Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8P0_16gl8OWJI0JyMq511kEfjqI.roa
File:                     8P0_16gl8OWJI0JyMq511kEfjqI.roa (raw, json)
Hash identifier:          20Gn/oSpYPgYsy8L1m8R1kQ3E3JKJ2cOfgDNMyuKaD8=
Subject key identifier:   F0:FD:3F:D7:A8:25:F0:E5:89:23:42:72:32:AE:75:D6:41:1F:8E:A2
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       021D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8P0_16gl8OWJI0JyMq511kEfjqI.roa
Signing time:             Mon 30 Sep 2024 01:33:41 +0000
ROA not before:           Mon 30 Sep 2024 01:33:41 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        112.78.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:41 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=F0FD3FD7A825F0E58923427232AE75D6411F8EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:ff:15:3e:3a:ed:07:09:d1:24:64:cc:36:
                    ed:e4:e3:3b:d7:21:88:f9:6e:ed:15:75:f8:3f:6c:
                    55:28:f7:cd:b4:62:63:52:1a:81:ec:99:e8:cb:42:
                    3f:7d:2b:74:07:f0:d1:a4:fe:32:70:d3:2a:dd:a6:
                    e0:6a:e6:79:ee:ed:af:d3:ff:5a:85:fe:49:0a:4f:
                    cb:48:76:e2:0c:83:64:01:41:2c:ec:60:cf:6a:6a:
                    74:b0:02:c0:a9:ce:17:c8:e3:f8:e8:04:d0:bd:cb:
                    17:a7:a0:d7:52:ac:b3:1f:b1:e2:75:e3:79:c0:b4:
                    1d:e4:35:86:0b:12:04:45:82:24:5c:cb:77:68:d1:
                    2f:ca:78:d4:e0:64:45:9f:bc:55:08:8f:5a:6f:c4:
                    d5:7f:15:95:29:c9:e7:ca:0d:9b:b0:fe:cd:19:5d:
                    90:5a:f8:31:1d:92:90:9b:27:ec:f9:2b:b8:4c:ac:
                    3b:cf:43:44:6c:39:f8:89:99:d7:7b:0f:7c:37:ca:
                    10:52:4b:50:c2:c1:99:7d:a0:eb:65:aa:8f:2b:40:
                    36:44:d4:b8:5c:e1:14:28:e6:e8:ad:24:ac:c6:7d:
                    fa:58:90:b0:4d:1c:9b:1d:01:ad:b4:e6:e6:39:52:
                    a0:c8:34:42:29:c9:c2:55:6d:6e:3b:b8:c7:55:ad:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:3F:D7:A8:25:F0:E5:89:23:42:72:32:AE:75:D6:41:1F:8E:A2
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/8P0_16gl8OWJI0JyMq511kEfjqI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:cb:72:bf:25:bd:73:63:6d:dd:48:91:4f:25:02:4f:32:3a:
         56:3c:71:0f:96:20:32:72:aa:a0:96:84:4b:77:e1:57:c8:87:
         a4:8f:1d:cb:1e:14:50:98:96:c8:c6:db:2c:1b:74:f1:a5:38:
         21:5d:3a:e8:58:05:63:a3:bb:de:b6:05:ea:2d:a6:e5:af:c6:
         93:83:e1:3a:d9:3e:68:32:58:a4:1f:24:5f:21:fb:42:85:b3:
         cd:d1:26:37:0d:a1:53:e3:31:37:0c:b8:8b:de:62:a2:d7:80:
         64:5c:b2:5e:72:04:9d:b3:2d:41:c7:b6:c2:44:b9:90:4a:09:
         be:c7:92:d7:68:8a:5f:7a:e1:04:27:61:a6:a0:7a:5a:fd:2a:
         9f:36:94:84:a3:17:2f:ed:4d:5d:61:92:14:58:22:44:34:bc:
         79:8e:f2:bf:c6:c2:e6:a5:92:2d:d5:bd:9b:9f:c6:71:19:9d:
         29:2c:25:f2:91:62:9b:de:f2:0d:75:bb:f8:9b:26:26:e8:52:
         c9:e6:96:8c:a8:fc:dd:b3:f1:32:3f:6e:19:d8:3e:03:f5:ae:
         87:a0:89:e5:46:42:7b:1a:3d:ec:53:5a:0e:81:56:5c:a0:b4:
         c4:f7:42:5d:93:23:23:aa:5d:93:75:be:ba:9b:a5:9b:95:0c:
         7f:b0:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:01 2024 by rpki-client on console-fra.rpki-client.org