Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/-ZXCDt78A_SAMP-n37u1Szq6IsQ.roa
File:                     -ZXCDt78A_SAMP-n37u1Szq6IsQ.roa (raw, json)
Hash identifier:          DhQWRokRxK9lcwmuMv13T6H1JEgDgzp929W7H/WK4Uw=
Subject key identifier:   F9:95:C2:0E:DE:FC:03:F4:80:30:FF:A7:DF:BB:B5:4B:3A:BA:22:C4
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       EC
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/-ZXCDt78A_SAMP-n37u1Szq6IsQ.roa
Signing time:             Fri 31 May 2024 01:31:29 +0000
ROA not before:           Fri 31 May 2024 01:31:29 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        210.188.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:29 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F995C20EDEFC03F48030FFA7DFBBB54B3ABA22C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:16:52:3d:16:bc:a9:11:36:f8:74:5b:9b:
                    c3:45:7d:a9:5d:5d:e2:53:3e:60:5a:03:a5:bc:ba:
                    82:f0:48:1e:86:ef:4c:48:43:fc:37:b8:b8:04:f9:
                    9f:f6:04:8c:b6:fc:88:e3:61:34:b7:01:63:93:62:
                    d4:4d:6e:1c:bc:9d:4b:f0:d6:43:d6:3e:14:0c:23:
                    ef:9a:69:63:1a:89:cb:67:49:e1:0f:1f:32:42:c2:
                    ca:8c:d2:38:34:a0:d3:f2:af:73:d5:09:17:82:0c:
                    17:3f:ab:9f:03:42:a8:8e:74:93:c7:b1:62:bf:17:
                    f2:fc:f0:ce:e9:53:f9:85:fc:2e:30:bd:5e:5b:04:
                    b9:75:d3:66:5a:a2:38:37:d1:22:e1:4b:8d:29:4f:
                    31:a1:9f:17:f7:dc:44:9d:ce:37:35:23:62:8b:c7:
                    5e:e4:16:12:ae:e6:b5:e1:2d:16:3d:8b:9e:45:b9:
                    fd:41:98:6a:cd:6c:00:fd:14:6f:bc:c3:60:b2:e4:
                    af:ab:ad:1d:0b:89:63:3b:23:8d:a5:e2:05:39:3b:
                    c9:45:91:92:79:27:7e:32:e1:e8:67:d5:2f:65:4e:
                    ac:a9:db:d0:40:37:18:6d:17:e1:0b:47:74:eb:b6:
                    c2:04:1b:4c:a1:1a:5b:d0:31:42:d2:85:db:f6:6c:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:95:C2:0E:DE:FC:03:F4:80:30:FF:A7:DF:BB:B5:4B:3A:BA:22:C4
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/-ZXCDt78A_SAMP-n37u1Szq6IsQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:52:0d:74:35:7e:00:97:de:0b:86:3f:9b:42:0a:d3:ee:
         e6:d6:3d:bd:07:b1:37:7b:36:b6:6c:6b:8d:8e:0c:6b:85:01:
         69:45:a6:40:9b:fa:40:8c:c1:bb:24:3f:7d:97:0d:36:84:ac:
         05:ce:fa:79:9e:df:6a:25:07:12:0d:b8:68:45:40:2f:14:67:
         f4:27:fe:09:f9:02:8a:5d:0e:1c:8d:b5:5c:8d:3e:f8:df:cb:
         f5:de:14:01:3c:7f:b1:16:e9:db:fd:6a:6d:a8:f4:8d:05:3b:
         77:18:70:42:bb:5c:1a:d1:7f:9a:50:4d:9e:55:9f:f7:18:b4:
         ff:5a:16:45:32:10:d5:16:f1:e1:36:e2:9b:58:a0:4a:88:5d:
         f6:8e:ae:43:6c:90:c0:82:12:6a:3f:b8:a7:d9:41:e0:79:97:
         7a:75:e1:b2:b7:84:29:8b:f2:a8:b4:39:ff:e8:91:b6:aa:5c:
         3b:ac:84:4a:20:ac:9f:7a:26:53:be:9d:17:05:20:ac:64:6e:
         4c:87:cb:ec:f7:bd:47:45:af:43:25:80:d5:8d:c3:f5:16:13:
         08:16:99:33:e0:06:46:7a:b5:d4:c3:e7:1d:a2:10:7a:42:0d:
         8e:77:28:49:35:c1:b6:7f:5a:16:de:31:2f:b9:89:55:75:ce:
         7f:9a:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org