Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MgN-FnWYrsqYMtA4V1DOzrf8IXg.roa
File:                     MgN-FnWYrsqYMtA4V1DOzrf8IXg.roa (raw, json)
Hash identifier:          8OXgpCN+I59aFkvHReYEc97XsWPCMTTMIN/0RcKtOWU=
Subject key identifier:   32:03:7E:16:75:98:AE:CA:98:32:D0:38:57:50:CE:CE:B7:FC:21:78
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       020A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MgN-FnWYrsqYMtA4V1DOzrf8IXg.roa
Signing time:             Mon 30 Sep 2024 01:30:00 +0000
ROA not before:           Mon 30 Sep 2024 01:30:00 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.188.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:30:00 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=32037E167598AECA9832D0385750CECEB7FC2178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:4d:61:aa:4e:60:f4:b1:2f:94:4a:20:47:
                    4d:73:97:6a:37:47:74:98:48:a0:c4:62:e9:76:e8:
                    f4:a3:ee:52:01:e1:ce:2b:df:a1:0d:71:b3:de:67:
                    47:97:5f:14:52:5a:d3:4b:fa:98:d8:a6:28:4a:f3:
                    60:76:b4:f7:83:78:3b:4f:99:f3:54:08:c0:4d:1e:
                    58:c1:35:f5:e7:5d:82:82:ea:e6:24:e4:b8:5d:76:
                    cb:67:99:a9:e6:87:dc:c4:f5:65:1d:d2:53:b9:4c:
                    7e:80:60:08:67:4a:36:cc:fc:6b:a1:4f:a8:cf:6c:
                    04:c4:a9:b7:c7:84:d6:01:dd:c0:5d:d2:64:78:6e:
                    30:ca:42:77:ab:5e:c4:76:47:fb:a5:1b:25:c4:9b:
                    70:3d:26:f4:2b:2d:9e:37:22:74:0c:cb:ce:eb:d3:
                    57:57:17:e4:1d:74:20:b5:63:40:ab:6f:b9:c1:1b:
                    12:d3:f1:ea:ad:1c:8a:8f:ed:84:3f:1f:33:cb:9d:
                    25:12:57:6a:85:6b:1d:d0:4c:a5:45:75:6b:06:fb:
                    0a:01:d5:88:2f:1a:2e:8b:7f:96:df:a1:2d:ad:da:
                    0b:1f:91:a7:7c:2d:9d:35:9e:b3:a8:dd:e4:43:94:
                    1d:0f:26:0c:3c:f3:57:91:8f:00:9b:12:d5:64:5a:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:03:7E:16:75:98:AE:CA:98:32:D0:38:57:50:CE:CE:B7:FC:21:78
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/MgN-FnWYrsqYMtA4V1DOzrf8IXg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:48:7f:b2:7d:4c:58:2d:b2:3a:85:21:bc:96:27:96:82:
         a6:2e:b0:42:5c:00:5c:4b:b9:1a:fb:3d:dc:f1:ba:16:29:27:
         45:0a:be:f3:44:fe:f2:02:37:b0:c6:93:f8:ab:38:3a:3e:58:
         a1:49:38:a2:29:5c:6f:93:4a:0f:e3:6c:9c:91:86:fc:db:d0:
         f8:28:be:2c:3c:33:2c:44:99:70:5d:bf:fe:d4:f1:e9:48:91:
         c2:bf:48:eb:82:00:44:05:b9:a9:ee:12:2f:cc:c6:84:16:f6:
         c4:57:7b:7f:b6:c5:39:f9:d0:95:67:77:42:79:ff:06:ee:a7:
         2a:74:66:43:54:ae:b3:d6:e3:5f:4b:6e:5f:60:f6:02:86:b0:
         ac:00:c1:28:41:74:fc:f5:bf:9e:23:81:42:24:06:6f:5b:8b:
         5f:6a:59:9b:2b:7d:8f:22:3b:d6:b6:1b:41:7f:47:67:de:d6:
         59:63:f3:a6:7d:48:5c:6d:4c:19:da:13:37:f3:d1:8d:77:af:
         3c:5e:c5:a7:20:f8:ad:d1:88:ca:21:e1:48:81:7e:fd:f4:e1:
         3c:50:5e:03:12:6a:1b:a4:f4:72:54:82:be:66:9d:e1:27:d3:
         2a:9f:16:34:db:fe:d6:e7:72:50:54:23:10:e7:a8:c3:8f:3d:
         1d:34:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:24 2024 by rpki-client on console-ams.rpki-client.org