Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eGVpHpT6c5OEQoAkhIXJu5nvkYg.roa
File:                     eGVpHpT6c5OEQoAkhIXJu5nvkYg.roa (raw, json)
Hash identifier:          SR+XLrNQdxGvZ86pK1HtjkcWUUxTqbLJuGGyr5XU2O8=
Subject key identifier:   78:65:69:1E:94:FA:73:93:84:42:80:24:84:85:C9:BB:99:EF:91:88
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       021B
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eGVpHpT6c5OEQoAkhIXJu5nvkYg.roa
Signing time:             Mon 30 Sep 2024 01:33:40 +0000
ROA not before:           Mon 30 Sep 2024 01:33:40 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:40 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=7865691E94FA7393844280248485C9BB99EF9188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:83:a2:ab:69:38:9b:c8:1c:6f:25:d8:b9:
                    2a:7f:bb:08:53:e3:d9:0f:56:e8:3d:ea:df:c0:25:
                    af:8a:7f:6b:3e:8e:7e:64:d3:1f:81:fb:fd:dc:24:
                    fd:7f:34:22:ae:e0:4c:d1:05:e5:f1:d6:d0:c8:dd:
                    e5:81:30:03:4a:f5:71:6e:80:b5:ab:59:c4:c5:38:
                    2f:ce:74:c7:56:99:97:71:5d:71:4c:e5:2b:d6:29:
                    33:f9:ef:e7:a3:1f:3b:e8:0c:d0:68:c7:07:4c:36:
                    9d:91:06:fb:a9:9b:72:f9:ef:5f:f3:18:50:14:bf:
                    eb:73:cf:55:b8:a1:0f:4a:68:53:8c:6e:a4:ea:e6:
                    ba:cf:81:78:72:23:d1:91:5b:5e:e3:20:d1:02:e0:
                    5e:93:4c:bf:21:3c:7e:22:2d:c3:88:0d:c7:47:d7:
                    dc:ea:66:0a:bc:61:6a:c3:f8:8f:1f:63:f9:79:ce:
                    ad:5e:25:61:7f:f9:90:3d:e1:a4:05:90:cf:e4:48:
                    0b:98:0d:39:3b:b1:a4:a1:9f:c1:60:3c:f4:dc:f2:
                    3e:4e:f0:91:7f:17:c3:35:3e:7d:78:4d:c6:13:eb:
                    9e:3e:ed:bc:ed:43:68:57:91:a4:8a:7c:d0:37:04:
                    96:72:b8:52:34:5c:19:71:0c:1b:a2:1d:40:8a:0c:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:65:69:1E:94:FA:73:93:84:42:80:24:84:85:C9:BB:99:EF:91:88
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eGVpHpT6c5OEQoAkhIXJu5nvkYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:96:f8:c1:09:5a:bc:36:d4:cc:a5:72:a4:59:7d:2b:6e:
         a0:d5:5e:a0:7a:8e:89:db:86:a3:7c:e8:d8:bf:2b:8e:8a:4c:
         2a:f3:05:a3:28:8b:3f:e8:8e:52:f4:35:2d:00:79:9e:f9:22:
         0b:18:cb:48:6a:ee:72:71:9f:9c:9d:11:bb:9d:5c:ca:98:88:
         06:9d:c5:80:00:f2:0a:95:69:b8:36:4c:22:e7:57:22:7c:df:
         a0:bc:16:8e:4b:4a:0d:79:f0:ef:8b:49:9f:a5:25:7f:7e:63:
         3e:c3:13:00:1e:69:b7:5e:8c:ac:ab:bc:b0:36:07:39:97:9f:
         9e:71:a9:d6:59:d6:5c:39:a1:d3:fe:24:01:7f:f2:05:3b:30:
         ab:b9:ec:87:d1:cb:0b:b4:38:c7:56:f7:f2:7c:c2:43:3d:bb:
         18:9a:d6:49:81:dc:e2:1f:2f:ab:69:9f:1b:d4:67:da:22:2f:
         8d:cd:d8:51:41:53:b1:6d:0b:df:06:a0:df:d7:67:a4:d8:86:
         8d:7b:a4:c1:c5:1c:44:fe:ec:61:48:5f:51:9e:b0:ac:9d:18:
         37:29:9f:50:6f:95:4c:16:88:a6:df:29:7c:1c:da:d7:d8:4d:
         1d:cc:68:47:bb:d4:fb:e2:01:57:7b:ce:46:8b:17:c9:b1:a6:
         ba:8c:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:45 2025 by rpki-client