Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/tMQzVv8FFU9pTayeE5-9sq6kWd8.roa
File:                     tMQzVv8FFU9pTayeE5-9sq6kWd8.roa (raw, json)
Hash identifier:          eOmRFrHJ7E22ORroTUUuk41f1+bh7n/z6Jky2PX2fdo=
Subject key identifier:   B4:C4:33:56:FF:05:15:4F:69:4D:AC:9E:13:9F:BD:B2:AE:A4:59:DF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01EC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/tMQzVv8FFU9pTayeE5-9sq6kWd8.roa
Signing time:             Sun 30 Jun 2024 01:29:00 +0000
ROA not before:           Sun 30 Jun 2024 01:29:00 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7684
IP address blocks:        182.48.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:29:00 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B4C43356FF05154F694DAC9E139FBDB2AEA459DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:84:ed:fd:b6:87:bf:95:dd:ee:ab:02:ca:
                    d5:0f:0e:21:5f:99:c8:57:64:b9:9d:6e:d8:c0:f9:
                    0c:6d:8b:ef:62:fd:26:87:b6:0a:a1:a9:fa:33:e0:
                    bd:94:20:af:ce:fa:3b:3b:53:bc:82:d4:92:bd:2c:
                    d1:af:8d:29:c3:29:35:0a:34:4a:2e:af:ff:97:ab:
                    eb:de:ae:0f:8b:10:a2:1f:e3:9c:5f:b5:43:60:d7:
                    6d:1b:b3:e5:39:a7:ae:f3:38:88:4b:ba:a0:7f:63:
                    43:7a:31:7c:00:bc:16:75:59:e4:e4:00:fe:89:72:
                    fa:bb:e8:38:12:28:67:c6:09:49:88:03:07:b6:7e:
                    c6:63:1c:17:c4:1a:db:ac:ba:c4:4c:ed:61:80:61:
                    8c:27:26:23:51:79:9e:f6:22:06:fc:e7:74:00:19:
                    7f:00:1c:88:46:1d:ba:a4:3a:47:ba:73:99:7a:19:
                    83:83:83:e3:92:fe:19:ec:67:2d:63:4c:4a:85:67:
                    6e:2d:a1:4a:a0:27:9c:33:29:3e:9c:67:68:81:7f:
                    63:a8:fd:ab:f8:e5:cf:67:d4:59:f3:b9:dd:22:d8:
                    0f:b3:43:60:05:37:76:dc:a1:64:ca:d7:35:c2:f7:
                    bc:98:e1:82:21:60:95:54:71:90:6d:cb:32:19:d0:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C4:33:56:FF:05:15:4F:69:4D:AC:9E:13:9F:BD:B2:AE:A4:59:DF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/tMQzVv8FFU9pTayeE5-9sq6kWd8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:24:c0:e7:2f:4a:b8:cc:9c:83:0a:5e:e8:e1:ee:c6:f6:
         ba:7b:11:51:ec:aa:23:09:5e:21:b3:cd:4f:31:61:7b:d7:c8:
         c4:4d:2d:27:20:24:60:09:54:ed:d1:4f:fb:9c:26:9e:c6:ea:
         28:00:3f:2a:fd:8a:6b:35:ad:2e:8f:f4:08:f2:e0:10:c6:28:
         2c:45:56:e8:77:9e:1a:06:26:06:0e:9d:8a:99:27:81:e3:3b:
         b4:5c:5d:ea:9c:72:2a:3b:68:ce:68:45:90:36:67:bc:3f:0e:
         40:5c:45:45:a0:d8:33:b8:21:3e:80:97:d5:1b:63:ba:37:3c:
         bb:77:fb:ce:62:48:83:fc:7d:4a:e5:4d:fd:95:25:2b:8a:c6:
         90:ed:87:01:38:16:c4:d7:a0:8a:bd:bd:d3:ce:64:95:61:bb:
         0d:96:c8:75:00:53:7e:46:e0:50:55:69:f1:f5:7a:8b:95:72:
         b4:51:f1:04:16:05:66:f1:e5:7f:3b:d8:41:b6:f3:be:5a:ee:
         d1:88:24:62:a6:09:3f:c7:60:d5:9c:f5:8c:de:94:59:38:1b:
         d3:26:c6:1c:b6:0f:29:9c:47:0c:68:34:a4:fa:10:d7:d9:bc:
         55:36:da:18:5f:e6:9e:b8:61:26:ab:2c:c3:d7:7c:5b:24:81:
         30:19:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org