Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZA_nwvw2iT1DDvCjY3eyq8SLr0E.roa
File:                     ZA_nwvw2iT1DDvCjY3eyq8SLr0E.roa (raw, json)
Hash identifier:          aoqfLKoZpsde5J4Fb6oiViRWuq0z7m02Xr/wBEynkYo=
Subject key identifier:   64:0F:E7:C2:FC:36:89:3D:43:0E:F0:A3:63:77:B2:AB:C4:8B:AF:41
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01CC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZA_nwvw2iT1DDvCjY3eyq8SLr0E.roa
Signing time:             Wed 01 Nov 2023 01:31:16 +0000
ROA not before:           Wed 01 Nov 2023 01:31:16 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        182.48.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:16 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=640FE7C2FC36893D430EF0A36377B2ABC48BAF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:9c:c6:9c:fd:f6:45:0f:d6:b9:18:33:47:
                    3d:e3:e2:3b:b1:4e:ac:0a:34:07:6e:b8:5a:00:8e:
                    81:3d:d9:5a:e2:70:48:40:f6:ce:a1:31:38:1d:26:
                    50:c6:5e:41:22:5e:9a:d7:e7:40:a4:ae:96:4e:56:
                    e3:06:91:4b:d8:83:42:78:45:e9:ea:fd:5b:77:dc:
                    b1:40:f2:3b:b3:c7:92:1e:a9:ea:18:3b:c7:81:14:
                    09:cd:44:e8:47:1e:67:c0:de:94:30:89:54:42:b2:
                    2b:9f:b4:d6:6d:5b:59:6e:cd:de:25:f9:47:71:13:
                    41:bc:f4:ec:91:f3:1d:0a:35:d1:0c:ae:38:5a:df:
                    cb:ec:02:58:ba:bd:6d:26:1b:f0:d5:e9:cd:90:44:
                    0a:0f:af:e7:35:12:f6:0c:29:4b:11:dd:99:f1:f4:
                    f4:1f:fc:c9:47:a8:4a:1d:48:a8:60:0f:0a:75:3f:
                    17:22:1e:a2:c4:6a:64:4c:e4:ed:18:61:0b:38:fb:
                    2b:79:cd:e5:a2:7e:cc:b7:d1:de:58:bf:de:7e:f2:
                    bb:bf:ae:6b:84:c2:cf:3f:d0:d7:67:ca:27:26:f3:
                    36:48:78:89:f4:bd:13:0c:e4:e6:72:e0:bb:28:8a:
                    9f:df:50:a0:7d:b5:d6:88:1a:40:fc:06:f0:a3:d3:
                    4e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0F:E7:C2:FC:36:89:3D:43:0E:F0:A3:63:77:B2:AB:C4:8B:AF:41
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZA_nwvw2iT1DDvCjY3eyq8SLr0E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:73:e3:82:fb:be:ef:19:c7:95:b9:7c:23:cc:a2:9c:e7:
         6d:17:37:54:1f:11:7f:ab:4d:a2:c6:7b:b8:11:5d:9c:40:46:
         2c:98:7c:88:d7:1a:22:67:69:38:34:e2:7a:1f:d9:0e:e4:b2:
         5e:37:70:0c:55:41:18:9c:70:53:c3:0e:8f:9a:f8:72:b6:58:
         86:5b:30:fc:6c:ac:99:bc:09:bc:3c:f2:30:4f:96:bc:40:f1:
         99:4c:dc:6c:a8:b2:20:ff:17:41:63:be:9d:71:10:ac:21:f6:
         23:db:b4:5d:62:f1:4f:ed:de:8c:6c:d3:90:96:7e:5d:be:72:
         08:b4:47:ef:1e:9b:fa:b1:7a:fd:58:34:85:8f:50:d6:e2:f2:
         f4:26:63:c9:12:a2:eb:f2:9e:2b:6c:7a:92:99:88:83:ca:8f:
         b7:62:d4:5b:7b:61:f7:7c:71:06:18:4a:d8:8a:b6:3b:0c:be:
         62:52:4e:6a:92:8d:8f:16:1b:e2:2e:6b:3e:4d:ce:b8:39:1f:
         34:53:10:c7:53:c6:b2:bb:39:b4:55:39:82:67:b5:91:0e:59:
         64:b5:1e:94:bd:05:01:12:46:3d:f1:f5:29:6d:25:36:38:62:
         5e:b7:31:32:c2:48:d2:41:f9:09:c8:ef:e8:43:ee:b9:14:84:
         b2:5d:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org