Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lZtP1taGfUWjPHuMFcmTBUAGhvc.roa
File:                     lZtP1taGfUWjPHuMFcmTBUAGhvc.roa (raw, json)
Hash identifier:          IxycuTGqh6peGWeL9SipI+/HDfQ9a+bRd48izEhfKbQ=
Subject key identifier:   95:9B:4F:D6:D6:86:7D:45:A3:3C:7B:8C:15:C9:93:05:40:06:86:F7
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01EE
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lZtP1taGfUWjPHuMFcmTBUAGhvc.roa
Signing time:             Sun 30 Jun 2024 01:29:01 +0000
ROA not before:           Sun 30 Jun 2024 01:29:01 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7684
IP address blocks:        182.48.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:29:01 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=959B4FD6D6867D45A33C7B8C15C99305400686F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:23:e6:26:bc:d3:1a:a1:66:b3:3e:de:5e:
                    c1:a8:16:e6:af:aa:81:14:74:ed:c7:c2:27:f4:f3:
                    17:fe:ee:a2:aa:90:2b:13:63:00:24:9f:a8:db:f1:
                    a9:35:9f:b0:49:e7:0c:a6:3f:56:8a:4d:1a:09:ba:
                    fd:be:88:9e:a3:4b:60:84:dc:b6:b9:1b:7a:4a:36:
                    b4:4a:02:b2:eb:a2:77:e3:e9:74:6e:8d:77:ca:6a:
                    c4:36:0c:13:23:c1:d0:30:5a:b9:61:87:ae:ae:02:
                    36:c7:c7:c5:95:6d:ee:12:3c:1e:7c:5a:03:91:2d:
                    fe:89:fa:4e:c2:76:b2:c4:7e:de:bd:95:70:58:4d:
                    9d:de:4d:bc:af:4b:df:e8:61:bb:dd:ea:f5:41:77:
                    c3:29:2d:24:99:87:e2:3a:87:29:c1:cd:69:10:7a:
                    55:8a:3c:77:ae:8b:9b:07:a9:e6:a2:6b:79:a3:3b:
                    ca:4d:40:d2:76:5a:33:73:b6:fa:54:4c:79:46:52:
                    e9:dc:4e:d0:47:33:72:de:45:d6:00:89:54:3f:61:
                    bc:fd:03:ae:75:53:97:a2:97:73:08:70:c4:4a:fb:
                    ff:a8:75:51:90:dd:cc:26:cf:5d:a4:3c:46:f5:23:
                    73:bf:1f:ff:f5:8a:38:0b:5a:f9:ce:a6:c3:6b:b1:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9B:4F:D6:D6:86:7D:45:A3:3C:7B:8C:15:C9:93:05:40:06:86:F7
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/lZtP1taGfUWjPHuMFcmTBUAGhvc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:8e:56:ad:fa:14:16:a7:e3:61:dd:75:17:0a:36:42:88:65:
         ed:aa:92:f8:1d:e6:d6:e4:79:96:ce:86:98:5b:f3:2d:34:ed:
         85:0a:13:5d:66:99:c1:46:d8:d8:bb:1f:8e:37:79:aa:1c:1d:
         35:c1:6f:05:61:13:98:d2:33:48:f2:bc:01:36:43:1c:76:05:
         ed:4d:45:10:aa:a5:d9:aa:f7:2c:66:a6:af:f4:ff:e2:78:d2:
         53:c1:02:80:d8:a4:20:51:73:73:53:ef:65:3a:87:43:11:50:
         95:01:f1:51:c0:96:32:2f:84:5a:d3:69:05:0b:16:59:16:a9:
         6e:94:31:e9:2b:56:9d:e3:95:c2:de:4d:34:a1:f8:65:fc:69:
         86:ee:1b:a7:16:99:08:1a:4e:28:94:a1:4f:ae:5d:a1:67:96:
         95:cb:4b:3b:49:cd:66:d5:c9:b0:6a:ad:ef:3d:46:8b:19:c9:
         18:79:c1:77:ea:71:09:ac:ee:8d:d4:80:db:e8:0b:08:07:5f:
         a2:c1:f5:0a:79:ab:da:1c:ed:d0:8f:bd:4b:4d:0e:d2:d6:4f:
         d0:44:a6:46:1d:7b:fd:a2:ff:3a:d9:36:5d:35:d9:d4:36:8c:
         b0:e2:fb:54:d3:c9:40:60:3c:c7:84:f3:58:3c:52:df:47:84:
         ce:7d:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org