Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/5FBstHbUeVo6c3SAzYRWbRw2tGI.roa
File:                     5FBstHbUeVo6c3SAzYRWbRw2tGI.roa (raw, json)
Hash identifier:          wcl56M8b2ezh5JuHJKlOQkQazrf28DWFDqjoXjo+2g8=
Subject key identifier:   E4:50:6C:B4:76:D4:79:5A:3A:73:74:80:CD:84:56:6D:1C:36:B4:62
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0220
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/5FBstHbUeVo6c3SAzYRWbRw2tGI.roa
Signing time:             Mon 30 Sep 2024 01:33:42 +0000
ROA not before:           Mon 30 Sep 2024 01:33:42 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        182.48.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:42 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=E4506CB476D4795A3A737480CD84566D1C36B462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:e4:81:7b:e5:4d:bc:36:1f:a3:70:8c:8e:
                    56:07:f2:e4:30:1b:a2:e3:20:45:25:0c:cb:ab:1f:
                    1d:e3:76:e1:9e:c7:99:4c:1a:74:8d:62:94:5e:bd:
                    79:b3:90:cd:f0:08:09:05:5e:9c:34:51:b8:5f:9b:
                    e2:ad:24:33:98:4c:60:6d:49:1f:18:13:9c:4c:22:
                    1d:02:fd:ab:3e:66:a2:2b:e6:81:0f:bf:b0:b7:6e:
                    f1:e6:63:22:c1:7d:ed:e3:09:14:c3:28:84:f3:07:
                    07:f7:f4:6e:a8:95:a8:84:32:eb:41:ca:83:bb:e0:
                    a4:da:b5:f9:ee:d8:04:9a:a1:6b:94:ef:f7:68:31:
                    95:96:63:36:4b:41:b1:78:e6:ee:77:42:db:f6:5b:
                    41:a3:53:76:8c:47:99:ec:02:ce:8d:be:d3:99:1b:
                    f2:56:ad:f5:0d:55:83:5f:ce:74:a3:a4:6d:e5:33:
                    5d:d2:d0:de:cd:24:e0:1b:9d:cb:64:bb:ce:6b:d6:
                    ba:20:f2:64:4d:5f:b8:eb:19:b2:e4:99:93:d1:14:
                    27:29:ac:49:69:5d:c5:02:90:6c:7b:e6:24:29:46:
                    78:bc:c6:59:8c:3a:57:aa:d4:f1:00:df:dd:de:42:
                    fa:04:4c:68:cc:8b:0d:7f:b1:25:f1:3f:b4:91:a7:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:6C:B4:76:D4:79:5A:3A:73:74:80:CD:84:56:6D:1C:36:B4:62
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/5FBstHbUeVo6c3SAzYRWbRw2tGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:37:57:8d:52:09:be:49:6f:b3:fb:fc:3f:54:5e:2f:3b:
         e3:b3:4e:97:ff:8b:c6:0b:ae:1e:e5:35:67:13:3d:e7:ac:87:
         8f:0c:c4:e7:3a:1d:89:13:d2:4d:c3:db:bc:ec:d7:3e:be:08:
         6c:a3:a2:d0:b9:25:e0:bc:6c:03:25:df:ab:77:fb:4d:c9:32:
         11:89:98:70:e0:98:ea:e1:f4:bd:df:02:4b:8c:78:99:5c:e2:
         3e:67:36:e6:5b:a2:28:c3:27:d7:6c:58:b8:41:33:aa:af:ac:
         c6:19:37:4b:d0:e7:c3:75:d7:7d:3b:b4:3c:31:88:00:0f:1f:
         8d:98:1f:31:82:06:2c:b2:86:06:8e:39:12:83:36:a9:6b:7d:
         ce:c3:af:6f:d5:f0:a1:fd:e9:c0:3b:e4:33:c8:c6:40:a2:b0:
         32:88:1f:e8:78:98:ec:37:f5:4b:a4:03:c2:1d:5d:1b:65:b4:
         2a:ad:62:99:fe:41:3e:e4:80:b0:c6:76:15:43:97:eb:17:9a:
         b8:e0:5e:67:ce:e3:0a:76:b4:b2:16:da:a8:02:06:8d:9d:5f:
         cb:76:4b:70:70:f7:1b:d9:2b:8d:53:d8:15:3a:61:b9:31:08:
         44:91:10:d2:c7:65:05:a4:56:28:63:9f:9e:84:be:6d:2b:a0:
         d0:90:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:39 2025 by rpki-client