Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa
File:                     zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa (raw, json)
Hash identifier:          o1rpft0c2SA3jWT5Y7OD7wZotEE+eX8TI+2LqG2q7P0=
Subject key identifier:   CD:D1:8C:51:32:D1:9F:50:3B:37:A6:F8:F9:9F:D3:C7:B1:0B:8A:E5
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01BF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa
Signing time:             Wed 01 Nov 2023 01:29:21 +0000
ROA not before:           Wed 01 Nov 2023 01:29:21 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        112.78.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:21 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=CDD18C5132D19F503B37A6F8F99FD3C7B10B8AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:76:a2:33:54:b0:60:4d:f6:89:a6:3a:46:
                    29:b3:7e:81:0a:45:dc:c3:af:43:1d:81:93:e9:b6:
                    ca:2b:f4:d4:2f:85:e4:ea:a8:45:6d:c6:48:e5:b1:
                    ab:a3:9b:23:03:60:e2:1b:48:7d:2e:1e:df:47:75:
                    80:e2:f3:d4:a5:bb:f1:ae:53:1c:0a:40:53:a7:df:
                    17:8e:7b:e6:9a:4e:3e:ef:25:d5:38:c7:a6:e0:ec:
                    fa:e8:4e:8f:6c:94:7f:11:5d:3f:2d:63:4f:bf:17:
                    d3:39:99:fa:88:83:a4:f3:7b:ab:1c:91:a1:28:cf:
                    52:fd:95:a9:4a:bd:65:58:56:44:14:f3:c9:1c:b8:
                    a9:1f:c6:8f:1f:cd:0a:d2:d3:dc:0a:0a:0d:79:8f:
                    a5:34:e4:51:c2:00:d6:be:b1:c6:71:08:94:7a:e0:
                    8d:54:11:77:92:83:a9:52:f4:ce:43:8c:42:e5:5a:
                    ca:82:82:88:2c:36:4a:af:58:18:f5:69:11:77:56:
                    41:5a:4a:ba:7c:51:eb:ea:02:bf:64:81:00:79:ac:
                    54:6d:1a:e3:6c:ce:89:d1:83:5a:bb:0d:a6:58:c3:
                    7c:e5:c1:bc:f7:a9:92:3a:05:68:64:b2:bb:38:87:
                    9f:f5:92:b6:9e:cd:4e:15:cc:f8:1b:24:07:4b:6d:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:8C:51:32:D1:9F:50:3B:37:A6:F8:F9:9F:D3:C7:B1:0B:8A:E5
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zdGMUTLRn1A7N6b4-Z_Tx7ELiuU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:45:6c:9d:36:b4:08:9c:f0:58:a4:0e:fc:f8:ba:f7:ed:
         39:0f:a0:5e:3c:82:2c:44:87:d9:11:5c:3c:e3:de:81:4b:09:
         17:3b:4f:e8:5c:49:e8:ec:c8:fc:2e:13:c9:c8:bd:fb:67:05:
         a1:d0:4c:00:72:67:dd:89:7c:85:24:4e:d7:c2:d6:13:6e:ea:
         27:5a:68:bd:f7:01:cf:21:77:3d:16:03:cd:45:0f:9a:8f:3a:
         24:bc:53:5b:2a:14:07:b1:d8:71:f7:24:6f:0c:00:4a:a6:dc:
         6f:1f:81:e4:f3:08:c7:61:e3:e9:22:98:a1:3e:99:96:e6:5d:
         52:33:da:43:7d:15:af:f0:82:9c:d5:67:ca:74:df:11:d3:c0:
         16:56:3d:bb:7f:2a:c9:2f:95:bc:7e:f9:f9:72:98:cf:98:49:
         e2:22:08:4a:58:e5:fa:91:7d:bc:9f:7e:27:8c:b6:4e:80:b9:
         38:b3:a2:de:3f:b1:f8:59:fb:34:27:0f:a7:fe:01:cc:04:ab:
         ea:13:50:a3:2a:13:98:18:d0:48:84:24:3d:10:3f:0d:48:02:
         07:1c:26:fa:2f:70:ce:99:5e:72:82:6b:6d:67:83:f6:ef:26:
         67:a0:9f:8f:d1:b5:e4:3d:cb:ee:c3:53:1f:4b:a8:0f:b1:ff:
         34:4a:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org