Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7q7c8bv5oh7HJYal-fcr39gDA8M.roa
File:                     7q7c8bv5oh7HJYal-fcr39gDA8M.roa (raw, json)
Hash identifier:          fQ7HTpKCYUXZe2CqKKRYRExAQVGbDd+sTE+uZSbUW6Q=
Subject key identifier:   EE:AE:DC:F1:BB:F9:A2:1E:C7:25:86:A5:F9:F7:2B:DF:D8:03:03:C3
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0241
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7q7c8bv5oh7HJYal-fcr39gDA8M.roa
Signing time:             Tue 10 Jun 2025 10:46:54 +0000
ROA not before:           Tue 10 Jun 2025 10:46:54 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     7684
IP address blocks:        182.48.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 18:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 10 10:46:54 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=EEAEDCF1BBF9A21EC72586A5F9F72BDFD80303C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:14:d4:7e:bd:11:a4:3a:da:96:8c:a9:18:54:
                    74:e5:6f:ea:ca:c0:d2:36:c8:54:d4:05:b8:e2:bc:
                    d4:d3:8a:07:e8:c5:f0:48:e2:25:a5:12:52:27:6f:
                    2d:0e:22:e8:8d:09:12:39:7a:0d:9f:86:3f:2f:6e:
                    b8:da:b6:8e:76:69:92:80:04:38:6f:12:67:48:2b:
                    97:42:52:a2:11:ff:bc:ff:75:8d:ea:b1:5f:06:80:
                    77:e5:51:6d:5d:ac:0b:f6:c0:33:01:fc:34:76:64:
                    dc:43:32:46:0e:41:4c:91:b3:f5:ca:62:eb:8b:65:
                    72:35:33:d0:15:cb:00:7f:01:80:60:a9:78:b1:82:
                    85:09:58:25:67:1b:1c:b2:83:9d:11:d6:54:20:a8:
                    91:80:8d:e0:a1:b4:0a:95:20:fd:a4:6d:e8:b3:ec:
                    e0:4b:ba:d0:08:58:ca:e4:45:9f:a2:dd:f1:d5:e6:
                    7f:3a:3e:43:ad:e8:4f:14:a9:d9:f6:5d:05:c3:70:
                    bd:8f:3f:6f:90:5e:ad:7a:fc:b2:75:c5:a8:57:d1:
                    60:fb:8d:44:18:58:db:3b:e8:17:c1:79:81:79:9c:
                    75:9a:5d:37:0f:89:05:6c:14:aa:bc:42:e8:1f:ad:
                    4e:8e:cc:1a:2e:60:c5:38:ca:c8:2a:40:7d:f2:42:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AE:DC:F1:BB:F9:A2:1E:C7:25:86:A5:F9:F7:2B:DF:D8:03:03:C3
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7q7c8bv5oh7HJYal-fcr39gDA8M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f6:a7:ff:cd:1e:d0:98:7b:e2:ec:b4:99:12:82:90:2a:b0:
         1e:b9:76:80:1d:59:a4:85:c5:14:93:fe:d6:21:ab:57:be:73:
         9a:67:79:34:ea:13:f1:6b:db:11:ce:d4:90:0f:8a:43:3a:55:
         13:3c:90:12:05:46:b8:77:45:d9:0d:5d:6f:85:7c:d8:39:65:
         09:47:44:c7:fc:85:bf:07:dc:aa:a2:11:1b:fb:39:0e:50:d6:
         93:eb:fd:e9:39:61:f8:36:40:da:4e:00:4f:6e:8f:7d:c9:73:
         19:9b:f0:ea:69:d4:7c:f2:7c:ff:3a:5a:6a:d4:c5:71:79:5e:
         f7:ac:cb:53:f9:4d:3d:83:0a:78:6b:94:00:1c:72:33:72:54:
         15:35:5d:96:70:de:b3:ca:3f:87:86:e9:3c:23:a9:f0:a6:5a:
         e4:3e:ba:b2:43:30:b3:82:5f:77:ee:bb:1c:30:0e:04:a3:57:
         1f:17:d4:f0:e0:a2:39:6c:d7:23:c0:66:7f:90:69:12:39:1e:
         28:c9:55:37:5f:27:2d:41:f2:64:62:70:91:1d:ad:87:e9:f5:
         d1:5c:e4:5a:06:a0:9a:9a:13:4d:8a:83:19:75:8d:15:73:ae:
         71:a5:34:5d:81:52:ed:ec:ca:9f:4f:7d:21:f1:cb:da:4c:71:
         38:7d:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:16:38 2025 by rpki-client