Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SM5q1AWoJLSTaA0sgSCWUvxhLiM.roa
File:                     SM5q1AWoJLSTaA0sgSCWUvxhLiM.roa (raw, json)
Hash identifier:          EPGb0DJ6PO2ZrTtoWkzxLsYbcY9q4kyZt4uLbjkP/TE=
Subject key identifier:   48:CE:6A:D4:05:A8:24:B4:93:68:0D:2C:81:20:96:52:FC:61:2E:23
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01FF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SM5q1AWoJLSTaA0sgSCWUvxhLiM.roa
Signing time:             Mon 30 Sep 2024 01:29:55 +0000
ROA not before:           Mon 30 Sep 2024 01:29:55 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:55 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=48CE6AD405A824B493680D2C81209652FC612E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:ca:1c:cb:f8:9f:6b:a6:6a:78:84:00:0f:
                    8f:6c:6a:98:2d:4d:f0:a1:ff:63:43:2e:65:df:04:
                    84:d4:a2:ba:f2:41:c1:af:37:89:ce:e3:b0:52:c7:
                    99:c7:70:22:72:44:fe:11:a5:2f:54:3b:29:fd:18:
                    8f:83:7c:d5:87:05:4d:80:0c:16:d5:d8:e4:56:f2:
                    ff:f1:f8:7e:fb:1a:54:c5:d0:66:ed:3f:3c:74:e8:
                    be:df:89:64:cb:b8:ad:6a:9d:a8:40:5f:e3:00:54:
                    27:51:9a:0e:db:ba:d4:e8:0f:da:cc:30:9e:f9:86:
                    84:79:c4:c7:2e:76:89:bc:20:0e:22:7c:a8:28:14:
                    a5:0e:1e:eb:7f:bc:f8:6d:f2:9f:74:bf:37:b2:bb:
                    2c:e7:2a:8c:28:cd:76:46:f4:ad:36:af:96:a2:67:
                    26:80:51:7a:90:be:5b:a5:1f:c2:53:9b:a1:f6:ba:
                    c6:75:fb:3d:73:00:22:9a:11:aa:1d:ae:f4:5e:4a:
                    40:68:be:b0:6a:a6:53:1c:36:cf:2a:10:56:92:38:
                    92:b1:84:26:aa:4d:81:f4:99:64:da:15:e0:77:12:
                    d5:8d:e3:cf:92:94:1b:3b:6d:c2:60:b9:5c:8f:01:
                    09:4e:d6:e0:74:ad:b8:97:8a:bf:00:c4:0d:3d:43:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:6A:D4:05:A8:24:B4:93:68:0D:2C:81:20:96:52:FC:61:2E:23
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SM5q1AWoJLSTaA0sgSCWUvxhLiM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:f7:cd:9d:b5:95:36:00:de:9b:23:ce:14:62:9d:72:51:e6:
         05:e2:7c:cc:67:2c:2d:12:e1:36:ce:a1:0d:c0:e9:e7:4e:68:
         0c:30:d8:7e:8e:b1:c7:45:fb:1d:c3:0e:41:69:f0:dd:18:cc:
         0f:0f:84:b0:0d:b5:b6:a6:fe:d7:7e:77:57:f6:b3:68:3a:d1:
         70:b3:6b:74:f5:d0:89:44:21:fe:d8:78:15:1f:af:4e:1d:21:
         8b:32:23:ea:62:6c:28:3f:34:5f:41:22:32:a4:5c:f3:80:e4:
         d3:83:9b:5b:a2:0b:20:8c:09:e9:e9:46:9a:86:48:8f:b4:b8:
         f6:5f:9b:55:b1:1b:b6:b5:6e:7d:fd:76:83:af:3f:16:e2:ff:
         9b:54:e0:ff:1d:d8:cd:9a:23:a0:77:fd:14:a9:57:e4:21:6e:
         38:be:80:5e:2d:84:3a:05:ed:c4:74:33:a5:8a:be:69:0d:66:
         95:91:89:13:c4:97:3f:ab:02:2b:36:3d:a2:43:c1:a2:05:4f:
         17:30:85:cf:f2:87:1a:54:dd:cc:aa:1b:26:e8:2c:f5:4e:4e:
         b2:fb:df:88:a7:c5:79:ec:91:dd:31:1d:04:01:06:37:54:0b:
         d0:8e:d1:5d:07:7a:f4:da:bf:8b:ed:ab:12:a8:f0:cc:40:13:
         db:5b:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:27 2025 by rpki-client