Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WCSibGgVfbCKEwhtJXIERffV9Vk.roa
File:                     WCSibGgVfbCKEwhtJXIERffV9Vk.roa (raw, json)
Hash identifier:          v/bBHdRUcrQ8STt7qyMlwpAuByIAX5rH6nByshC4fBs=
Subject key identifier:   58:24:A2:6C:68:15:7D:B0:8A:13:08:6D:25:72:04:45:F7:D5:F5:59
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0242
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WCSibGgVfbCKEwhtJXIERffV9Vk.roa
Signing time:             Tue 10 Jun 2025 10:46:54 +0000
ROA not before:           Tue 10 Jun 2025 10:46:54 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     7684
IP address blocks:        182.48.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 13:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jun 10 10:46:54 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=5824A26C68157DB08A13086D25720445F7D5F559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:69:8e:fa:cb:f4:1f:59:37:13:35:62:43:41:
                    57:0c:20:05:9d:64:9c:5b:61:a3:88:ee:a4:33:e2:
                    1f:45:32:ca:62:f7:54:24:6a:11:f5:41:17:cc:19:
                    bb:c3:d7:97:3e:40:79:45:f3:d0:02:70:6e:a6:ef:
                    72:58:58:6f:49:95:ac:52:72:f8:d8:2f:97:80:f5:
                    c1:ab:3f:11:10:32:2a:70:17:d6:0e:9e:8f:3a:b6:
                    92:7f:47:b0:46:79:67:06:0f:58:17:a4:86:02:50:
                    c4:9a:8e:04:a6:fb:ce:2c:15:3b:58:fc:40:07:72:
                    d8:b6:e7:09:fa:0a:39:de:91:9f:be:61:50:d5:9e:
                    35:23:0e:56:d7:ab:2f:ab:f7:a8:17:67:33:40:7a:
                    41:84:42:71:20:99:75:21:e6:8d:07:2d:3d:4d:43:
                    17:55:24:bf:f3:0d:c5:81:96:07:84:73:6c:c3:80:
                    7a:96:5d:80:65:e6:e4:8d:25:84:d5:fa:7a:a3:2c:
                    08:da:4e:38:e3:b3:75:de:1e:99:82:67:d2:e1:96:
                    c7:f3:45:eb:4a:db:10:78:8c:05:cc:5f:a0:ec:cd:
                    d0:22:5d:77:07:42:2c:66:47:89:2d:4d:eb:f0:6a:
                    9e:7a:c1:f5:b1:57:bf:18:0d:06:df:a0:4f:46:48:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:A2:6C:68:15:7D:B0:8A:13:08:6D:25:72:04:45:F7:D5:F5:59
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/WCSibGgVfbCKEwhtJXIERffV9Vk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:84:47:e6:88:01:b0:22:8d:55:d5:43:4c:47:c5:d0:be:6d:
         0f:ef:cc:c2:f7:5e:16:bd:68:ef:b4:78:0a:3b:e3:63:36:4e:
         74:56:bc:3e:81:88:b8:4c:7c:aa:21:96:6b:b2:57:a3:42:d9:
         6e:58:66:bb:44:fa:bd:2d:31:c3:99:c3:f8:e7:04:84:38:74:
         83:67:c1:ab:0f:8d:c2:e3:7e:bf:b6:7f:80:c1:15:87:71:88:
         c1:12:01:c5:db:84:ab:20:d0:97:67:e9:13:f4:d6:9f:29:01:
         86:eb:e5:b7:3f:34:90:c6:d2:06:d7:89:48:b6:87:d0:53:25:
         43:62:b8:09:a6:f9:2d:e6:b3:6e:c9:00:bd:de:5a:97:9c:1b:
         89:54:a5:d3:74:92:92:dd:3d:7d:b5:7b:d1:b7:18:00:02:37:
         05:03:63:20:a7:6e:d1:9c:92:1c:d6:b8:a1:a7:b1:ab:2e:93:
         dc:42:4c:60:dc:29:22:e5:55:e1:53:35:31:1f:fa:f3:c2:9a:
         33:5f:ab:56:0c:86:96:16:ac:d9:b3:a4:57:be:6d:d8:7e:0b:
         1c:4c:da:9d:59:4a:de:79:e2:dc:0f:b7:d9:73:ef:cd:1f:5f:
         68:55:6a:46:2c:ec:53:e7:88:c2:14:61:bc:04:a7:9e:e7:17:
         de:e4:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:29:03 2025 by rpki-client