Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/UdlCMuOz4HNs0WujLamTWvV_GW0.roa
File:                     UdlCMuOz4HNs0WujLamTWvV_GW0.roa (raw, json)
Hash identifier:          tZRnItLgJMjnUwI9cvK4Qg92CCTKwX+/lzkPsDHw/nM=
Subject key identifier:   51:D9:42:32:E3:B3:E0:73:6C:D1:6B:A3:2D:A9:93:5A:F5:7F:19:6D
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       E8
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/UdlCMuOz4HNs0WujLamTWvV_GW0.roa
Signing time:             Fri 31 May 2024 01:31:27 +0000
ROA not before:           Fri 31 May 2024 01:31:27 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        110.232.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:27 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=51D94232E3B3E0736CD16BA32DA9935AF57F196D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1f:9d:49:67:a5:d3:97:da:2a:98:af:8c:97:
                    06:c1:5a:64:25:df:b4:96:36:e1:4b:f4:27:7e:a1:
                    a4:c4:bf:e4:4e:18:8c:fe:c9:5b:cc:06:33:1b:f8:
                    34:92:9b:0b:2a:0d:6d:ce:8c:f8:6f:86:5e:58:8b:
                    6a:17:3b:9f:4d:d3:3a:cf:d0:f0:0a:a9:bc:05:cb:
                    70:ca:7a:4a:1e:ef:7b:08:6c:14:7e:06:72:9b:ff:
                    f3:30:63:25:5b:27:06:07:10:61:b2:d5:68:ed:fe:
                    8a:3c:5a:50:69:42:b8:3a:97:f3:4f:88:eb:3d:29:
                    5f:03:f9:b8:97:e0:93:31:e0:04:95:93:7e:d1:6a:
                    0e:bc:e9:1c:4c:1f:9f:cc:2a:1d:86:eb:f4:df:87:
                    9f:8e:76:35:d3:e3:df:f3:cb:0c:c7:00:ef:c9:71:
                    a7:57:71:2c:af:94:86:37:fb:86:ae:a3:7f:f9:41:
                    41:e5:7d:3f:13:40:3d:03:4f:64:bd:38:5b:ac:36:
                    13:fa:0c:b7:08:9b:4b:e2:7c:8b:a9:43:d5:d8:7d:
                    0b:bb:9b:83:e7:0f:49:e5:bf:de:4c:6c:bb:19:e8:
                    d4:2c:e1:87:ba:ba:6c:b0:f0:2f:c5:d7:45:c9:a0:
                    b3:d7:9e:eb:dc:c6:b5:80:e0:ff:6d:75:e5:e8:3b:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D9:42:32:E3:B3:E0:73:6C:D1:6B:A3:2D:A9:93:5A:F5:7F:19:6D
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/UdlCMuOz4HNs0WujLamTWvV_GW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:f4:6b:c3:4a:18:7b:ae:be:c0:1c:43:7d:aa:59:1e:ad:
         a9:68:ae:0a:bf:dc:d5:33:2b:36:ac:ac:13:f4:d9:d5:55:e7:
         1c:33:75:bf:32:34:fe:a4:c5:9b:33:cf:94:fa:c6:1b:a6:cf:
         e7:6f:af:7a:bb:e0:e8:dc:2d:06:9a:3f:0a:0e:f9:14:a2:da:
         d9:88:47:92:09:0f:da:0c:a9:9f:ff:9d:fa:c9:bc:d0:5f:ce:
         9e:50:7c:f3:5e:8e:fa:b6:c0:e9:d3:03:8f:3c:b7:1e:88:d8:
         b8:62:05:b5:1b:68:1c:53:cd:16:df:8b:6b:b5:90:84:e0:57:
         7f:e1:19:1b:0d:4a:07:37:26:05:59:c0:c9:9b:3a:f5:ec:4f:
         9d:23:fc:6f:13:a1:37:b9:71:b2:a6:4f:27:46:4d:ef:8c:f4:
         e3:99:37:2c:94:5f:8a:fd:ed:ce:d4:ce:a0:90:3b:aa:69:38:
         d7:77:6d:fa:2f:43:cd:4b:d0:27:3f:ee:d0:28:84:5f:77:bb:
         1f:27:d9:9b:87:04:74:b6:a0:b6:f4:f4:d7:92:b3:fb:02:5a:
         8b:7a:8e:9c:ee:92:55:25:7a:86:7d:76:66:ef:2d:dd:a4:6b:
         58:98:9c:01:2b:11:67:e0:ef:87:af:ec:88:ad:f2:de:ff:eb:
         7d:d1:a3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org