Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ut3PIgWZwwETfu04pqF8vzMZEXE.roa
File:                     ut3PIgWZwwETfu04pqF8vzMZEXE.roa (raw, json)
Hash identifier:          vKVKyUlHAyCtQ5U/zs13JGwiOONAu4GMXD8vhyqEvzo=
Subject key identifier:   BA:DD:CF:22:05:99:C3:01:13:7E:ED:38:A6:A1:7C:BF:33:19:11:71
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01BD
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ut3PIgWZwwETfu04pqF8vzMZEXE.roa
Signing time:             Wed 01 Nov 2023 01:29:20 +0000
ROA not before:           Wed 01 Nov 2023 01:29:20 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:20 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=BADDCF220599C301137EED38A6A17CBF33191171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:8f:60:87:83:d6:38:0a:fa:4f:b2:44:5a:
                    0d:ff:d9:a6:7e:c3:b0:cb:db:40:5e:29:8e:90:a8:
                    f3:66:84:c9:64:12:d0:3d:50:77:de:d8:85:8d:64:
                    cf:22:6d:25:25:9d:37:8c:f9:ea:cf:4b:9e:cc:0c:
                    41:6c:c0:9d:0f:35:1f:ad:a8:3b:97:fe:51:bc:66:
                    df:2c:2f:ea:13:75:15:91:2f:44:41:0a:5d:b2:32:
                    93:cd:3b:ff:1e:91:de:0f:ad:46:fa:5d:20:fd:56:
                    4f:b5:24:2f:05:0f:06:94:b8:d5:40:25:52:52:d7:
                    41:03:c8:80:2e:12:af:f2:45:1f:a8:7d:83:78:e0:
                    4f:73:56:5f:62:c2:81:12:bd:af:83:fc:d7:62:ea:
                    35:61:5c:d8:e5:08:59:40:db:f2:d4:bc:3b:84:be:
                    c4:93:e0:30:36:9b:f2:34:c3:d1:8a:06:c7:c8:eb:
                    06:cc:11:31:3c:1c:a9:be:75:30:56:73:9f:1e:05:
                    2d:80:c8:c7:c9:57:31:0a:21:95:eb:95:21:bf:d7:
                    0d:41:74:0f:59:a7:8f:b8:b5:2a:12:3f:8d:4c:b9:
                    f4:2c:db:3b:04:61:8f:40:22:94:ed:9e:2a:f9:86:
                    cb:30:63:04:99:53:6a:d0:9e:a4:b8:0e:1a:5b:85:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DD:CF:22:05:99:C3:01:13:7E:ED:38:A6:A1:7C:BF:33:19:11:71
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ut3PIgWZwwETfu04pqF8vzMZEXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:e8:11:79:96:79:93:2e:d8:4c:2a:a4:4c:ab:fb:27:1d:f1:
         e3:1e:22:dd:01:82:77:cc:83:1f:59:ff:71:a0:06:bd:aa:71:
         97:4c:f4:bc:8a:88:50:17:0a:f8:c0:03:53:b6:ec:80:53:7f:
         91:78:cf:67:b7:47:c8:ae:97:c4:c9:ff:30:89:63:91:ea:29:
         0e:2c:a9:cc:e7:85:af:47:a4:97:ec:7e:a4:fb:a8:40:9a:e8:
         58:3a:b8:60:2a:ca:80:b4:2d:1b:8a:0e:c1:ff:8d:22:da:4a:
         55:49:a7:37:ac:20:df:4d:91:53:29:7c:93:54:49:6c:8c:c2:
         e5:47:41:51:68:3e:1c:6d:9b:90:f8:24:ef:7f:f7:7b:64:b0:
         ff:cd:0e:9b:ea:c7:71:47:d1:0e:f2:2e:ae:0a:6b:3b:34:19:
         7c:31:9b:0e:91:03:4c:22:87:57:83:a6:2a:0a:39:72:63:1e:
         64:71:94:d5:8a:6f:15:01:cd:30:c3:0b:08:e8:ed:62:ef:e7:
         7c:5d:ef:be:29:14:9e:20:91:7b:05:f5:c1:18:48:c9:30:1a:
         26:cf:61:4f:ab:46:b8:e7:14:5c:61:a7:0f:61:46:db:91:62:
         10:6e:e4:04:ad:9c:4b:21:14:d5:d2:9c:37:58:b9:0e:15:b2:
         c5:8f:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org