Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eZYMoLD8MTKptd4IP3a2SmP8-mg.roa
File:                     eZYMoLD8MTKptd4IP3a2SmP8-mg.roa (raw, json)
Hash identifier:          MuP90HpB2JzCfhUmCSnAIsdaaavibPwPYWH41cF6Lgw=
Subject key identifier:   79:96:0C:A0:B0:FC:31:32:A9:B5:DE:08:3F:76:B6:4A:63:FC:FA:68
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0197
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eZYMoLD8MTKptd4IP3a2SmP8-mg.roa
Signing time:             Tue 01 Aug 2023 01:28:13 +0000
ROA not before:           Tue 01 Aug 2023 01:28:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=79960CA0B0FC3132A9B5DE083F76B64A63FCFA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:63:64:dd:15:ce:73:ff:73:36:02:fb:a1:
                    39:78:0a:bd:aa:05:ca:ad:0f:a7:5f:21:21:bc:00:
                    12:74:b8:1b:10:8f:f2:7e:f3:ca:1a:ac:e6:b9:fe:
                    8f:cc:92:94:23:93:dc:40:df:94:43:d7:8d:4d:8f:
                    e9:03:91:03:f9:83:3e:07:54:45:e7:5b:52:15:6d:
                    a7:90:a4:7d:cc:f0:57:f1:58:3b:65:5c:d2:07:f8:
                    2b:b4:a9:b9:86:e8:4b:4c:5a:9c:f8:e4:69:ae:03:
                    e2:50:ce:ce:ec:04:14:58:c0:ef:b3:3e:b2:61:04:
                    5b:76:3a:e1:c3:10:0d:cc:58:2b:9c:c5:ba:9f:9f:
                    04:7e:7f:5d:21:6f:de:a2:81:c4:5b:f3:50:86:bb:
                    52:85:93:97:b0:3f:92:73:68:c9:16:db:fa:67:20:
                    98:f7:dc:cb:8f:cd:ba:b1:dc:a1:8d:87:b1:2f:32:
                    82:b7:c4:42:fb:a1:83:46:63:9b:38:17:26:58:82:
                    92:05:3d:80:66:b4:b0:d8:e6:85:9a:4f:b8:60:26:
                    9f:8a:be:7d:0d:8f:45:ea:87:8b:35:60:f3:c3:ff:
                    bd:aa:16:7a:70:a2:22:b5:9b:36:18:e0:5a:15:9f:
                    8a:1e:23:ae:c0:42:28:97:63:4f:ca:ce:7c:79:e6:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:96:0C:A0:B0:FC:31:32:A9:B5:DE:08:3F:76:B6:4A:63:FC:FA:68
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eZYMoLD8MTKptd4IP3a2SmP8-mg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:18:21:76:2f:37:c1:77:45:79:78:00:3d:64:44:e8:3b:c4:
         d2:5b:15:65:2d:08:0e:83:46:57:e6:b9:23:11:05:24:5e:17:
         70:c9:c7:50:30:af:6d:3d:81:fc:7e:8c:9b:5c:23:ce:c3:29:
         85:ab:b8:e7:ce:f6:2a:f1:56:52:7f:4e:46:6a:7d:2d:91:d6:
         54:77:d1:dc:1b:8b:0b:da:5e:07:a5:4f:4c:33:c7:f1:79:88:
         ae:5c:61:da:a5:67:9d:48:9a:9e:2d:88:c2:be:db:e8:32:ff:
         20:3f:64:59:fc:14:fa:bc:27:5a:a1:61:3b:8a:67:91:6d:fa:
         ea:d0:ea:a2:6d:6a:4a:07:77:21:7f:15:b6:4c:ce:44:3f:9f:
         1a:43:f6:f1:be:f3:de:93:b7:a0:5b:14:8c:b9:00:fd:70:4e:
         bd:62:ac:06:f9:9e:e4:0e:cd:46:4c:2a:9a:bf:38:49:e7:9a:
         3d:d9:e3:23:b8:70:8b:41:04:27:e2:cf:11:82:11:3b:e3:76:
         2b:9a:68:1c:0c:39:58:6c:2b:38:e1:0b:c1:1b:3a:cf:cc:28:
         32:30:d9:65:f1:99:3f:e4:d7:ee:7e:a9:30:21:c9:42:05:e4:
         49:7a:d0:54:8d:a9:ef:74:ea:7b:68:0c:5c:c3:13:ef:d8:f2:
         c0:54:bd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org