Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zzddRdIV5ILm5puQRvkwpoXZuRE.roa
File:                     zzddRdIV5ILm5puQRvkwpoXZuRE.roa (raw, json)
Hash identifier:          TQdGgn5mPJmlNryT9HzJatVcaqyLB+70IW+BWbQbMvo=
Subject key identifier:   CF:37:5D:45:D2:15:E4:82:E6:E6:9B:90:46:F9:30:A6:85:D9:B9:11
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01B0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zzddRdIV5ILm5puQRvkwpoXZuRE.roa
Signing time:             Wed 01 Nov 2023 01:29:15 +0000
ROA not before:           Wed 01 Nov 2023 01:29:15 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        112.78.222.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:15 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=CF375D45D215E482E6E69B9046F930A685D9B911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c2:c4:63:43:75:0f:f5:a0:dd:8b:5d:96:a2:
                    65:11:c5:6d:77:85:14:fe:dd:26:0d:28:e8:c2:f2:
                    12:46:94:92:51:98:3b:d8:fb:1f:13:78:b0:51:ac:
                    b6:bf:24:85:d9:4e:5c:5e:79:b0:b3:04:3d:73:86:
                    88:38:e7:f9:60:ec:61:15:dc:14:bc:01:57:99:7a:
                    58:3d:56:ef:b5:39:9e:36:b6:e6:ed:80:a4:a7:34:
                    74:6a:c3:f8:31:c1:2d:4c:59:56:c5:97:99:58:a1:
                    25:6a:87:93:df:84:7e:84:10:58:2a:50:d5:c3:c4:
                    4c:bf:21:a9:5c:87:d7:ad:6a:2a:a5:26:8a:22:bf:
                    a2:a4:d8:1d:2f:62:d4:ea:c8:0c:3b:fa:5d:d3:c2:
                    84:e0:6c:36:2e:44:ba:27:3e:4a:3d:a0:f2:e5:d1:
                    fb:ec:32:d5:c9:e9:03:76:af:92:bc:4d:9c:a7:3c:
                    3a:81:29:3f:76:57:fb:43:7d:e2:f6:cb:b6:70:b7:
                    0c:bb:4f:d1:c8:f1:ee:de:dc:97:22:35:18:ba:55:
                    c0:06:24:a6:c1:cb:c9:79:28:cc:58:67:fb:de:93:
                    26:db:e1:dc:24:d7:c7:63:c2:90:e7:ca:10:8a:16:
                    63:8f:9d:0a:aa:41:19:fe:db:2a:2f:a6:92:6b:1e:
                    46:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:5D:45:D2:15:E4:82:E6:E6:9B:90:46:F9:30:A6:85:D9:B9:11
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/zzddRdIV5ILm5puQRvkwpoXZuRE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:f0:3c:28:d6:b1:1a:af:5b:48:02:13:75:76:7d:54:80:21:
         ab:07:4d:1a:a7:b8:ad:ad:46:60:15:8b:98:de:96:74:90:23:
         d3:c5:bf:6d:c3:89:91:5f:a7:fb:de:3b:9a:4d:b2:72:7b:3e:
         f7:40:19:e3:ee:ce:10:e9:3c:67:20:ce:0d:bc:1b:32:fa:fd:
         42:b7:63:5e:ba:6e:df:f3:67:f7:c6:77:db:2a:ad:16:e5:a2:
         02:59:b3:16:bf:a8:9a:a4:ac:57:3b:f7:8c:39:af:c8:47:27:
         7d:e4:77:1e:5d:3b:04:c2:f4:78:5d:b7:de:5d:a7:fa:06:75:
         b0:00:b0:19:bf:04:3a:62:38:cd:b6:ff:02:fb:3e:41:35:98:
         e0:c0:3d:8c:a3:e3:88:c3:80:bd:79:9b:e1:b8:4c:dc:68:75:
         65:d3:c8:56:90:aa:a0:3f:fb:38:3c:de:8e:ea:78:0e:57:66:
         b2:f1:2f:98:4d:af:9a:9e:4a:ec:f1:83:ef:ec:75:89:67:c4:
         93:11:c6:a2:8f:39:7f:22:20:13:f6:21:73:ef:e3:15:c6:8a:
         a2:62:3a:6d:58:fe:2f:60:3e:77:a7:93:93:15:80:4c:41:e1:
         5a:04:aa:62:c0:4f:19:13:f6:ac:5d:43:a2:1b:cc:df:4d:b2:
         86:3f:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org