Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa
File:                     Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa (raw, json)
Hash identifier:          kEA17+QNpLm005ZsywFekLPSiapo7CZ8ib/UrZAXt5M=
Subject key identifier:   2E:8D:01:75:86:66:B1:F9:22:44:24:8C:1F:44:49:20:E6:97:08:31
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01E5
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa
Signing time:             Fri 31 May 2024 01:31:05 +0000
ROA not before:           Fri 31 May 2024 01:31:05 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: May 31 01:31:05 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=2E8D01758666B1F92244248C1F444920E6970831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:c2:9e:77:55:91:3a:bb:13:dc:82:3b:62:
                    c0:8e:ef:fa:28:3b:af:b0:36:30:58:bf:bc:f8:f9:
                    23:d7:6f:3f:5f:b0:87:e3:dc:60:87:f3:2f:c4:ee:
                    2c:3e:fe:f2:ff:08:7d:48:8c:3d:ae:0e:d6:bd:5e:
                    54:56:f1:70:69:38:39:8c:2d:24:99:54:d9:42:47:
                    6b:58:c9:94:ce:9f:e6:02:52:0b:79:5f:9f:73:72:
                    93:d3:d3:9b:6d:5f:aa:a9:f7:53:27:8c:aa:83:0a:
                    26:6b:ac:28:c2:9a:46:1b:45:74:8e:7c:69:2e:4f:
                    23:1d:4a:40:4d:d1:74:9d:e7:5b:9c:a6:4d:5e:02:
                    49:3e:70:03:da:e9:5d:70:f7:c4:2a:f5:81:ad:78:
                    f3:2e:8a:4b:6a:8f:ed:34:c8:b4:08:9b:08:b0:24:
                    3b:7c:f3:40:26:4f:1d:2b:8a:dc:df:f1:1e:cd:9e:
                    65:37:bf:20:5d:a1:20:f9:4e:74:29:5b:76:ff:92:
                    67:cc:d4:e3:85:59:f5:7b:f4:c6:44:e7:df:0b:05:
                    1a:d4:c5:af:15:f9:b0:8c:e5:0c:dc:c2:7d:ea:a7:
                    4d:78:7a:c1:19:c0:57:1f:99:d7:31:29:f2:53:3b:
                    a4:81:d8:0a:d1:f4:42:45:86:89:33:45:42:e8:41:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8D:01:75:86:66:B1:F9:22:44:24:8C:1F:44:49:20:E6:97:08:31
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Lo0BdYZmsfkiRCSMH0RJIOaXCDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:90:08:0c:60:ba:61:ee:da:c8:74:12:de:7a:ce:58:92:eb:
         2b:ae:89:4d:2c:fd:79:20:07:14:46:ce:79:de:eb:90:14:d7:
         61:ed:a5:08:a9:34:18:e2:6c:9f:41:0b:88:cc:00:fe:2e:ff:
         73:13:54:45:e1:d5:db:eb:d9:0c:19:0d:20:93:c8:ae:64:6f:
         d2:ee:5a:80:a1:bb:22:8c:9f:4b:c9:e8:30:6b:6a:29:21:7b:
         b5:68:37:46:d8:e9:a0:8a:2c:07:3a:8f:2b:f9:1f:4a:c6:cc:
         b6:ce:62:7c:f7:09:69:d8:ff:23:eb:72:f3:c3:fc:2d:e7:c0:
         dd:80:9f:95:03:0f:79:24:a4:07:b0:a0:1a:d0:4e:ce:9b:f9:
         7c:33:cd:7c:1a:b3:38:fb:99:cd:c8:4d:3b:31:ec:11:3a:79:
         29:49:3f:a8:1d:8b:6b:b3:31:fb:5c:20:60:4e:7f:c1:a7:62:
         95:34:d5:7c:cd:9a:be:16:a0:01:45:4f:47:a7:2d:21:44:e2:
         61:12:c0:9e:07:90:69:8d:84:8e:5d:05:1d:3b:bb:83:4a:14:
         7e:cb:5f:6f:1b:d5:10:5b:2b:9d:ba:3d:3b:41:01:6b:21:18:
         c8:7b:86:eb:73:57:b5:c8:45:ab:1f:7b:98:c8:9a:e5:4a:16:
         09:b7:81:f1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA1MzEw
MTMxMDVaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDJFOEQwMTc1ODY2NkIx
RjkyMjQ0MjQ4QzFGNDQ0OTIwRTY5NzA4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw88Ked1WROrsT3II7YsCO7/ooO6+wNjBYv7z4+SPXbz9fsIfj
3GCH8y/E7iw+/vL/CH1IjD2uDta9XlRW8XBpODmMLSSZVNlCR2tYyZTOn+YCUgt5
X59zcpPT05ttX6qp91MnjKqDCiZrrCjCmkYbRXSOfGkuTyMdSkBN0XSd51ucpk1e
Akk+cAPa6V1w98Qq9YGtePMuiktqj+00yLQImwiwJDt880AmTx0ritzf8R7NnmU3
vyBdoSD5TnQpW3b/kmfM1OOFWfV79MZE598LBRrUxa8V+bCM5Qzcwn3qp014esEZ
wFcfmdcxKfJTO6SB2ArR9EJFhokzRULoQQDTAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQULo0BdYZmsfkiRCSMH0RJIOaXCDEwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9MbzBCZFlabXNma2lSQ1NNSDBSSklPYVhDREUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAtjAnMA0GCSqGSIb3DQEBCwUAA4IBAQDWkAgMYLph7trIdBLees5Y
kusrrolNLP15IAcURs553uuQFNdh7aUIqTQY4myfQQuIzAD+Lv9zE1RF4dXb69kM
GQ0gk8iuZG/S7lqAobsijJ9Lyegwa2opIXu1aDdG2OmgiiwHOo8r+R9Kxsy2zmJ8
9wlp2P8j63Lzw/wt58DdgJ+VAw95JKQHsKAa0E7Om/l8M818GrM4+5nNyE07MewR
OnkpST+oHYtrszH7XCBgTn/Bp2KVNNV8zZq+FqABRU9Hpy0hROJhEsCeB5BpjYSO
XQUdO7uDShR+y19vG9UQWyuduj07QQFrIRjIe4brc1e1yEWrH3uYyJrlShYJt4Hx
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org