Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Uwcoh7MdX0IgeT2MDTqvOeA5YMw.roa
File:                     Uwcoh7MdX0IgeT2MDTqvOeA5YMw.roa (raw, json)
Hash identifier:          3gLUCetZVo8unF7m7hpqSQGgF2PEaJZZli82oKi9N1c=
Subject key identifier:   53:07:28:87:B3:1D:5F:42:20:79:3D:8C:0D:3A:AF:39:E0:39:60:CC
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01EB
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Uwcoh7MdX0IgeT2MDTqvOeA5YMw.roa
Signing time:             Sun 30 Jun 2024 01:29:00 +0000
ROA not before:           Sun 30 Jun 2024 01:29:00 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7684
IP address blocks:        182.48.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:29:00 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=53072887B31D5F4220793D8C0D3AAF39E03960CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:e9:a4:69:29:b5:f4:62:e3:97:49:e0:18:
                    f5:5d:0c:48:a8:5b:b1:9a:00:85:c1:f8:2a:db:d7:
                    d8:a4:75:58:54:02:2b:4b:4c:20:2b:76:74:dd:1e:
                    ce:e9:38:da:21:e0:86:1e:76:a9:c9:15:c3:d2:35:
                    74:e5:c8:56:31:1b:98:6c:30:17:59:0b:8b:9a:f3:
                    1d:83:fb:88:8c:78:1d:0d:0d:ac:dd:fd:64:23:fa:
                    20:5a:a7:a2:3d:af:c0:e3:82:d2:61:c3:e0:3c:80:
                    eb:09:7e:64:77:62:62:a1:be:03:a3:1a:14:3c:c4:
                    48:8d:86:0e:f4:cd:73:5a:01:c8:c4:5f:1e:39:59:
                    5f:a7:36:6d:51:a3:13:6f:ce:11:04:43:1f:96:17:
                    85:50:e7:a3:5e:e4:58:bf:5e:43:65:dd:45:01:3e:
                    90:c1:d3:fb:eb:40:44:3b:63:bb:9f:1a:2d:53:ca:
                    ef:6f:41:9f:5a:ec:25:c7:fd:59:49:10:95:11:bf:
                    66:e8:c4:f2:60:ea:f7:f3:75:8d:1b:79:23:39:11:
                    d0:0c:0e:98:c7:b6:78:5d:7e:2a:07:69:bc:a4:0c:
                    44:3b:3b:11:92:54:80:bb:d4:72:de:a3:bd:83:4d:
                    de:7f:ac:23:e6:f2:e3:8d:74:e6:0e:0e:0f:42:9a:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:28:87:B3:1D:5F:42:20:79:3D:8C:0D:3A:AF:39:E0:39:60:CC
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Uwcoh7MdX0IgeT2MDTqvOeA5YMw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:4b:9d:3b:85:42:b9:af:81:c6:02:9a:73:59:51:98:e0:53:
         a9:e8:c9:50:7e:62:b1:0c:4b:c3:1d:84:e0:0c:d6:9a:c4:32:
         09:8d:95:0f:e6:f2:39:cc:fa:16:85:ed:23:1e:f6:c7:1f:7b:
         c0:7a:24:6e:71:3c:68:da:ae:be:cb:81:b4:34:82:6c:31:7c:
         23:5c:3b:24:1f:92:74:e4:7f:13:e3:a2:92:dc:ed:49:4b:21:
         1d:ff:1f:5d:ec:d2:8b:9e:1d:cd:a1:17:d5:29:16:d1:b2:b0:
         0d:af:d3:4f:0d:79:71:9c:ac:2b:1e:5c:f3:4f:fc:bf:43:28:
         c3:e7:8a:69:f3:d2:08:f4:25:dc:5e:15:70:fb:9d:d6:02:10:
         69:b9:4f:f7:77:b3:78:c3:9f:5f:28:92:35:80:d6:11:42:3e:
         e9:a1:65:26:93:47:27:b6:23:22:a0:ae:b8:e1:ce:fc:f2:88:
         dc:1f:d7:23:45:56:19:8f:45:16:87:7c:b0:94:ae:04:e0:81:
         46:c5:a7:9a:09:cb:20:88:e4:57:45:67:43:8d:e1:29:f6:e2:
         08:e6:af:36:f7:23:2d:3e:4e:d2:50:23:9e:07:40:2d:79:93:
         ab:ff:5b:5e:2e:b6:d6:71:02:5b:19:34:5a:25:c4:ec:de:81:
         85:70:7e:e4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA2MzAw
MTI5MDBaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDUzMDcyODg3QjMxRDVG
NDIyMDc5M0Q4QzBEM0FBRjM5RTAzOTYwQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGoumkaSm19GLjl0ngGPVdDEioW7GaAIXB+Crb19ikdVhUAitL
TCArdnTdHs7pONoh4IYedqnJFcPSNXTlyFYxG5hsMBdZC4ua8x2D+4iMeB0NDazd
/WQj+iBap6I9r8DjgtJhw+A8gOsJfmR3YmKhvgOjGhQ8xEiNhg70zXNaAcjEXx45
WV+nNm1RoxNvzhEEQx+WF4VQ56Ne5Fi/XkNl3UUBPpDB0/vrQEQ7Y7ufGi1Tyu9v
QZ9a7CXH/VlJEJURv2boxPJg6vfzdY0beSM5EdAMDpjHtnhdfioHabykDEQ7OxGS
VIC71HLeo72DTd5/rCPm8uONdOYODg9CmstXAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUUwcoh7MdX0IgeT2MDTqvOeA5YMwwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9Vd2NvaDdNZFgwSWdlVDJNRFRxdk9lQTVZTXcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAtjAOMA0GCSqGSIb3DQEBCwUAA4IBAQAiS507hUK5r4HGAppzWVGY
4FOp6MlQfmKxDEvDHYTgDNaaxDIJjZUP5vI5zPoWhe0jHvbHH3vAeiRucTxo2q6+
y4G0NIJsMXwjXDskH5J05H8T46KS3O1JSyEd/x9d7NKLnh3NoRfVKRbRsrANr9NP
DXlxnKwrHlzzT/y/QyjD54pp89II9CXcXhVw+53WAhBpuU/3d7N4w59fKJI1gNYR
Qj7poWUmk0cntiMioK644c788ojcH9cjRVYZj0UWh3ywlK4E4IFGxaeaCcsgiORX
RWdDjeEp9uII5q829yMtPk7SUCOeB0AteZOr/1teLrbWcQJbGTRaJcTs3oGFcH7k
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org