Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/u5DjAY-9zNleWLVGZZkwUkhNqPo.roa
File:                     u5DjAY-9zNleWLVGZZkwUkhNqPo.roa (raw, json)
Hash identifier:          RhvD8Bjj46TAPFRDMrFMKJlp/SwFoKHjeubmCWTX9+0=
Subject key identifier:   BB:90:E3:01:8F:BD:CC:D9:5E:58:B5:46:65:99:30:52:48:4D:A8:FA
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0199
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/u5DjAY-9zNleWLVGZZkwUkhNqPo.roa
Signing time:             Tue 01 Aug 2023 01:28:13 +0000
ROA not before:           Tue 01 Aug 2023 01:28:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BB90E3018FBDCCD95E58B54665993052484DA8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e1:e1:80:f4:62:55:8f:b4:9f:6a:db:05:d8:
                    1f:83:d2:c7:60:41:fe:cc:e2:60:ab:aa:04:dd:58:
                    55:ba:8f:45:ae:c8:96:5c:95:7e:d1:bb:bb:f3:61:
                    21:ae:92:8d:d1:c8:7c:68:be:4f:7e:dc:69:4d:3d:
                    4f:bd:15:fb:db:c5:c0:a8:c1:0d:c6:9d:5f:ee:d7:
                    a6:b8:dd:8c:eb:16:8c:8f:26:8f:91:9f:17:29:70:
                    42:b3:00:b4:13:79:c7:87:9c:3b:ad:5a:73:03:a3:
                    e5:3f:48:ea:df:95:6c:aa:dd:b6:92:b0:e9:05:fe:
                    68:7d:64:fd:8a:ee:2d:70:73:8c:58:95:d6:d3:98:
                    0c:e4:cb:31:d8:3c:e7:b0:af:e0:52:92:ab:52:89:
                    29:94:35:1d:16:47:43:6e:3b:91:38:3a:a6:da:18:
                    fc:c5:5b:22:52:f2:3b:33:bd:7b:f4:75:67:d6:59:
                    c0:cd:ed:8b:8f:51:98:7c:d2:3c:44:13:5e:94:db:
                    38:68:3d:08:72:a1:97:75:37:72:ef:af:db:24:62:
                    a9:31:f5:42:7f:0a:3b:1c:8a:50:05:3d:95:c9:84:
                    b0:1d:e4:f5:73:ed:ed:81:20:fd:ac:d2:a7:aa:5f:
                    c5:1a:9e:6f:26:fa:9d:e6:ca:21:4f:c1:91:92:c8:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:90:E3:01:8F:BD:CC:D9:5E:58:B5:46:65:99:30:52:48:4D:A8:FA
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/u5DjAY-9zNleWLVGZZkwUkhNqPo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b1:1e:d3:d3:45:ad:94:a5:b1:e7:c7:44:7f:68:f4:36:50:
         eb:88:27:f5:47:d1:04:c3:65:61:b9:44:60:a2:82:2f:9e:bd:
         91:09:8e:5e:ae:6a:f8:e4:39:be:7c:ad:b9:e3:92:6e:3c:40:
         db:91:fb:4d:b6:a6:74:64:5a:b0:2d:39:67:78:85:00:b7:6d:
         88:7b:19:ca:2d:d9:67:94:6e:64:00:32:46:68:52:f4:55:fb:
         ce:4d:47:d3:3c:5e:97:d4:aa:c9:40:53:78:a5:10:a8:46:12:
         cc:68:ef:a0:b5:68:9f:17:2c:c8:04:c4:dc:f9:55:0c:52:ff:
         11:59:95:8b:89:ae:db:4a:58:f8:6e:d4:6a:1b:d6:26:3a:bc:
         c5:ed:c8:ee:f9:73:f5:1f:05:be:c3:74:c2:bc:32:f8:9f:ab:
         5e:57:06:8a:d3:1a:cd:7d:d3:01:9e:f8:80:93:94:5d:b7:77:
         32:79:c2:63:e0:b6:97:0b:d5:14:61:dc:3f:da:79:31:05:92:
         6f:d5:e7:0b:16:30:84:ba:e0:e8:d6:c5:44:93:88:c7:67:a2:
         35:df:36:8c:2a:c3:f9:5b:b5:e5:14:3e:ef:e5:68:a8:41:0a:
         cc:bc:73:cf:16:be:03:52:c5:02:38:b9:17:cf:94:20:5b:1a:
         60:50:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org