Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/wvr3ZuqfahWcec_2aubFfIQg_Q0.roa
File:                     wvr3ZuqfahWcec_2aubFfIQg_Q0.roa (raw, json)
Hash identifier:          QKmMwGglFUCIlQZciPLlbjOxbeQ1DmG7x+il25azGhs=
Subject key identifier:   C2:FA:F7:66:EA:9F:6A:15:9C:79:CF:F6:6A:E6:C5:7C:84:20:FD:0D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0229
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/wvr3ZuqfahWcec_2aubFfIQg_Q0.roa
Signing time:             Mon 30 Sep 2024 01:33:46 +0000
ROA not before:           Mon 30 Sep 2024 01:33:46 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:46 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=C2FAF766EA9F6A159C79CFF66AE6C57C8420FD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:f8:d1:f9:39:43:2f:7f:54:9a:2e:56:34:
                    26:70:5b:e6:11:18:8c:51:d9:c5:14:2b:bd:81:6b:
                    3b:93:fc:7b:94:2d:48:a2:64:81:3f:93:3d:db:6b:
                    77:33:b8:83:a0:50:dd:76:e2:fc:0d:cd:c5:e8:fe:
                    e7:dd:a8:b8:eb:4a:ef:df:2e:eb:76:a3:3e:8f:47:
                    e7:ec:4f:f7:53:8e:53:ac:85:7a:ed:0a:44:99:f5:
                    f0:62:16:a7:2c:ab:12:09:e6:dd:bd:ef:ee:81:49:
                    8c:11:9e:1b:7e:eb:22:b0:72:e1:58:fb:87:cb:60:
                    64:12:74:35:d4:3f:56:9d:8c:ab:d4:1a:f1:62:7c:
                    68:c7:9b:ef:c1:3d:38:26:d2:36:69:be:16:7e:12:
                    e3:5b:9d:95:cd:5a:50:57:27:3f:8b:2d:a7:3c:b2:
                    f3:d7:40:16:8c:2d:e5:9a:45:95:2e:d8:cf:d5:9d:
                    d3:17:d4:a7:50:02:70:90:ee:1f:97:22:db:b7:62:
                    69:09:f1:0d:7d:6a:d4:89:ca:4f:9d:54:da:f4:a3:
                    c2:c7:b4:a4:05:87:1d:b3:50:93:cd:e4:50:66:58:
                    19:fc:11:12:5e:ac:ac:18:12:f4:dd:bf:89:e5:99:
                    7a:71:8e:ee:54:6b:b8:65:a0:f1:39:74:e0:0c:f2:
                    ba:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:F7:66:EA:9F:6A:15:9C:79:CF:F6:6A:E6:C5:7C:84:20:FD:0D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/wvr3ZuqfahWcec_2aubFfIQg_Q0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:cd:66:ad:c1:ef:d7:70:8f:b7:e7:48:fb:4d:02:64:f7:
         cf:ef:c4:0c:34:f9:af:23:b0:31:be:79:20:53:e0:f7:ae:38:
         45:ac:c7:2f:75:51:11:f4:65:5e:eb:4f:e0:e0:0c:7f:4a:5a:
         19:76:50:45:1b:bd:ad:b4:da:e0:21:78:07:f8:ed:2b:c2:06:
         19:76:8f:fa:1f:bd:32:27:3e:49:76:95:eb:16:30:8a:3b:f3:
         df:45:6a:e6:33:3e:83:c3:2d:97:12:14:3a:91:0d:e0:20:0e:
         1f:ca:31:36:27:1c:6e:39:75:87:a6:35:28:05:2e:46:35:31:
         c2:9e:f8:a0:2d:4c:68:01:c2:3f:24:82:b0:ac:40:0d:6c:7c:
         c1:2f:47:a7:f8:b0:4f:e5:2f:0b:c0:d3:88:ab:82:e2:02:74:
         fe:2b:c7:df:0b:9b:1d:c4:9f:e5:06:e9:d0:cf:17:ca:8f:e0:
         6b:01:fc:92:3e:f0:ef:6b:66:c8:01:0e:69:03:90:f6:e0:0e:
         ae:97:71:61:5e:d0:08:45:07:eb:12:69:42:34:d3:84:67:1a:
         01:90:85:b8:fd:e0:d1:e7:9e:c9:98:0c:40:9e:d5:3e:45:6e:
         b5:e0:9e:41:7f:0d:af:2b:c3:d0:a4:85:67:9e:65:24:dd:b3:
         47:ed:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:27 2025 by rpki-client