Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pZasyKvjKKi3xKd0xcIqg1rwCBI.roa
File:                     pZasyKvjKKi3xKd0xcIqg1rwCBI.roa (raw, json)
Hash identifier:          517PMGA8TUXqyT9SnWAv2RarnSJxpJhkMAdNzxlGCPg=
Subject key identifier:   A5:96:AC:C8:AB:E3:28:A8:B7:C4:A7:74:C5:C2:2A:83:5A:F0:08:12
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       019F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pZasyKvjKKi3xKd0xcIqg1rwCBI.roa
Signing time:             Tue 01 Aug 2023 01:28:16 +0000
ROA not before:           Tue 01 Aug 2023 01:28:16 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:16 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=A596ACC8ABE328A8B7C4A774C5C22A835AF00812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:81:ae:cc:61:f0:72:11:e4:ca:69:05:a8:
                    06:45:61:a2:3d:d1:6e:e6:aa:fb:d3:8b:4f:24:aa:
                    b3:86:88:1d:31:8c:07:6c:0e:4f:e7:cd:28:f3:47:
                    c0:3c:6c:9a:94:11:aa:60:13:b8:ff:11:e1:22:23:
                    5f:e6:e9:7a:08:26:e7:b9:d5:e7:bd:c4:c4:0e:cd:
                    83:93:f6:9d:62:13:7c:e0:d6:c7:94:2f:1c:12:ca:
                    5a:79:78:78:db:6a:d9:00:56:20:22:d0:57:75:39:
                    bb:69:a9:9b:2f:b8:70:b7:d0:39:39:c8:6c:88:20:
                    a4:58:59:b4:d2:aa:db:48:16:34:ba:18:e5:40:22:
                    cc:7f:07:32:c5:73:24:60:d4:0b:1d:c0:c0:db:1e:
                    af:d2:95:4f:a8:4c:c4:58:3d:83:ec:27:c1:97:f5:
                    9e:d2:0b:1b:0e:05:d5:e3:07:76:44:a2:bc:b5:9d:
                    fb:24:4f:8a:dc:82:85:bc:4c:a3:fe:ea:2f:9a:39:
                    90:5f:ea:2b:3f:b6:78:13:9a:ee:3c:c1:e1:2a:03:
                    1d:51:e5:55:77:46:cc:5d:91:7d:83:55:1e:cb:99:
                    bf:62:ff:e2:7e:c0:eb:78:97:20:68:74:78:3a:83:
                    5e:ec:9f:41:9c:85:2e:93:7e:b2:b6:b5:60:fb:30:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:96:AC:C8:AB:E3:28:A8:B7:C4:A7:74:C5:C2:2A:83:5A:F0:08:12
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pZasyKvjKKi3xKd0xcIqg1rwCBI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:5f:f0:f4:00:21:e4:ef:98:63:f5:03:6c:6d:03:41:08:
         1f:2e:35:b9:7f:78:65:9d:ff:47:4f:f1:3d:fb:2e:5b:5c:c0:
         1e:a8:9e:b9:ef:b5:77:d6:e0:25:95:d7:e8:3f:b6:e7:d0:dd:
         c8:19:d1:7a:56:8f:8d:e2:5e:ee:cf:23:1d:7d:26:7e:aa:fd:
         06:8c:b4:08:4e:d5:4d:80:8f:7b:0d:77:09:d4:c6:2c:68:76:
         d0:15:8d:ed:7f:2f:b5:dc:79:26:b5:e2:59:4e:99:80:18:56:
         be:2c:6b:d7:c8:b0:be:67:46:0c:f9:33:19:f3:1c:cc:c0:99:
         bf:d9:51:61:a1:23:49:79:79:1d:46:81:c7:b0:84:d4:5d:d6:
         90:7a:1f:df:49:09:c1:32:84:7a:c7:7c:33:fb:64:7c:78:48:
         2f:d2:40:7e:e6:d6:93:82:59:c6:cd:85:80:bb:3f:4e:16:39:
         8b:98:e5:67:68:5f:ce:68:a5:6c:29:02:7c:0e:f0:0c:f7:aa:
         d0:65:25:94:6f:59:ff:47:e9:13:8a:58:de:6b:29:d4:80:35:
         83:e2:a8:b1:47:0c:d2:ad:2c:e5:ce:f1:12:2d:ec:6a:eb:c4:
         9c:f9:06:53:48:fa:c4:e8:2b:b8:11:cd:a6:47:7c:1d:bb:99:
         e7:9c:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org