Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/s5VN-pcH-E2F7zVVVVupdnrMnmU.roa
File:                     s5VN-pcH-E2F7zVVVVupdnrMnmU.roa (raw, json)
Hash identifier:          R+DQxVM1zSedwt6nh/OnHKRxJurTR+L/UUgyoRkmFps=
Subject key identifier:   B3:95:4D:FA:97:07:F8:4D:85:EF:35:55:55:5B:A9:76:7A:CC:9E:65
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0193
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/s5VN-pcH-E2F7zVVVVupdnrMnmU.roa
Signing time:             Mon 30 Sep 2024 01:30:15 +0000
ROA not before:           Mon 30 Sep 2024 01:30:15 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     32787
IP address blocks:        210.130.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep 30 01:30:15 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=B3954DFA9707F84D85EF3555555BA9767ACC9E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0a:f7:a2:49:bc:c6:0b:df:c2:f1:be:c7:e7:
                    30:ab:02:29:c6:40:c7:d4:ff:89:24:fb:a8:c4:e3:
                    45:82:fa:e4:b5:ff:1b:8d:d8:ca:50:95:df:53:ef:
                    5d:dc:41:cb:2a:16:a0:78:b1:af:0f:c0:87:fb:a3:
                    02:fb:ee:07:b6:09:6c:1c:21:0e:6f:6b:9b:24:d9:
                    a6:ce:f2:9c:44:53:1d:32:38:5e:f6:5b:0c:ae:4d:
                    44:cb:63:db:01:0c:aa:18:ec:a7:df:b6:70:64:b5:
                    c2:d5:ba:d0:16:90:6c:8e:11:b5:b8:e0:19:13:09:
                    b1:1b:74:9b:96:7e:91:a5:eb:fa:bc:bf:84:ca:7f:
                    c0:4a:0c:20:97:b4:5e:06:dd:21:12:80:f8:a0:97:
                    b4:33:65:a6:f0:10:2c:ce:49:95:a5:d8:ee:08:fc:
                    74:c9:d1:35:e5:f3:3a:e9:01:a3:15:a5:1d:24:99:
                    3d:95:0e:e3:c3:33:fe:00:1c:78:a9:c6:18:e5:92:
                    8c:49:27:ca:20:73:96:85:6a:10:2b:f4:df:f8:0d:
                    6c:6e:e1:9e:cf:f1:24:d4:0c:c9:36:ba:f7:c6:17:
                    dc:fb:9d:c6:05:3d:43:9d:7b:23:65:7a:2c:75:f4:
                    f2:26:21:24:d6:32:6b:10:6d:da:52:be:bf:6d:09:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:95:4D:FA:97:07:F8:4D:85:EF:35:55:55:5B:A9:76:7A:CC:9E:65
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/s5VN-pcH-E2F7zVVVVupdnrMnmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:46:14:e9:a9:7e:0d:4e:17:85:e6:dc:0f:d3:d6:e6:7b:69:
         80:d2:7d:54:4a:e6:44:65:6d:48:f9:eb:4f:49:7b:aa:48:7b:
         e5:f7:2c:d2:50:93:75:26:0c:e9:e1:0e:72:d5:d3:18:58:12:
         c0:4e:ab:64:db:05:f6:70:cb:c7:2a:bb:79:54:c0:9b:ba:83:
         00:eb:74:4a:20:29:66:b7:a4:47:ea:8c:c6:82:2c:97:3b:70:
         58:10:8a:be:6f:ee:87:4e:a5:8e:07:0f:fb:47:08:ff:5f:db:
         39:e7:18:c9:73:e9:a5:16:cf:e5:8b:f3:82:91:9d:6b:7d:05:
         96:ee:6e:16:62:85:f9:f5:f8:58:23:31:6a:5b:78:9a:64:59:
         66:4f:c5:69:39:b0:c1:70:66:06:01:b3:4b:b9:68:dd:b7:d8:
         b9:d6:bf:9f:2a:8e:d8:15:be:0b:a4:87:18:52:6f:4d:a5:8e:
         c3:fb:b8:12:19:7e:63:9e:d4:14:35:e2:d8:7b:db:32:50:9a:
         05:2a:2c:13:28:49:88:c6:df:8f:c8:ce:be:0e:a1:cf:78:28:
         5d:c9:f2:9f:52:e7:a4:9e:9d:ce:72:92:50:44:d4:7a:1d:45:
         e6:d9:d8:8d:79:fb:aa:b0:b5:f5:b8:d7:44:90:f8:5a:f4:aa:
         41:eb:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:33 2024 by rpki-client on console-ams.rpki-client.org