Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/TwpMBWzHKjeWgkxRIleC4_-89RQ.roa
File:                     TwpMBWzHKjeWgkxRIleC4_-89RQ.roa (raw, json)
Hash identifier:          wR47ro4BLUvcNlMH1kf9GI15FtJAC8h+H7vvbMRAmk8=
Subject key identifier:   4F:0A:4C:05:6C:C7:2A:37:96:82:4C:51:22:57:82:E3:FF:BC:F5:14
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0137
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TwpMBWzHKjeWgkxRIleC4_-89RQ.roa
Signing time:             Wed 01 Nov 2023 01:29:32 +0000
ROA not before:           Wed 01 Nov 2023 01:29:32 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     32787
IP address blocks:        210.130.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 13:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:29:32 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=4F0A4C056CC72A3796824C51225782E3FFBCF514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ce:43:05:70:1b:12:0e:1a:89:53:b6:10:a7:
                    50:a8:a4:73:41:1c:0b:ea:16:93:41:9d:6a:5e:c3:
                    8f:0c:4d:99:15:9c:03:87:27:db:ae:8b:fb:d0:f3:
                    72:12:c9:2a:4a:ac:6f:39:09:7d:b8:c8:9d:16:86:
                    0a:00:ec:29:65:80:df:26:b7:fe:f8:f3:58:f2:ed:
                    b8:41:b9:9c:ec:25:53:35:69:17:42:bc:7d:79:a1:
                    54:5e:31:f9:a1:f6:62:17:58:45:5e:f8:77:49:38:
                    eb:7c:08:b0:52:2b:fb:d0:08:29:44:c8:74:d2:83:
                    85:63:eb:5d:09:1e:31:55:16:33:fa:2a:64:72:a3:
                    51:08:66:89:67:cc:04:45:46:eb:d4:31:f0:bd:c4:
                    08:26:3a:e9:a5:fa:dd:10:7b:d5:e1:90:55:ad:69:
                    62:92:ff:23:7a:81:3c:05:3c:e2:db:26:fb:de:79:
                    c5:82:a6:ba:3b:2a:96:77:62:7f:6a:94:bb:d4:24:
                    0a:b5:39:32:ef:51:06:89:47:61:21:71:17:76:e5:
                    f1:f9:78:9f:04:72:18:83:81:ac:ec:52:fa:d6:42:
                    9c:17:aa:7f:94:a7:3d:c0:d3:53:c2:cd:40:94:cb:
                    1b:b3:35:16:2b:4e:52:5b:c1:d8:32:2c:1b:14:19:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0A:4C:05:6C:C7:2A:37:96:82:4C:51:22:57:82:E3:FF:BC:F5:14
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TwpMBWzHKjeWgkxRIleC4_-89RQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:95:06:0b:6a:d0:15:a8:a2:6d:d8:14:2a:ce:87:db:ad:79:
         f2:e8:90:0b:e2:a9:23:e0:66:45:2d:b3:76:4e:27:f6:54:24:
         08:2c:36:e2:2f:5a:07:fa:35:76:14:59:68:c3:5f:55:d3:69:
         c9:81:cd:93:7a:8e:c3:0e:da:13:a8:19:5e:88:34:1d:69:02:
         2b:8d:e6:5d:de:3a:a2:ef:04:42:fb:b7:ea:0d:a8:c6:82:6b:
         88:70:14:da:0a:c2:cc:1a:54:8c:34:0d:78:c5:3b:5b:f6:73:
         a0:7e:2f:86:a5:c0:1b:c0:25:12:52:b5:c3:ed:b9:51:fb:00:
         84:88:d8:68:60:3a:33:65:49:b5:83:ff:01:f8:fc:ea:0b:79:
         96:91:6b:60:a8:a4:8b:2b:6d:12:55:ec:61:aa:ab:70:33:ff:
         3c:2a:6b:c2:70:39:37:ee:f5:e0:2c:ff:99:55:22:46:1a:02:
         b8:35:c5:04:dd:3e:f4:e9:19:0d:61:9d:9b:30:f6:1c:44:d9:
         f2:54:6a:ab:e2:22:c5:46:da:62:a8:cb:94:aa:72:44:62:05:
         95:e4:c1:ee:d2:cd:1d:02:a3:84:f7:77:a4:65:c3:c4:ad:a0:
         6c:7c:91:bc:5c:70:e1:e3:d5:1a:8e:68:bc:02:73:2d:e9:03:
         12:15:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 23:57:33 2024 by rpki-client on console-ams.rpki-client.org