Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSf5hX3MHtHoAxAKOc6Rkmxqlcc.roa
File:                     sSf5hX3MHtHoAxAKOc6Rkmxqlcc.roa (raw, json)
Hash identifier:          FLh+nQgKDMQJbpjDcdGwrmcpvpTMuYAHoO28rATNxZI=
Subject key identifier:   B1:27:F9:85:7D:CC:1E:D1:E8:03:10:0A:39:CE:91:92:6C:6A:95:C7
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01ED
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSf5hX3MHtHoAxAKOc6Rkmxqlcc.roa
Signing time:             Sun 30 Jun 2024 01:29:00 +0000
ROA not before:           Sun 30 Jun 2024 01:29:00 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7684
IP address blocks:        182.48.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:29:00 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B127F9857DCC1ED1E803100A39CE91926C6A95C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:73:02:97:8b:d7:5c:92:80:d0:11:38:45:
                    02:29:6d:4d:2d:88:bb:0c:e3:e1:75:22:44:c6:f5:
                    b5:c6:c0:41:f2:d6:34:38:d4:5e:8f:99:21:6b:c5:
                    9d:64:3f:ad:b8:a6:b7:81:6f:1b:ae:1d:7d:61:d9:
                    bc:83:74:52:ba:fa:c5:31:07:47:b0:b3:00:7c:ed:
                    5c:c4:5e:47:b3:ea:d3:9b:6b:17:54:66:91:dc:f3:
                    d9:e9:4c:0d:e5:0d:75:70:af:7c:1f:a3:95:b8:7f:
                    76:1e:cb:8c:ad:0c:59:81:a1:b8:26:1d:a5:c7:61:
                    1b:36:0c:6e:8e:04:af:31:6a:f4:15:b0:db:07:7c:
                    ce:56:2c:1c:13:a9:7c:38:67:4b:b2:28:f8:9e:94:
                    d6:d8:c6:ee:f0:8c:ed:6f:34:5f:ca:f9:90:db:5f:
                    9a:8c:b2:8e:c2:b4:ab:34:15:5c:3a:52:f2:31:39:
                    32:8d:fc:9b:7d:25:83:9a:93:d0:a4:38:5b:cd:1a:
                    be:88:67:64:3a:fd:ed:d1:b0:01:07:87:80:2f:5a:
                    3c:46:4f:a8:6b:c2:1d:da:59:8e:71:33:a4:2d:2c:
                    b2:bc:e7:7a:a4:cf:10:40:8c:5c:71:1d:86:f3:2a:
                    6c:e9:b5:6a:9f:37:57:ca:ca:55:a4:11:fd:c2:b9:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:27:F9:85:7D:CC:1E:D1:E8:03:10:0A:39:CE:91:92:6C:6A:95:C7
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sSf5hX3MHtHoAxAKOc6Rkmxqlcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ee:29:6d:68:24:59:5e:20:1d:4b:22:ef:fb:af:da:72:82:
         cb:4c:ea:87:25:82:2e:b9:09:38:2c:51:f5:fd:c9:93:05:85:
         a0:fa:c9:52:9d:b9:89:65:a1:b6:3c:d4:54:58:e4:19:0e:6b:
         84:36:6d:f4:98:f7:65:92:73:40:8a:9d:36:4c:c7:d7:14:b8:
         7b:f5:0f:4e:c7:05:ad:94:8b:41:93:15:04:df:b0:54:ea:e1:
         21:6f:2e:93:ac:87:65:c0:47:6a:d1:e2:89:f8:af:46:89:d8:
         b0:76:96:8f:cd:99:a1:90:53:15:1f:3d:3a:6d:bd:44:23:cc:
         91:1d:42:d6:2b:b7:78:c3:1b:42:e8:fb:12:84:bd:50:0d:9e:
         73:1f:4e:75:bd:07:a0:41:05:56:52:26:32:5e:ce:5d:8b:14:
         4c:3a:f7:13:d2:21:22:df:38:d5:22:8d:ef:78:22:fe:d3:c0:
         8b:6c:10:37:bc:e9:0f:df:a7:53:a6:0a:a1:c1:a4:48:22:72:
         75:13:0d:1f:58:c2:d2:86:2c:47:ef:d5:39:ca:95:a5:6d:27:
         c8:76:79:01:cc:60:2f:c9:20:4a:21:7c:31:a0:e9:f7:58:f7:
         e2:b4:07:54:9b:10:6b:51:47:9e:68:dd:85:c5:18:00:e4:a0:
         5f:66:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:46 2024 by rpki-client on console-ams.rpki-client.org