Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/U7T2gTOn3FakdB3NQy7j2XJyc10.roa
File:                     U7T2gTOn3FakdB3NQy7j2XJyc10.roa (raw, json)
Hash identifier:          s+ZImZJ4ygbx1WJMdLjTbt6lSPBncfCSKoQhj9cZB7g=
Subject key identifier:   53:B4:F6:81:33:A7:DC:56:A4:74:1D:CD:43:2E:E3:D9:72:72:73:5D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       021E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/U7T2gTOn3FakdB3NQy7j2XJyc10.roa
Signing time:             Mon 30 Sep 2024 01:33:41 +0000
ROA not before:           Mon 30 Sep 2024 01:33:41 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        210.224.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:41 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=53B4F68133A7DC56A4741DCD432EE3D97272735D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:d7:c7:28:73:27:90:8f:73:56:93:69:6f:
                    60:c7:03:9c:d9:5f:f8:56:dc:8b:08:0e:79:b5:69:
                    23:c8:44:f2:25:7b:e0:23:d9:62:f7:ad:d0:2c:54:
                    3b:ed:9d:70:31:4c:98:1c:bd:d8:c5:ee:71:76:00:
                    f1:dc:aa:8e:76:bd:36:cf:ab:47:30:28:c3:22:31:
                    0d:61:1b:69:3e:a2:5f:01:83:7b:fc:f9:a0:7f:05:
                    14:24:fe:28:4b:ed:8d:58:da:84:74:55:b3:ae:66:
                    5a:86:4d:f6:d4:86:d9:7a:d3:5c:05:60:5e:cc:28:
                    5a:3f:a7:61:0e:24:64:fc:3b:65:ee:4b:9c:38:bf:
                    bd:4b:cd:0d:f2:58:97:9f:93:69:5b:d7:79:40:ad:
                    2f:67:11:0b:fc:61:a4:36:ce:80:5f:f4:2c:2a:0a:
                    89:01:3c:9a:42:7f:b1:5b:47:38:ee:49:ec:39:94:
                    3c:8f:8d:69:35:72:ba:7f:70:c4:a3:06:82:21:24:
                    36:24:52:de:55:a3:67:34:b9:69:db:d0:40:11:32:
                    10:17:af:72:c6:f4:32:3b:6f:76:7b:29:8a:48:c8:
                    ab:ae:0b:e4:8c:f9:46:51:fb:3c:7d:25:bf:58:5f:
                    33:07:75:59:a4:fb:dd:d9:c1:4f:43:2a:76:2c:03:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B4:F6:81:33:A7:DC:56:A4:74:1D:CD:43:2E:E3:D9:72:72:73:5D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/U7T2gTOn3FakdB3NQy7j2XJyc10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:1d:82:4b:21:9a:97:6f:e2:b9:14:a3:d4:6e:a7:03:a9:03:
         b9:87:db:3d:82:a9:41:fa:e3:a3:c3:1c:24:af:c6:15:25:8e:
         8c:7b:0b:30:26:42:0f:32:1b:ea:90:1c:b4:4c:95:cd:a5:fb:
         1c:90:a1:bd:96:fb:74:74:65:aa:68:f0:80:96:29:bf:f4:64:
         0b:9c:8e:90:fd:f3:19:92:52:b8:a3:2f:8c:7e:2f:f9:02:b1:
         41:2f:6c:d5:0e:32:32:c6:29:9a:6a:68:53:ca:c6:91:12:8a:
         04:18:e8:88:62:c4:16:dd:43:f0:cf:16:8b:7e:b8:e8:e6:d4:
         0d:c7:d7:92:1b:0d:a9:42:6a:9a:bf:4a:02:79:7d:2f:7f:4e:
         b0:f5:39:e1:03:99:89:a3:ca:1a:8c:93:44:ed:88:b0:41:a4:
         d6:ac:b8:05:4d:bd:4e:dc:b4:1c:7e:f4:91:20:61:22:d3:7b:
         2b:14:a0:12:8c:d0:fe:54:33:ef:53:d9:50:7a:d1:b4:e8:68:
         4f:94:a8:cd:82:af:a3:3b:c7:c9:cf:3b:86:6f:5b:06:91:11:
         92:c4:62:10:b5:93:66:e4:6b:1f:5f:b9:01:8d:c9:b9:e2:18:
         75:5c:a3:79:9b:99:76:fa:6d:83:7e:ab:ea:a6:1a:41:db:39:
         e6:94:1b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org