Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/yMSI85z5HT2J21fXGZIAZvK5zCo.roa
File:                     yMSI85z5HT2J21fXGZIAZvK5zCo.roa (raw, json)
Hash identifier:          2P++gzADNU4UWCMEX10hyed3l3jNUKrBvmki0odGvrw=
Subject key identifier:   C8:C4:88:F3:9C:F9:1D:3D:89:DB:57:D7:19:92:00:66:F2:B9:CC:2A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01C0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/yMSI85z5HT2J21fXGZIAZvK5zCo.roa
Signing time:             Wed 01 Nov 2023 01:29:22 +0000
ROA not before:           Wed 01 Nov 2023 01:29:22 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:22 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=C8C488F39CF91D3D89DB57D719920066F2B9CC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:4a:53:e6:60:9c:69:75:c2:42:f4:77:bc:
                    25:68:10:13:2c:c5:cc:a7:c5:ef:98:e2:62:ab:d6:
                    d8:2f:00:6b:61:5c:c4:06:42:f4:3b:e9:59:79:c9:
                    14:f0:1d:41:e3:b3:5a:9a:8b:46:14:ec:33:f9:92:
                    54:d1:aa:2a:d3:db:ec:61:9b:57:51:60:27:c3:a9:
                    e0:91:9e:84:df:f1:33:d5:00:64:a8:f4:8d:00:c7:
                    6e:1f:29:fc:d1:cb:09:f0:dd:67:15:2e:e1:dc:dc:
                    e9:1c:96:4a:6f:3b:bd:00:9e:f5:f9:bd:09:8a:a3:
                    48:ce:81:ac:75:cf:71:23:5d:d4:d8:59:64:5e:24:
                    38:91:db:49:8b:e6:ac:57:6a:e3:fb:f7:28:46:55:
                    b1:2a:77:0b:6d:da:91:07:1a:e7:7c:6a:46:f7:f9:
                    f2:d5:2c:e4:e5:26:19:69:9e:5d:eb:fb:ab:32:ed:
                    7c:83:2f:4e:fd:60:b9:bd:04:d9:a3:8f:7c:f6:59:
                    5e:17:dd:dd:e9:16:63:05:17:8a:08:5f:05:a2:ae:
                    b0:46:4a:93:13:fb:80:8f:fa:ed:4f:73:55:82:e4:
                    30:d8:eb:de:2c:b5:73:f8:0f:d4:d9:46:c4:b1:ac:
                    ad:27:c7:16:e0:43:7f:af:68:69:ac:d0:b5:f6:fa:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C4:88:F3:9C:F9:1D:3D:89:DB:57:D7:19:92:00:66:F2:B9:CC:2A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/yMSI85z5HT2J21fXGZIAZvK5zCo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:0c:70:a7:74:c3:4f:58:eb:a7:cb:ac:2f:d1:06:66:ff:
         a0:38:d0:19:e7:8e:29:f5:5e:4f:e1:79:90:10:0e:85:ee:61:
         38:c6:20:68:17:97:6f:5e:d8:c6:23:a2:c8:1b:56:45:84:4f:
         fb:33:04:a3:3f:d3:ae:00:2a:27:26:8c:d3:76:7f:28:49:a8:
         7b:42:61:d4:00:1c:a3:4c:52:77:f1:09:03:30:96:a2:5d:c2:
         87:ce:95:04:da:f6:3f:03:42:d8:be:27:99:f9:0a:1d:42:11:
         8f:0b:03:93:fe:11:e1:66:3f:64:f1:b1:46:4c:90:d8:c4:e9:
         f4:d4:5f:b0:b4:a3:30:3a:e4:93:8f:b2:8b:ff:86:f5:e3:5b:
         3e:00:cc:67:80:00:45:5a:b2:c3:2e:b6:d2:d2:c8:fe:c5:1c:
         c7:c9:16:74:6d:d8:d8:79:cc:9d:ef:b0:25:52:c6:6a:e8:3a:
         7b:fd:8b:b2:75:b6:b3:96:98:40:32:d9:f1:1e:a0:8a:53:23:
         96:1c:4f:38:45:79:3a:eb:f8:fd:eb:1f:5d:cc:07:5c:45:6e:
         92:89:95:cd:68:15:f8:ca:a8:64:8e:82:ec:26:33:9d:a5:95:
         d2:b5:86:ec:e1:55:92:81:bc:91:e8:30:d7:b8:33:66:d5:93:
         26:1a:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org