Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oldhjWQfenoS7A_0s7azY8IviII.roa
File:                     oldhjWQfenoS7A_0s7azY8IviII.roa (raw, json)
Hash identifier:          X7aSjLCcOzN8vaTgNN2i/02HnGw9ceOYeSIx43chUtU=
Subject key identifier:   A2:57:61:8D:64:1F:7A:7A:12:EC:0F:F4:B3:B6:B3:63:C2:2F:88:82
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       020C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oldhjWQfenoS7A_0s7azY8IviII.roa
Signing time:             Mon 30 Sep 2024 01:30:02 +0000
ROA not before:           Mon 30 Sep 2024 01:30:02 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        112.78.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:30:02 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=A257618D641F7A7A12EC0FF4B3B6B363C22F8882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:93:54:b7:c8:85:fa:1e:1c:97:67:21:39:
                    3a:ba:5b:e4:e5:a8:81:15:b7:b0:3e:42:e8:3f:a6:
                    78:eb:ec:57:96:49:33:21:95:11:21:bb:cd:e8:18:
                    2f:07:67:2f:37:0d:27:d5:42:5c:6f:7b:8c:41:79:
                    92:d7:15:53:62:46:df:bc:ae:13:4d:2b:f3:8c:e5:
                    fc:c0:76:b7:68:43:e6:db:40:97:56:40:19:bd:46:
                    95:50:a7:85:93:d0:ee:33:6d:79:c9:92:1d:27:bb:
                    b6:c8:be:95:f5:79:00:90:4a:56:33:a1:63:61:3b:
                    83:74:1e:ad:30:b3:87:30:7e:77:dc:c0:b4:64:51:
                    f7:7a:05:02:ba:ae:5d:10:77:ab:81:b6:36:f0:b8:
                    44:f0:4e:39:5b:f4:4b:50:50:ea:87:a7:d7:69:f7:
                    16:cb:41:9d:e6:5a:55:17:47:19:36:dd:df:e5:0a:
                    60:89:d4:3e:e0:54:e3:d7:54:17:6f:09:b9:75:96:
                    4c:b2:87:1f:ca:87:7e:59:7f:9c:a8:7a:c7:ff:5a:
                    98:18:45:25:97:35:cf:85:bc:73:f8:11:69:c5:ef:
                    54:94:7a:cc:12:65:96:ac:8a:7e:85:33:e5:22:0e:
                    55:8d:ae:bd:6f:b5:71:94:08:f2:1f:ca:0f:1c:59:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:57:61:8D:64:1F:7A:7A:12:EC:0F:F4:B3:B6:B3:63:C2:2F:88:82
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oldhjWQfenoS7A_0s7azY8IviII.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:45:b4:c1:05:c3:2d:e0:15:bc:f9:6f:9a:c2:f4:7a:c0:
         ec:94:dc:e1:68:99:3d:4c:0e:7b:67:57:5e:ec:44:e4:bd:c0:
         91:e7:6f:92:6a:ed:10:2f:da:85:d8:8f:1b:c6:40:2e:ea:8e:
         45:b9:60:f6:0a:4c:8e:69:e7:1c:90:db:cf:1a:05:0c:3d:8d:
         09:99:0d:36:1e:88:01:b9:b3:17:1b:5e:b0:33:c0:0d:de:30:
         bf:fd:c9:e2:19:f8:0e:47:af:16:fd:cf:a5:e9:61:f0:ce:23:
         e3:9a:3c:2a:a8:37:88:bb:77:a5:2f:21:cb:51:20:73:0a:ac:
         21:da:75:53:c5:f1:9a:93:91:d6:85:17:68:84:30:13:db:be:
         e5:9a:95:07:d4:47:e5:4e:31:ba:61:9a:98:1f:d5:ca:47:87:
         c1:a3:0a:46:ef:4c:db:ab:3d:8f:cb:32:30:ca:02:ac:1e:15:
         ef:b0:b3:31:a0:93:e4:ea:f4:27:ca:c4:a7:62:50:4b:1f:be:
         11:9d:56:bf:38:5f:4a:15:46:61:28:5f:69:b3:df:6f:b5:0c:
         3e:fe:de:bf:3a:ed:28:5f:25:fc:d9:c7:d4:75:46:08:6c:e1:
         8a:d4:34:29:25:9a:45:21:f1:f2:4b:85:a0:41:e4:a5:c7:93:
         fa:c7:ec:35
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw
MTMwMDJaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEyNTc2MThENjQxRjdB
N0ExMkVDMEZGNEIzQjZCMzYzQzIyRjg4ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnOpNUt8iF+h4cl2chOTq6W+TlqIEVt7A+Qug/pnjr7FeWSTMh
lREhu83oGC8HZy83DSfVQlxve4xBeZLXFVNiRt+8rhNNK/OM5fzAdrdoQ+bbQJdW
QBm9RpVQp4WT0O4zbXnJkh0nu7bIvpX1eQCQSlYzoWNhO4N0Hq0ws4cwfnfcwLRk
Ufd6BQK6rl0Qd6uBtjbwuETwTjlb9EtQUOqHp9dp9xbLQZ3mWlUXRxk23d/lCmCJ
1D7gVOPXVBdvCbl1lkyyhx/Kh35Zf5yoesf/WpgYRSWXNc+FvHP4EWnF71SUeswS
ZZasin6FM+UiDlWNrr1vtXGUCPIfyg8cWeMJAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUoldhjWQfenoS7A/0s7azY8IviIIwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9vbGRoaldRZmVub1M3QV8wczdhelk4SXZpSUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEcE5wMA0GCSqGSIb3DQEBCwUAA4IBAQBl5EW0wQXDLeAVvPlvmsL0
esDslNzhaJk9TA57Z1de7ETkvcCR52+Sau0QL9qF2I8bxkAu6o5FuWD2CkyOaecc
kNvPGgUMPY0JmQ02HogBubMXG16wM8AN3jC//cniGfgOR68W/c+l6WHwziPjmjwq
qDeIu3elLyHLUSBzCqwh2nVTxfGak5HWhRdohDAT277lmpUH1EflTjG6YZqYH9XK
R4fBowpG70zbqz2PyzIwygKsHhXvsLMxoJPk6vQnysSnYlBLH74RnVa/OF9KFUZh
KF9ps99vtQw+/t6/Ou0oXyX82cfUdUYIbOGK1DQpJZpFIfHyS4WgQeSlx5P6x+w1
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org