Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MYdU2oLPJLdaB6Mu2whcpVPpyg4.roa
File:                     MYdU2oLPJLdaB6Mu2whcpVPpyg4.roa (raw, json)
Hash identifier:          PKK8EfvnF5TRBUpXFlpFYQYbsoCy3pU73Z7gAOfbTcI=
Subject key identifier:   31:87:54:DA:82:CF:24:B7:5A:07:A3:2E:DB:08:5C:A5:53:E9:CA:0E
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01FE
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MYdU2oLPJLdaB6Mu2whcpVPpyg4.roa
Signing time:             Mon 30 Sep 2024 01:29:55 +0000
ROA not before:           Mon 30 Sep 2024 01:29:55 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.188.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:55 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=318754DA82CF24B75A07A32EDB085CA553E9CA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:d5:5d:c2:30:22:1f:4e:10:d2:48:c8:1c:
                    32:7e:4d:51:59:5a:8c:27:e9:df:b8:5f:01:8c:d6:
                    4e:a4:b3:f7:c4:69:16:2b:b1:db:12:70:f4:39:49:
                    70:a3:35:e8:32:bc:6c:12:77:14:09:8b:78:69:6a:
                    37:12:82:23:f8:ad:31:86:e3:fc:16:0d:8f:0e:e3:
                    c4:c0:51:8c:1a:2d:90:29:79:d6:6a:10:db:d6:ee:
                    db:50:15:38:97:ba:b3:f0:93:6b:05:db:72:64:ba:
                    17:82:1f:e3:b7:d5:3e:a2:90:53:2d:f4:8c:3d:97:
                    33:73:56:68:38:8f:5c:91:d6:ee:24:22:0e:a0:cc:
                    48:70:f9:16:7b:f2:2f:0f:9d:92:43:f1:78:ea:cc:
                    8d:b8:fa:3c:53:f9:d1:35:7a:7a:5d:ba:1d:d6:7a:
                    c5:2f:50:61:4f:f7:5e:90:cb:db:50:6a:dd:fd:80:
                    6d:ad:8d:55:02:8b:4b:d5:cd:c2:fc:34:2b:e4:33:
                    df:8c:e7:37:4a:af:0b:71:52:35:57:ae:03:40:1c:
                    66:36:52:00:d1:97:24:14:5f:0e:5b:fe:5c:05:30:
                    57:7d:d6:56:99:20:60:3c:d2:0c:1a:09:c1:33:fd:
                    6d:86:ac:d1:6d:6c:ab:c2:6e:c0:c4:3e:82:b5:ee:
                    39:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:87:54:DA:82:CF:24:B7:5A:07:A3:2E:DB:08:5C:A5:53:E9:CA:0E
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MYdU2oLPJLdaB6Mu2whcpVPpyg4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:61:79:fb:45:5f:7e:95:fd:0e:9e:43:e9:94:2d:d8:d2:85:
         cf:96:ff:b9:a8:fe:60:9a:19:87:63:99:bf:fb:ce:2c:a9:74:
         a3:c7:30:e1:4b:c3:1b:5f:b9:21:27:88:7e:12:69:c4:68:50:
         bf:cc:be:f9:9c:84:fc:2d:1e:54:ae:43:62:26:e4:2e:73:b2:
         30:38:25:9b:f2:36:68:4d:76:96:f7:1a:44:46:3d:e8:b1:fd:
         19:29:75:0a:fc:a2:9b:2b:36:eb:11:6d:e8:ba:81:cf:b6:74:
         8a:64:a6:95:1f:c0:06:f5:03:06:ff:af:ff:1b:ec:66:6c:87:
         c9:cc:5a:96:73:23:3b:9c:ff:02:24:d2:9f:22:52:22:a4:b2:
         d3:dc:63:f6:a9:89:78:94:5b:f6:38:b3:c0:76:92:04:19:1b:
         c0:bc:ae:8d:0f:c5:2d:3a:8d:63:30:c8:a0:e4:31:eb:b2:8d:
         0b:bc:6c:04:d5:0f:6a:70:ad:53:f5:aa:10:d6:38:b2:df:b9:
         44:00:49:84:4b:73:a8:3f:89:ce:1d:45:ff:a2:df:81:ba:8e:
         9b:f3:5f:6d:64:29:ec:5e:dd:dd:33:ed:28:9f:db:eb:b6:67:
         7c:ba:5c:d6:2a:6a:3d:dc:21:3b:c2:cc:4c:c4:b2:2d:51:20:
         78:d2:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org