Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AIrF6_fISYrPU9Za7_d15gyvDs4.roa
File:                     AIrF6_fISYrPU9Za7_d15gyvDs4.roa (raw, json)
Hash identifier:          4mUoyio8e/ysjt+cDS8xYRE6iGBsd1A8OJB/ePk9Qio=
Subject key identifier:   00:8A:C5:EB:F7:C8:49:8A:CF:53:D6:5A:EF:F7:75:E6:0C:AF:0E:CE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0209
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AIrF6_fISYrPU9Za7_d15gyvDs4.roa
Signing time:             Mon 30 Sep 2024 01:29:59 +0000
ROA not before:           Mon 30 Sep 2024 01:29:59 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:59 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=008AC5EBF7C8498ACF53D65AEFF775E60CAF0ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:fc:83:07:0f:70:e2:26:d1:20:0a:13:eb:
                    4c:fa:ce:7e:20:d8:6c:fa:23:5c:da:74:02:1f:8e:
                    c1:9e:6b:8a:b0:96:e3:3c:e0:cd:05:20:16:39:af:
                    49:33:a4:74:c2:2a:40:e3:3e:0e:43:04:e7:89:00:
                    d7:2c:b6:8d:60:ee:13:a6:b5:c5:16:f0:7e:2c:b8:
                    58:98:28:ed:0f:71:9b:9e:7b:17:36:0f:fd:d7:5d:
                    a2:e0:96:49:27:f3:8d:a3:33:ab:0d:db:64:24:34:
                    9d:63:8a:34:b1:a9:1a:a5:91:9a:3c:d8:46:1c:f6:
                    18:da:78:d6:9d:a4:e4:0c:d6:b2:9f:b7:51:d6:fc:
                    3e:8d:f2:77:76:9d:37:e1:9e:32:49:fc:6a:81:14:
                    12:b5:22:df:b3:42:cd:b8:01:eb:8b:00:84:c1:0e:
                    ac:37:4a:51:01:ad:1c:ba:8a:f2:ee:5d:bd:3e:d3:
                    c6:37:04:e0:29:ff:8b:57:59:76:23:3d:3a:9d:4b:
                    39:4e:95:67:c6:35:65:35:2c:df:42:05:24:7d:a4:
                    19:5c:3f:2b:e3:53:11:77:e3:ad:fa:af:b2:a3:a2:
                    0b:10:81:e3:55:85:84:ca:2d:8c:0f:24:58:97:b8:
                    9a:48:ed:1c:6b:07:a8:99:31:23:b1:3f:14:3c:95:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:C5:EB:F7:C8:49:8A:CF:53:D6:5A:EF:F7:75:E6:0C:AF:0E:CE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AIrF6_fISYrPU9Za7_d15gyvDs4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c2:47:55:9f:a7:98:f7:95:2f:72:4c:f8:9f:09:71:21:e3:25:
         61:e8:ba:20:4f:f2:b9:8b:e8:f3:f4:cf:54:95:41:18:04:02:
         7e:d3:94:1a:47:e2:1f:d6:20:c7:06:8b:bf:33:29:81:37:e3:
         6f:44:21:f9:f3:e3:f6:75:2b:1c:bc:0e:7c:a6:0a:28:1a:3e:
         3f:c5:a5:d3:3a:7f:e2:af:25:a4:bb:d1:b0:10:59:a8:68:2c:
         cb:79:38:c8:1d:cc:a1:8b:2e:26:2a:b8:ca:9c:e1:5a:95:38:
         2b:c4:03:97:42:d2:31:26:da:10:49:29:7f:d8:0f:18:14:30:
         a8:46:5e:b7:7b:f4:d1:ef:67:47:07:21:13:3c:3f:e5:f7:8f:
         15:a4:53:92:1b:47:16:2b:81:c6:bc:07:7a:c7:1e:81:ea:ec:
         20:44:4b:ae:5d:94:fd:8d:b9:d3:81:f9:a4:e7:5e:03:34:3c:
         21:cd:f5:f9:71:7a:eb:22:ad:1a:14:72:35:33:a2:af:83:96:
         e8:6b:6e:ce:8b:65:aa:f7:bc:2c:79:9d:08:a4:7c:83:3c:cb:
         77:3c:22:52:f8:0a:84:f8:6d:b0:c4:6d:dc:0e:d9:0b:e8:83:
         9f:b3:88:ab:db:a7:77:25:ef:15:89:98:5e:5b:26:1e:47:06:
         78:81:24:70
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw
MTI5NTlaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDAwOEFDNUVCRjdDODQ5
OEFDRjUzRDY1QUVGRjc3NUU2MENBRjBFQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA7PyDBw9w4ibRIAoT60z6zn4g2Gz6I1zadAIfjsGea4qwluM8
4M0FIBY5r0kzpHTCKkDjPg5DBOeJANcsto1g7hOmtcUW8H4suFiYKO0PcZueexc2
D/3XXaLglkkn842jM6sN22QkNJ1jijSxqRqlkZo82EYc9hjaeNadpOQM1rKft1HW
/D6N8nd2nTfhnjJJ/GqBFBK1It+zQs24AeuLAITBDqw3SlEBrRy6ivLuXb0+08Y3
BOAp/4tXWXYjPTqdSzlOlWfGNWU1LN9CBSR9pBlcPyvjUxF34636r7KjogsQgeNV
hYTKLYwPJFiXuJpI7RxrB6iZMSOxPxQ8lfrPAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUAIrF6/fISYrPU9Za7/d15gyvDs4wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9BSXJGNl9mSVNZclBVOVphN19kMTVneXZEczQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQE0rzAMA0GCSqGSIb3DQEBCwUAA4IBAQDCR1Wfp5j3lS9yTPifCXEh
4yVh6LogT/K5i+jz9M9UlUEYBAJ+05QaR+If1iDHBou/MymBN+NvRCH58+P2dSsc
vA58pgooGj4/xaXTOn/iryWku9GwEFmoaCzLeTjIHcyhiy4mKrjKnOFalTgrxAOX
QtIxJtoQSSl/2A8YFDCoRl63e/TR72dHByETPD/l948VpFOSG0cWK4HGvAd6xx6B
6uwgREuuXZT9jbnTgfmk514DNDwhzfX5cXrrIq0aFHI1M6Kvg5boa27Oi2Wq97ws
eZ0IpHyDPMt3PCJS+AqE+G2wxG3cDtkL6IOfs4ir26d3Je8ViZheWyYeRwZ4gSRw
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org