Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/exP2Udcl38tjsw7DDV1z5hr6PmE.roa
File:                     exP2Udcl38tjsw7DDV1z5hr6PmE.roa (raw, json)
Hash identifier:          RkKwccwph83tJcbtPcPEAXpiUDy8jVbCN3g/a7SrXjQ=
Subject key identifier:   7B:13:F6:51:D7:25:DF:CB:63:B3:0E:C3:0D:5D:73:E6:1A:FA:3E:61
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0221
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/exP2Udcl38tjsw7DDV1z5hr6PmE.roa
Signing time:             Mon 30 Sep 2024 01:33:42 +0000
ROA not before:           Mon 30 Sep 2024 01:33:42 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.188.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:42 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=7B13F651D725DFCB63B30EC30D5D73E61AFA3E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:60:d7:b2:d9:ed:44:81:85:27:1d:0e:cd:
                    fd:5e:4c:42:42:07:44:89:c8:87:29:90:25:1c:6d:
                    0d:a0:80:44:ca:9a:e2:a2:4d:28:9c:e0:3d:63:04:
                    c7:62:78:1e:b6:b0:c1:b4:5a:b5:43:a9:2c:4a:cf:
                    94:fd:b3:10:d0:be:fe:55:ee:bb:ef:11:ae:e0:81:
                    e4:af:54:92:07:11:d4:a5:2e:0a:d0:0e:a9:35:d9:
                    15:cd:3b:5f:6a:a7:9e:37:d7:18:cc:71:6f:b4:ca:
                    58:cf:b4:28:18:37:c6:5d:82:a9:20:aa:38:ec:15:
                    31:18:10:91:24:4d:28:06:53:55:5e:f6:5d:b5:4f:
                    cd:da:92:8a:b6:75:f4:be:a5:92:7e:32:ec:fa:2c:
                    6c:03:be:d6:ec:8d:a0:1e:6c:de:54:f0:1f:03:b3:
                    0d:f9:9f:60:49:d3:4d:ec:df:0c:95:85:43:ee:cf:
                    41:98:d1:65:89:26:92:11:66:16:d9:58:d2:89:68:
                    12:3a:62:09:d2:cb:36:03:b7:4e:c9:6f:37:2e:93:
                    f7:e9:0a:b5:b8:e1:85:24:3c:4d:ca:0a:b9:b8:74:
                    58:e4:da:50:4c:6e:69:34:21:c8:9d:9f:62:d7:21:
                    ef:4d:53:d6:48:96:29:2c:fd:b3:bd:66:0c:b3:6f:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:13:F6:51:D7:25:DF:CB:63:B3:0E:C3:0D:5D:73:E6:1A:FA:3E:61
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/exP2Udcl38tjsw7DDV1z5hr6PmE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b6:68:3d:01:57:e0:06:5b:3a:47:70:fa:4e:c7:50:9b:d2:
         58:e3:ea:03:a3:6c:e8:5c:b3:ba:06:71:46:99:8c:09:9a:d9:
         48:42:ef:11:4d:53:ac:58:c2:58:e3:5a:1c:a2:25:21:c6:a5:
         b5:09:59:83:e5:e3:5b:95:1a:e2:33:8a:c3:ed:8a:73:87:52:
         2d:02:33:1a:e3:43:93:a6:12:a3:02:20:47:6f:ff:28:9e:ea:
         50:4d:27:13:d6:b3:74:59:59:70:fb:8f:3d:dd:f0:4e:b9:00:
         f8:d6:76:ee:43:87:24:d8:44:38:e2:bd:68:0a:52:39:b3:05:
         02:ea:7e:64:ae:07:c8:e3:cb:88:05:52:f5:cd:6b:9d:b3:e2:
         25:70:9c:58:5e:31:38:d8:8f:1d:6d:0c:1d:d9:21:89:24:1b:
         4e:a6:21:f5:1e:df:bb:9d:32:93:c2:9f:d3:af:72:69:3d:9b:
         0f:64:b5:20:55:ea:bd:1c:02:c2:ad:a4:b3:d7:05:d4:55:90:
         37:38:ff:36:4a:ac:14:c6:9c:0c:8f:03:7b:5b:f8:f6:da:b5:
         18:a6:b7:83:8e:c4:45:33:d6:be:3b:25:3e:e7:fb:89:f3:25:
         08:e4:dc:1a:75:0c:f3:c8:44:7b:01:fc:41:de:3d:1e:7c:ad:
         da:de:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:16 2025 by rpki-client