Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RVZyeU01QvGNc96WGtjnbxIUE34.roa
File:                     RVZyeU01QvGNc96WGtjnbxIUE34.roa (raw, json)
Hash identifier:          UIRoG7lAIpJa39dH96sf9QRguEETo96j0QJYpAYa0Oc=
Subject key identifier:   45:56:72:79:4D:35:42:F1:8D:73:DE:96:1A:D8:E7:6F:12:14:13:7E
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0217
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RVZyeU01QvGNc96WGtjnbxIUE34.roa
Signing time:             Mon 30 Sep 2024 01:33:38 +0000
ROA not before:           Mon 30 Sep 2024 01:33:38 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.208.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:38 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=455672794D3542F18D73DE961AD8E76F1214137E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:9c:df:49:e8:5e:a7:09:d5:37:ca:3b:47:
                    1a:60:71:29:bf:e6:be:c0:74:cc:0e:d0:4f:39:1b:
                    a5:3b:06:ae:16:42:64:00:30:65:52:f3:00:bb:c9:
                    a3:1d:cc:4b:30:56:12:af:82:34:63:c7:60:81:ca:
                    7b:15:99:5d:fe:85:18:97:83:e5:92:85:ed:cc:a0:
                    7e:47:cc:04:5e:34:c3:68:3c:f9:0b:e2:36:51:07:
                    4d:2b:69:65:ce:36:af:8a:a7:15:6c:22:5a:b6:1c:
                    71:7c:91:91:1b:13:25:05:d2:57:16:b0:0e:83:b1:
                    09:91:ce:e1:75:1f:2d:86:e0:03:22:2b:30:ac:2f:
                    92:40:b0:6d:5c:12:67:4d:01:10:a0:2e:ec:d6:5a:
                    92:cf:63:0e:3d:0a:ed:cb:23:cd:79:7f:fb:08:ab:
                    ea:c2:2a:ab:d2:b9:d5:8c:07:40:e8:7a:58:78:e5:
                    b9:bc:8f:09:e6:70:c1:fd:b5:f6:8b:02:e5:4a:2f:
                    e9:0b:00:38:77:3c:e4:20:4a:6c:00:d5:23:d5:85:
                    63:e4:24:f3:f6:e5:8e:9b:b0:bf:dc:06:88:f0:c1:
                    fa:06:ed:50:50:5c:58:7e:e1:cd:bc:1b:78:0e:7f:
                    d7:24:57:07:2b:e2:4a:2b:5e:60:54:d1:e7:58:7a:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:56:72:79:4D:35:42:F1:8D:73:DE:96:1A:D8:E7:6F:12:14:13:7E
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/RVZyeU01QvGNc96WGtjnbxIUE34.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:ea:f6:89:0f:44:7f:b5:7e:7a:8f:6d:2b:7d:d9:00:21:
         af:22:a0:67:38:78:46:0c:c0:d4:86:45:af:9f:e0:f6:de:2e:
         53:2c:1c:cd:74:a4:53:57:51:7d:30:1b:09:48:3a:05:a2:3e:
         ad:56:56:b6:b4:a9:f5:f5:53:ec:15:5e:dc:6a:ba:0e:b6:b2:
         f5:97:49:c2:f2:cb:dd:45:b6:4f:a6:fb:f5:a1:90:71:36:9f:
         1c:7a:c3:5c:75:5a:e3:6f:e4:4d:5c:8a:26:70:7b:94:d3:59:
         ca:d4:c3:7e:8c:d4:37:e7:a7:17:7c:8f:f7:91:70:b8:c2:0c:
         c0:24:34:50:73:e5:c3:4b:59:8c:77:3d:af:fe:bd:ea:d5:a2:
         d3:09:26:b9:67:46:75:09:ac:b7:d1:3f:b0:38:86:f2:f9:75:
         11:be:d9:28:73:c5:a4:b7:3f:ea:bb:7a:0c:8f:cd:b8:eb:c6:
         db:e5:54:23:f1:6a:ca:38:28:e3:42:5b:0e:ac:0a:c3:14:b2:
         cb:d1:20:0d:74:5a:34:d2:2c:f3:ec:81:c1:c1:f6:e7:9d:c2:
         38:6a:ff:fa:d8:36:4f:bd:e2:0e:96:4e:6f:ab:4d:28:1e:a8:
         90:da:4c:41:31:5b:a5:11:42:75:73:50:b5:73:9b:4c:ac:15:
         ce:b3:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org