Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/asvgZNGPEu7iAQ_HnSeNk0s-hA4.roa
File:                     asvgZNGPEu7iAQ_HnSeNk0s-hA4.roa (raw, json)
Hash identifier:          Kk4gwBVZG1tCIjYRIi9b9O3idxEsvsT+qq6wCoze2Es=
Subject key identifier:   6A:CB:E0:64:D1:8F:12:EE:E2:01:0F:C7:9D:27:8D:93:4B:3E:84:0E
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0207
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/asvgZNGPEu7iAQ_HnSeNk0s-hA4.roa
Signing time:             Mon 30 Sep 2024 01:29:59 +0000
ROA not before:           Mon 30 Sep 2024 01:29:59 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:59 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=6ACBE064D18F12EEE2010FC79D278D934B3E840E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:84:c7:db:7f:27:de:a9:65:9d:e7:f6:96:
                    23:3a:bc:a1:43:cf:9f:2c:bc:54:fa:83:cd:a4:30:
                    62:fe:8d:f0:3e:b8:66:ce:cf:3a:8a:02:bb:dd:fc:
                    c4:56:9a:de:98:ce:e8:9a:92:4d:da:9f:01:06:f5:
                    90:14:8c:97:ba:73:de:ea:45:0f:17:e2:35:71:23:
                    fe:c2:5b:15:35:fb:4f:88:1e:b6:92:31:5a:7c:61:
                    0a:a3:3d:a3:74:a4:3c:64:10:3b:67:4d:df:38:27:
                    ea:36:27:62:0a:87:cd:90:38:db:a0:b7:03:79:d2:
                    c0:e0:eb:ee:1f:71:7c:b7:71:32:90:eb:0d:04:7d:
                    24:31:60:ce:33:f4:64:cd:82:07:ff:47:47:9d:89:
                    b9:7e:6c:b0:3f:63:28:3a:33:d7:43:a7:94:af:b3:
                    9c:7e:e5:df:66:f4:ed:78:dc:72:f4:0f:d1:ce:5c:
                    a0:47:7d:8b:ae:3c:97:e9:b8:ab:cb:e3:15:38:c9:
                    5e:70:10:fc:7e:48:4a:85:91:3a:7b:51:01:8b:d6:
                    23:c7:e6:d8:80:d8:9f:1f:a8:e9:8d:fe:ce:50:1a:
                    7c:b5:32:10:37:d9:e0:81:16:41:08:3b:f5:9c:d7:
                    80:51:95:1d:83:90:de:e2:30:7c:f8:5f:bc:ae:66:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CB:E0:64:D1:8F:12:EE:E2:01:0F:C7:9D:27:8D:93:4B:3E:84:0E
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/asvgZNGPEu7iAQ_HnSeNk0s-hA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:6f:b4:28:cb:1f:3f:ad:c5:9b:41:62:f3:cb:6e:e0:56:54:
         89:9b:ef:46:72:0c:20:da:ce:67:4c:d1:df:95:9f:c7:99:bd:
         88:bb:80:fb:72:31:4e:8b:59:f1:64:e5:86:87:b3:55:81:a0:
         98:3c:c6:a6:4a:52:42:0c:83:81:6d:ea:81:bc:b1:77:3b:72:
         aa:e4:a5:d3:b4:c6:4e:e7:ab:2a:95:89:7f:56:5a:7a:f0:42:
         4c:d8:65:ea:ec:dc:db:05:0a:26:70:c0:e6:14:15:e2:c6:ae:
         e8:4b:3a:98:e8:36:a9:5d:ed:b9:7e:b1:5c:77:d1:67:71:b0:
         77:65:dd:ac:ee:93:b7:8e:b1:20:42:95:05:d4:e8:60:f4:a4:
         7b:8d:94:a8:3b:f0:3d:5a:94:41:56:c5:bd:e0:1b:3d:05:33:
         3b:00:a4:bb:b5:6d:2b:e1:28:54:5f:21:57:cb:99:93:3a:af:
         f3:83:fb:b7:ec:75:fa:56:e9:e9:78:04:9f:8c:78:bf:6c:bb:
         ec:73:8f:f9:a1:1e:74:1b:b2:3c:54:f7:f0:08:01:5e:73:57:
         25:90:5e:9e:41:de:5d:64:bd:ab:f1:b8:e6:38:33:ca:bd:df:
         07:3e:5d:6c:be:67:0f:6c:7c:8a:27:78:e2:d2:df:45:66:a4:
         95:79:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org