Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oMhubK4zECTV0IcZhiaJ7psChOw.roa
File:                     oMhubK4zECTV0IcZhiaJ7psChOw.roa (raw, json)
Hash identifier:          fW2B7OGXoxHRYGMnkbKgdfzauU2hVcz2BrzkSAkn6TI=
Subject key identifier:   A0:C8:6E:6C:AE:33:10:24:D5:D0:87:19:86:26:89:EE:9B:02:84:EC
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01E8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oMhubK4zECTV0IcZhiaJ7psChOw.roa
Signing time:             Sun 30 Jun 2024 01:28:59 +0000
ROA not before:           Sun 30 Jun 2024 01:28:59 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7684
IP address blocks:        182.48.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:28:59 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=A0C86E6CAE331024D5D08719862689EE9B0284EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:48:49:67:8b:fa:63:a1:87:fd:49:83:0d:
                    02:f6:06:ad:90:9e:39:3f:98:7f:10:47:e6:e3:8a:
                    0c:0b:ed:76:36:d0:78:45:54:77:f3:79:d2:51:24:
                    0a:76:c3:db:6d:17:9f:97:22:b5:4c:05:9f:37:34:
                    32:2c:56:3e:a6:9e:4f:e8:d6:71:af:30:54:d8:98:
                    7a:bd:84:a2:a5:2a:ef:e8:c6:22:e3:8e:c4:9d:a8:
                    48:e8:9d:4a:f3:2a:42:ca:94:f7:71:3d:91:19:71:
                    ad:2a:de:34:f5:ee:3a:c0:4d:b8:2b:ee:66:60:91:
                    7d:26:8d:8d:86:8e:e3:3e:1a:19:99:63:d3:c8:8f:
                    94:70:95:52:fd:60:a4:b0:e1:47:56:c9:f7:16:26:
                    55:39:71:38:de:f4:4e:2b:8b:6b:bd:6a:6c:ac:72:
                    a6:46:9c:bf:c8:31:61:f0:6a:1e:2f:7f:70:93:b2:
                    a2:11:a1:d1:65:06:9f:e2:a0:fb:46:c4:92:4b:05:
                    65:19:8f:8f:ff:4f:95:23:90:66:a1:93:cc:21:5a:
                    e0:9d:55:df:07:39:c6:97:29:ab:37:ce:e5:92:90:
                    3f:8a:ae:80:93:5a:6e:9a:4d:c3:77:1d:77:41:17:
                    21:f7:6c:e4:df:92:fa:ce:46:d3:bb:13:33:8c:fa:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:6E:6C:AE:33:10:24:D5:D0:87:19:86:26:89:EE:9B:02:84:EC
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/oMhubK4zECTV0IcZhiaJ7psChOw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:99:a0:50:42:4c:d6:ef:35:e1:b2:ed:05:3a:e6:a6:32:42:
         a8:b2:0f:15:ef:33:24:eb:57:65:d1:41:c0:a1:a6:70:4a:c9:
         9f:48:a4:ea:6b:11:7e:1e:2e:c1:ac:bd:17:72:2d:93:03:9b:
         db:06:39:9f:e4:b9:0d:e8:da:b8:16:ae:98:b9:f0:84:50:71:
         3b:73:57:99:38:52:35:17:93:05:35:26:8d:0b:8b:9c:ef:2d:
         71:9d:58:b6:8b:e4:19:56:d8:a3:db:79:6e:e8:0a:61:a9:31:
         2e:f0:19:97:7e:68:7c:73:cb:28:6b:11:d9:dd:00:3d:c1:3f:
         8f:d5:98:2b:5c:ff:8d:58:c6:ee:e7:94:61:0f:a1:79:1b:2e:
         b2:22:13:0b:85:3d:a9:5e:c4:e6:c0:1d:dd:44:db:1f:c6:f8:
         ef:a8:a2:be:8c:e1:6a:19:2c:b1:65:df:ae:ee:93:83:31:96:
         a0:91:30:e1:f7:c3:0c:6f:78:49:71:34:4b:25:f0:21:aa:aa:
         40:26:36:3b:bd:1d:ad:05:4b:76:6d:40:ae:b6:0b:e7:b8:82:
         13:75:d9:5c:5a:66:70:d9:16:c8:9b:1f:8e:05:d5:05:ec:c5:
         9d:98:f5:a8:c8:ae:d3:ba:a2:49:f9:65:6b:7b:80:3e:2a:f8:
         b4:2a:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org