Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mvqXiREz74R3TE2H0mRmCIbTM-E.roa
File:                     mvqXiREz74R3TE2H0mRmCIbTM-E.roa (raw, json)
Hash identifier:          2o88ljAn7HvMrsbMCFkJJGN4SEMSsrC5SCSzXruIZ+A=
Subject key identifier:   9A:FA:97:89:11:33:EF:84:77:4C:4D:87:D2:64:66:08:86:D3:33:E1
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0208
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mvqXiREz74R3TE2H0mRmCIbTM-E.roa
Signing time:             Mon 30 Sep 2024 01:29:59 +0000
ROA not before:           Mon 30 Sep 2024 01:29:59 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.180.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:59 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=9AFA97891133EF84774C4D87D264660886D333E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:2c:1e:95:a8:aa:d7:b3:b2:3c:a2:36:5d:
                    af:6c:71:c8:3a:de:8e:48:f5:c5:ee:37:3a:f4:be:
                    08:66:b2:ee:1c:fd:ea:0f:bd:e8:ef:22:69:1e:39:
                    d3:64:01:ea:ce:8e:33:31:23:30:85:2a:63:34:ea:
                    46:ca:6d:40:17:94:87:85:94:0c:56:06:d0:02:14:
                    6b:f3:7c:93:a2:c0:17:78:c3:93:79:95:b8:a5:2c:
                    ba:da:9f:90:22:78:90:0e:92:38:0a:79:23:79:7d:
                    3d:72:46:22:68:94:b0:b4:c3:5a:fd:9b:8c:5f:06:
                    1e:10:ce:25:23:44:34:1b:d0:f0:ce:bc:c0:04:21:
                    78:ce:18:fa:5e:81:0b:cd:9a:c0:53:91:f9:d9:5f:
                    e2:e0:4d:05:86:98:a7:49:c5:a0:ee:40:f0:c1:87:
                    41:8b:62:32:23:b8:0b:4e:b8:34:34:fd:d8:bb:11:
                    b4:ad:e0:cd:f6:6e:64:67:8f:68:10:69:47:a9:ab:
                    bb:32:32:96:30:87:03:8b:82:33:08:aa:a9:19:3e:
                    1b:33:6e:76:dd:5d:f2:c8:d7:3e:08:5c:18:d1:1f:
                    4f:2d:ad:1a:00:47:7e:ce:12:d7:aa:bf:24:02:dc:
                    5c:db:0c:ca:2f:a7:e9:ad:68:7e:0b:53:b8:14:81:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:97:89:11:33:EF:84:77:4C:4D:87:D2:64:66:08:86:D3:33:E1
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mvqXiREz74R3TE2H0mRmCIbTM-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:fd:c4:59:f6:2d:f5:07:d6:e3:ec:79:e1:39:0e:7f:58:35:
         df:ba:38:f8:66:3a:67:17:a1:4a:df:73:20:fc:74:9e:ee:4a:
         5e:56:7b:f1:f7:fd:1b:fe:ec:ad:6e:44:d5:c2:be:e2:c6:b2:
         aa:09:0b:ba:ec:58:d8:6d:b9:77:81:40:26:b2:0f:f2:cd:e9:
         78:ae:7f:ab:48:f3:10:89:e3:79:b4:cc:a8:8f:a7:8e:a5:74:
         48:54:e1:d2:4a:c9:68:eb:ff:54:4c:44:1b:ec:f1:49:df:a6:
         3a:75:ae:b9:92:67:1e:39:c6:c6:f3:ef:2c:5f:d2:b8:ce:8d:
         a5:b4:30:61:8c:04:1f:8b:d6:ca:4b:a2:fa:4f:fd:71:4a:cd:
         0e:33:13:41:85:83:b1:3e:49:da:ba:d0:a8:00:ce:c8:cf:5a:
         6c:05:bb:5c:43:ce:ad:b4:a6:ec:c7:84:3a:a3:06:ac:07:e6:
         93:ba:79:4a:a7:c3:49:6f:a1:74:62:d6:1a:dc:68:d9:a4:98:
         b9:de:70:cc:c1:e9:0b:d9:50:5a:9a:61:ff:20:ba:fd:16:cb:
         0d:a4:55:60:29:b6:85:63:c8:21:85:fd:a6:27:44:8f:e2:68:
         ce:1f:3c:10:d7:ca:26:a8:23:62:6b:74:89:de:43:f1:a0:a0:
         72:26:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org