Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/foP0f7o82UD9edqf2MuGVX1Z2b0.roa
File:                     foP0f7o82UD9edqf2MuGVX1Z2b0.roa (raw, json)
Hash identifier:          ePaGBZSx9ym6l2MJZy2KvnqxHPoTRxHF94s1rnpD4Zw=
Subject key identifier:   7E:83:F4:7F:BA:3C:D9:40:FD:79:DA:9F:D8:CB:86:55:7D:59:D9:BD
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       07
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/foP0f7o82UD9edqf2MuGVX1Z2b0.roa
Signing time:             Mon 21 Oct 2024 02:03:05 +0000
ROA not before:           Mon 21 Oct 2024 02:03:05 +0000
ROA not after:            Tue 21 Oct 2025 01:23:02 +0000
asID:                     9354
IP address blocks:        210.251.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct 21 02:03:05 2024 GMT
            Not After : Oct 21 01:23:02 2025 GMT
        Subject: CN=7E83F47FBA3CD940FD79DA9FD8CB86557D59D9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:07:80:66:04:7e:85:76:5c:84:3e:07:91:
                    00:7b:d4:0f:ee:fe:46:6a:8d:7c:81:e9:14:e5:13:
                    18:8d:99:f4:6c:6b:2d:f6:11:7e:b9:a4:f2:2d:e9:
                    0a:78:12:46:a5:92:fc:96:8e:ca:67:03:ff:0a:37:
                    b0:6b:68:9c:97:cd:6c:67:b7:9c:c9:7b:6e:89:17:
                    4a:b1:93:8a:b7:16:93:1f:d7:f3:21:29:86:19:1d:
                    e3:c2:fb:9f:ec:71:02:6d:b8:fc:fb:f9:20:36:d8:
                    1d:45:14:06:af:12:c3:24:c5:63:bf:33:3f:1d:3d:
                    92:33:c5:c4:97:81:cb:52:c6:76:91:b2:e7:80:4e:
                    13:83:e7:ac:34:d2:6e:06:c4:d6:d6:72:94:f4:9a:
                    27:2e:4c:75:00:0a:13:8b:eb:d2:97:37:12:06:04:
                    cc:75:e5:fc:c4:51:cc:b3:9d:fa:53:04:f2:7d:db:
                    36:da:6d:55:76:70:c1:a8:8c:a2:1a:0f:57:a7:f7:
                    2c:8b:64:45:12:1f:f0:32:c0:7d:2d:b3:a9:f2:97:
                    d4:04:2c:b4:f2:50:f1:fa:7c:de:2e:35:d7:7e:bf:
                    2c:a1:a1:08:f8:f5:54:f3:dd:62:4e:d8:8c:95:78:
                    90:5a:17:af:51:61:3a:27:91:ab:f9:ba:21:35:8a:
                    d2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:F4:7F:BA:3C:D9:40:FD:79:DA:9F:D8:CB:86:55:7D:59:D9:BD
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/foP0f7o82UD9edqf2MuGVX1Z2b0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.251.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e1:09:71:df:7f:5c:d7:e6:dc:51:ff:66:6b:21:f4:1c:7d:b6:
         a0:04:c1:3b:7f:45:c2:ff:68:04:6b:02:9e:1f:44:8c:40:50:
         72:44:22:1f:e3:36:e2:ff:4e:41:94:3e:60:ce:e9:4c:08:bd:
         87:45:c0:48:a6:f5:e2:a3:c7:5b:ac:35:9d:2f:bc:3e:5d:42:
         4f:48:45:01:2b:55:d1:f8:56:84:d3:df:e5:21:c5:5c:d5:3e:
         46:a6:e3:5f:db:48:66:1c:78:b1:c3:3d:3d:80:b9:59:e8:02:
         f7:29:cf:d4:29:95:e3:40:3e:e0:2d:db:97:73:3b:35:f1:1e:
         a4:f1:21:0d:2a:b1:85:fb:55:f1:e1:f2:84:59:91:8d:94:5a:
         e7:36:63:c0:e6:eb:4c:8c:7c:d6:99:2b:cf:82:7a:1e:e4:64:
         9e:b2:19:72:60:08:b2:bc:3b:7d:75:de:8a:18:78:1a:ca:fe:
         a5:d0:37:ad:ba:69:a4:19:79:3c:4f:e8:b8:95:88:2e:dd:68:
         0a:2e:1e:c2:60:ed:7f:18:40:17:dc:21:96:42:8a:d5:c7:77:
         46:31:a7:00:a9:07:90:d9:11:c2:74:ab:28:9e:21:46:68:29:
         d3:85:3d:ce:aa:da:70:32:3b:0b:06:a7:1a:f3:6d:dd:b5:0b:
         47:2c:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org