e9:7c:32:4f:01:f8:
         15:f6:b0:0e:7d:7c:7f:c1:01:5d:17:71:9d:db:fe:88:5f:17:
         4b:c9:87:73:04:60:67:df:3a:55:ec:f2:27:8d:66:0d:19:23:
         81:1e:74:2d:2d:c4:48:9f:9c:52:80:f6:32:4c:d5:a7:99:28:
         13:e2:4b:3d:78:85:e0:58:97:6e:b5:cd:d1:e1:c8:04:0f:1c:
         57:96:55:fc:37:17:c5:2c:55:5f:1e:65:46:cb:b1:4e:d2:a1:
         cd:5a:57:86:f2:11:65:2c:5b:f1:e6:b5:6e:d0:d9:fa:ee:64:
         20:5d:32:d1:e8:27:db:eb:34:f9:ff:73:55:64:7f:7a:46:e9:
         82:eb:95:00:8a:6e:07:30:07:f3:44:eb:44:7e:0b:48:bb:a7:
         93:ed:52:ae:90:54:91:73:77:bf:d7:86:cb:6c:fe:95:cb:28:
         13:4f:e5:30:34:54:af:83:a2:d5:41:fd:1e:e0:e1:ae:07:42:
         ff:b3:94:3e:f2:39:5b:fa:ce:f6:d8:7e:8a:96:7a:ea:83:14:
         17:d0:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org