Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/quVz_xsIYJtAAo_XxVYG_JGNJ20.roa
File:                     quVz_xsIYJtAAo_XxVYG_JGNJ20.roa (raw, json)
Hash identifier:          8Q/492V+VkJN+1c0e0SlS3Z7kSiEZFYRZqWYzfp/KQA=
Subject key identifier:   AA:E5:73:FF:1B:08:60:9B:40:02:8F:D7:C5:56:06:FC:91:8D:27:6D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01F2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/quVz_xsIYJtAAo_XxVYG_JGNJ20.roa
Signing time:             Sun 30 Jun 2024 01:29:03 +0000
ROA not before:           Sun 30 Jun 2024 01:29:03 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7684
IP address blocks:        182.48.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 30 01:29:03 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=AAE573FF1B08609B40028FD7C55606FC918D276D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:b5:0c:7b:9b:c9:53:5c:6b:82:0c:0d:b1:
                    e6:5c:b0:bf:2b:6a:b7:2f:be:68:c3:d0:e1:dc:c8:
                    b8:27:de:a1:cc:0d:cd:26:9b:58:3c:3f:d0:7a:18:
                    fa:cd:f9:27:06:6d:16:71:cd:1a:f5:26:1a:c5:16:
                    bd:0b:20:44:f7:b0:e6:2a:03:c4:60:54:10:c0:9b:
                    b4:fe:a4:c2:1d:92:4f:2e:09:ac:e4:11:e8:ea:67:
                    10:87:5a:4e:22:d0:1c:40:c6:8e:18:cb:ce:87:f2:
                    3a:73:b0:8e:63:15:21:59:7a:51:e3:16:27:12:bd:
                    f5:23:96:af:fb:65:54:57:c6:7c:89:af:6f:3e:4c:
                    9c:ff:59:fa:04:55:6b:08:8b:1d:94:44:bd:fb:36:
                    75:49:af:29:d8:de:16:a8:f3:01:a5:e7:58:5b:49:
                    42:57:52:69:2e:ea:38:20:39:d7:33:57:cf:5b:4c:
                    0d:4c:06:eb:e4:ea:13:8b:23:85:de:25:30:cc:21:
                    0c:90:3c:fb:12:22:66:4d:d8:ad:d0:4f:8e:d4:9e:
                    0c:23:5f:f7:78:65:c1:9f:e3:3d:29:ff:53:64:19:
                    42:bb:c9:0b:96:e0:ca:d4:d7:3a:49:0c:d8:3d:a9:
                    f7:29:d7:43:64:46:32:d9:05:ad:0e:c4:97:81:90:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:73:FF:1B:08:60:9B:40:02:8F:D7:C5:56:06:FC:91:8D:27:6D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/quVz_xsIYJtAAo_XxVYG_JGNJ20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:44:fc:fd:8b:f3:ab:c6:d2:8d:28:3f:25:d8:3d:58:46:
         42:a0:8a:d2:75:0c:30:fc:d0:04:5c:b7:0b:fd:c9:f2:7a:8c:
         e3:e9:62:87:9e:1f:0f:10:a7:30:a4:d8:db:6e:55:80:a6:86:
         05:79:32:ca:fd:6a:2a:b4:a3:87:69:f5:75:4a:1e:1c:13:b8:
         9e:29:f3:28:8b:22:ae:80:8d:c6:f6:51:f9:ea:d7:72:3c:49:
         a6:14:23:70:88:7b:6c:a4:27:d2:2e:b9:ea:f0:4f:bb:fd:66:
         f7:c0:0e:8d:cc:24:cb:d2:02:8f:c7:7f:e4:36:e0:1e:85:62:
         3c:fc:a6:4a:e0:d7:fc:33:10:82:4d:93:c4:24:01:87:f8:ab:
         e5:24:27:77:71:24:40:9a:1d:7f:65:69:c6:49:a0:00:1c:b6:
         a4:ab:af:c2:a4:46:c7:ae:6d:45:1d:14:cb:8f:25:c8:bd:b1:
         19:cc:fc:75:e1:b2:84:b0:06:16:b2:07:e9:68:eb:42:58:7d:
         25:71:91:19:7d:e1:b1:66:b9:c1:11:4d:f6:34:e6:e9:e4:f0:
         4c:6d:c1:3d:fb:d5:d2:ac:19:06:c1:1a:db:4e:06:fc:a4:4b:
         fd:6a:a4:95:1d:09:a1:5f:66:c6:e5:03:fb:a0:f2:e7:26:70:
         2d:88:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:08 2024 by rpki-client on console-ams.rpki-client.org