Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa
File:                     vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa (raw, json)
Hash identifier:          FYeEGRmM00upKCTNo5dQpLtzmSsJu2YvIyfkwCxRNuY=
Subject key identifier:   BC:FB:79:ED:58:77:3B:E3:CC:3E:22:BA:64:5D:E0:BD:D6:18:ED:CB
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01D0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa
Signing time:             Wed 01 Nov 2023 01:31:17 +0000
ROA not before:           Wed 01 Nov 2023 01:31:17 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        49.212.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:17 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=BCFB79ED58773BE3CC3E22BA645DE0BDD618EDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:b3:bd:12:c9:06:cc:1a:68:89:32:97:55:
                    10:7d:07:8c:3d:c8:e1:55:9c:2f:92:83:10:06:20:
                    45:ed:a9:40:fd:78:62:93:06:44:65:34:a4:9b:8f:
                    a2:c4:5e:f6:38:d1:29:00:05:f2:3f:a0:dd:d2:1e:
                    77:7b:da:7c:37:f1:44:18:63:39:f3:0e:13:6a:35:
                    6a:be:28:b1:0c:8c:de:1d:48:fa:fb:90:3d:2d:ed:
                    a1:7f:e9:e4:5e:c3:2c:a5:9a:0c:25:45:09:78:c8:
                    b9:9e:64:a8:00:13:92:81:6c:6c:c9:3e:9e:e5:6c:
                    83:c8:04:8e:1a:c2:1a:e7:43:7e:c5:5b:73:b4:b1:
                    51:83:b9:ee:f7:8f:4c:5f:de:aa:a8:e9:1d:10:2e:
                    06:4b:04:e8:53:f0:8e:11:78:d9:75:d7:e2:35:5f:
                    e6:94:97:7a:fc:f3:c0:68:d3:50:71:a6:39:e8:3d:
                    2f:e9:b9:ad:7b:5f:5f:05:c1:80:ad:eb:3b:95:bd:
                    71:d7:7e:bf:f2:03:b3:c0:ab:f7:40:b2:c3:44:2d:
                    fb:5e:03:fe:55:0b:82:99:f4:e2:df:1c:86:95:29:
                    84:57:9a:84:36:3d:30:96:58:01:ab:f4:97:b8:73:
                    ca:ea:ad:f8:f9:fd:0a:4a:54:fe:76:17:36:0f:c4:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FB:79:ED:58:77:3B:E3:CC:3E:22:BA:64:5D:E0:BD:D6:18:ED:CB
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vPt57Vh3O-PMPiK6ZF3gvdYY7cs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:f0:c3:31:4e:7e:a8:35:be:4e:91:31:03:72:9b:fa:75:
         c7:6a:c2:41:42:24:7c:0a:87:f6:9a:58:b0:bb:5e:45:06:5e:
         1e:4b:a6:1d:1b:66:47:7a:99:df:50:76:84:21:99:93:9a:0b:
         de:c3:27:91:67:e1:95:74:6e:3b:4f:cf:32:18:87:80:a8:f2:
         56:09:7f:cc:0f:bb:54:97:d2:a7:70:fc:b7:65:fb:dc:76:d9:
         4c:0b:ef:8c:e3:12:6e:85:20:47:9e:e3:bc:d8:b5:42:d4:01:
         0a:b0:e5:d4:45:c2:0b:a3:95:27:bd:ea:a7:e1:b5:18:37:b9:
         61:17:c5:cf:71:d1:d1:77:99:86:4c:0e:55:57:cb:4a:84:75:
         c6:e8:c4:20:4a:70:c4:77:1e:4a:3d:53:d9:74:78:53:cf:b1:
         ff:64:34:f4:9f:92:67:60:65:39:ac:3d:53:5c:d2:1a:a9:50:
         47:e8:24:85:d8:c9:e6:cf:82:26:f5:78:a6:6e:5b:e9:13:f4:
         b2:67:b2:42:94:ff:6e:62:3e:f2:9e:7a:4b:e3:f1:fa:d8:ae:
         51:a3:ec:b3:03:bc:2f:29:2b:1b:5d:8e:f8:8e:53:8f:97:ca:
         1a:c2:a7:59:75:8c:e3:30:32:d8:4c:23:80:18:4b:e2:ac:0d:
         03:a1:41:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org