Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/J80VLOpBfUV22FuSTQcVhtopKS8.roa
File:                     J80VLOpBfUV22FuSTQcVhtopKS8.roa (raw, json)
Hash identifier:          WlRxJffc5pzEgaVpAcfe7yGYqgSR8d4ZRaZC/Pykw2o=
Subject key identifier:   27:CD:15:2C:EA:41:7D:45:76:D8:5B:92:4D:07:15:86:DA:29:29:2F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0210
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/J80VLOpBfUV22FuSTQcVhtopKS8.roa
Signing time:             Mon 30 Sep 2024 01:30:04 +0000
ROA not before:           Mon 30 Sep 2024 01:30:04 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        182.163.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:30:04 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=27CD152CEA417D4576D85B924D071586DA29292F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:2a:92:10:96:af:70:a1:c6:5f:fe:62:b3:
                    4e:8b:a5:d3:06:9f:05:d0:7f:28:9c:8d:10:c3:81:
                    9d:68:38:bb:f5:5a:ce:2e:8f:46:ba:2d:2e:08:4c:
                    16:fd:5d:dc:7d:25:87:35:b5:54:ae:26:9a:a9:96:
                    46:d1:20:bb:a5:ec:3b:1b:b4:04:29:8a:b3:ad:77:
                    46:3d:98:ff:c1:51:9a:a1:c2:14:53:14:30:78:65:
                    42:12:54:17:af:4e:fa:bd:aa:e9:a2:b3:bb:ab:12:
                    37:32:c8:d5:68:cc:15:d1:e2:6f:a1:52:de:44:8e:
                    bb:d0:40:8d:36:11:69:3b:27:a8:7c:b1:7d:b9:0f:
                    51:dd:d7:2e:03:f2:87:a3:ea:42:fb:75:31:8f:28:
                    a5:75:2c:c1:1d:f2:98:a7:e5:01:db:5c:dd:5f:81:
                    78:1c:0e:41:e7:5e:4e:03:9b:72:c5:6b:d8:ff:f1:
                    01:77:55:cd:3e:d2:c6:4f:92:50:24:b4:c8:06:4a:
                    a6:77:06:aa:bb:bd:24:4e:fa:cd:1c:88:4e:80:ac:
                    28:1c:81:23:86:5e:37:92:5f:fc:8c:00:29:16:b6:
                    ef:4b:4f:f6:4b:37:26:21:e4:7d:6d:fe:a5:77:ed:
                    e5:ab:9e:ca:dc:9a:1e:de:c8:a8:df:0c:10:4d:e7:
                    58:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CD:15:2C:EA:41:7D:45:76:D8:5B:92:4D:07:15:86:DA:29:29:2F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/J80VLOpBfUV22FuSTQcVhtopKS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.163.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:9f:14:95:f3:e4:f0:27:41:fe:c8:5c:bf:5d:81:1a:7d:6c:
         f1:0b:92:de:12:59:1c:af:d0:41:02:ac:80:11:8a:4c:aa:3c:
         43:fe:5f:68:f7:40:21:65:46:b5:86:ae:d5:dd:9b:da:7e:a8:
         7e:80:b8:70:2d:a1:d0:bf:3f:d6:93:91:8c:a4:5c:20:8a:a4:
         2a:1d:da:c4:3d:48:73:38:b3:58:07:52:f9:50:e0:ee:6f:0e:
         af:db:d7:0a:34:23:06:ef:b9:30:fa:22:d0:21:f2:13:9e:0a:
         50:a2:f2:3d:78:a3:2f:b1:80:7b:da:31:a3:bc:d6:60:c5:4b:
         0b:ce:da:60:6b:cc:7c:e6:3f:2a:87:d0:3a:c1:b6:8d:29:e0:
         2b:5d:24:7f:f6:33:0c:f9:34:7a:0e:37:59:99:f6:a8:67:2c:
         73:eb:05:08:2c:a4:d8:3a:5e:1c:09:43:72:68:05:70:b8:a1:
         da:f9:f2:cf:c5:e5:8b:77:93:b3:80:05:a8:99:b6:86:e0:7d:
         6c:b1:a4:96:21:12:f8:7d:af:6b:32:28:9b:fd:d3:39:0a:36:
         e5:24:50:b2:fe:36:e6:a3:d3:02:e6:e4:61:d3:2e:8a:76:7d:
         59:60:1d:47:15:38:3d:8d:39:df:eb:ca:1f:d5:b2:69:18:b8:
         d9:bb:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:50 2025 by rpki-client