Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E6jnK9VW-bfZ4mEoLlsU5hUg5SU.roa
File:                     E6jnK9VW-bfZ4mEoLlsU5hUg5SU.roa (raw, json)
Hash identifier:          Nf6KwSj6g2Ncduz4JPRrq2+J78YaxwPDU+C6YppAnfw=
Subject key identifier:   13:A8:E7:2B:D5:56:F9:B7:D9:E2:61:28:2E:5B:14:E6:15:20:E5:25
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0211
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E6jnK9VW-bfZ4mEoLlsU5hUg5SU.roa
Signing time:             Mon 30 Sep 2024 01:30:04 +0000
ROA not before:           Mon 30 Sep 2024 01:30:04 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:30:04 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=13A8E72BD556F9B7D9E261282E5B14E61520E525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:49:21:09:7b:2a:b6:07:30:5d:1c:bd:ef:
                    51:1e:b5:2b:37:fb:ee:02:2a:52:fe:78:b3:ef:ce:
                    11:2f:f9:09:94:30:7d:96:fd:96:f4:1d:04:73:8c:
                    68:b9:05:5b:3d:2a:48:e0:d0:fc:3d:94:0d:79:9a:
                    cf:7b:85:24:d4:9c:d6:76:8a:ca:36:72:d7:2a:7c:
                    8f:ab:b4:ea:e3:ec:26:f4:1c:fb:a7:5a:c7:83:c2:
                    ad:fb:86:98:13:fd:0a:72:37:03:78:95:90:f1:f1:
                    52:22:c6:b9:e7:c1:5a:fe:61:ee:41:6f:3e:ac:09:
                    e0:20:5e:d5:0f:ab:70:f6:7d:09:bf:9c:de:f3:99:
                    f4:ac:8e:7b:a5:83:3a:b8:23:1e:10:a1:82:2a:bc:
                    d0:e6:b8:ce:48:bd:9d:c1:21:e1:2b:a1:5b:15:24:
                    79:5d:33:4d:0a:d0:0c:3f:49:4d:eb:0e:58:c7:56:
                    a8:06:b6:dc:69:ea:18:c9:3f:1c:c9:57:cc:2c:66:
                    a4:72:0b:22:75:d0:50:39:05:d2:4c:c0:f6:1c:5f:
                    4c:bb:bf:82:b1:0d:a7:44:25:13:ac:0a:b8:78:72:
                    81:d5:b9:ee:19:25:fe:d2:38:1f:39:b6:55:22:b9:
                    70:fe:fb:a4:ca:83:e8:ec:66:be:e8:39:ad:8d:3a:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:E7:2B:D5:56:F9:B7:D9:E2:61:28:2E:5B:14:E6:15:20:E5:25
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E6jnK9VW-bfZ4mEoLlsU5hUg5SU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:72:f6:c8:d5:07:e4:b0:44:a8:82:ce:64:44:bb:b9:c1:cc:
         d9:c5:cd:85:f4:10:54:0b:1d:26:8d:77:1b:a5:37:a0:41:51:
         b9:81:41:8d:cc:9d:96:df:ce:d9:5e:d4:17:90:12:1f:74:fb:
         e6:91:29:b4:a0:ca:24:d3:14:19:f7:26:29:b1:40:4d:16:a9:
         d1:00:2e:68:cf:d1:a4:e7:84:10:5c:5e:59:b2:84:d8:5a:15:
         24:7f:e3:ed:25:de:f3:ac:8a:93:da:06:07:d1:ce:7c:a8:48:
         8b:a0:bb:56:9b:4c:1b:44:3b:1e:48:ff:f3:89:ca:88:09:8b:
         84:47:43:a0:08:ad:03:71:e0:b8:48:4c:f3:65:48:74:65:50:
         87:ea:75:a6:8a:57:87:0e:10:8f:b4:b1:3b:4f:ad:34:fb:5d:
         84:ad:0f:72:5d:21:4f:cd:69:fc:37:95:d8:cc:77:cf:52:e5:
         10:f0:1b:b5:b6:01:32:8a:22:1b:2e:7b:51:be:f9:6a:f8:84:
         21:94:04:c2:c9:79:f5:09:b9:a9:ab:e6:16:ad:53:96:09:82:
         59:5e:6a:dc:55:5c:cf:e0:cf:0a:5b:f3:8a:13:84:2d:7d:a4:
         5a:e5:80:98:f0:b8:44:c3:14:7b:3b:83:5d:f3:46:6d:c2:e7:
         40:35:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:24 2024 by rpki-client on console-ams.rpki-client.org