Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/uThYNQ4lJiAr6SCWCXoXqtLEZ4Q.roa
File:                     uThYNQ4lJiAr6SCWCXoXqtLEZ4Q.roa (raw, json)
Hash identifier:          vK4894aPokSKkyviyevbSAKGtRxWFsnJWC7rj8D3j5I=
Subject key identifier:   B9:38:58:35:0E:25:26:20:2B:E9:20:96:09:7A:17:AA:D2:C4:67:84
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0223
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/uThYNQ4lJiAr6SCWCXoXqtLEZ4Q.roa
Signing time:             Mon 30 Sep 2024 01:33:43 +0000
ROA not before:           Mon 30 Sep 2024 01:33:43 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        110.74.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:43 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=B93858350E2526202BE92096097A17AAD2C46784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:40:49:8d:16:db:a9:83:62:54:3a:9e:d2:
                    7d:ff:55:be:35:aa:6e:93:5c:b9:1d:1e:e6:9b:d4:
                    a1:31:19:cf:65:1b:e9:f1:55:b9:c6:d1:4d:52:3a:
                    d2:cc:db:c1:81:03:49:51:e9:ea:8a:fe:b2:30:c1:
                    12:73:55:32:0d:29:fb:41:c7:a7:4d:9c:12:6b:fc:
                    4f:3e:f3:34:e8:78:58:88:60:7f:1e:e4:14:4f:32:
                    36:c8:b3:84:fb:00:6a:94:c5:df:8a:a8:10:a8:27:
                    78:c4:2f:a7:64:b5:bc:f9:93:7f:ac:43:7d:05:aa:
                    b2:0e:ff:e3:06:66:e9:ac:93:1c:2a:b8:0d:b4:d4:
                    35:84:29:34:f7:5f:ea:45:ca:8d:c8:f4:d3:25:f8:
                    42:d8:87:a0:7d:33:69:c9:a5:03:bd:25:b2:00:12:
                    ce:4b:05:b0:44:88:a2:b1:95:08:2c:04:d5:13:5a:
                    35:6f:29:de:a3:b6:70:54:68:5a:5f:7e:cb:7b:e9:
                    b6:0b:3e:90:7d:ca:51:b3:a9:0e:47:e6:34:a3:3c:
                    3d:93:b3:99:ac:bc:f6:ef:03:7b:a3:2c:6f:d6:de:
                    02:78:bc:30:f1:79:ba:5b:00:70:fc:8f:d1:4e:1d:
                    21:60:01:26:3e:b0:0b:2c:b7:77:2a:7d:b9:d4:97:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:58:35:0E:25:26:20:2B:E9:20:96:09:7A:17:AA:D2:C4:67:84
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/uThYNQ4lJiAr6SCWCXoXqtLEZ4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:96:26:ae:c5:42:d7:ef:94:8d:fc:e1:3b:2a:7d:5b:b2:75:
         7d:2d:41:7e:ea:06:00:ab:41:c5:a7:de:35:bd:20:8d:5d:83:
         c7:4f:de:51:c7:d0:84:13:c9:b6:08:b5:17:13:b4:cf:7a:f4:
         cb:47:00:80:4d:b1:97:8c:39:2d:d9:23:32:20:2b:7a:e9:25:
         b9:65:1d:f4:eb:bf:38:73:34:4f:93:9d:33:d8:43:5c:db:bf:
         fb:8d:0c:dc:e4:e0:cd:f2:61:fe:ee:22:db:7e:6b:99:4c:3b:
         93:1c:bb:00:54:68:6f:78:c1:ff:cd:cb:77:9c:8c:97:b5:7c:
         09:72:e9:72:9e:cb:37:88:cf:33:04:58:ca:9c:a1:22:d2:65:
         94:d0:dc:4e:32:7d:54:c4:91:ff:c2:fc:e2:3a:fc:f8:23:0a:
         1c:d1:ed:7c:a1:18:67:26:90:9d:01:dc:af:b2:af:15:36:6b:
         97:53:b8:aa:03:f4:0b:91:66:e0:31:6b:13:ac:73:c7:fc:96:
         07:76:c3:d9:82:35:c2:83:a4:86:2c:63:e0:dd:9c:de:90:c6:
         ac:91:8c:7c:d2:48:cf:05:ec:1a:85:14:fa:57:fd:16:30:a4:
         e9:8d:da:9f:a0:12:4a:18:0f:22:10:d9:ef:35:9b:62:71:fd:
         00:e6:00:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:00 2025 by rpki-client