Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/7-9rOQK9ost0aLeAaXYd0yFk2KQ.roa
File:                     7-9rOQK9ost0aLeAaXYd0yFk2KQ.roa (raw, json)
Hash identifier:          8+v1i9LW9nC2N8/4UH0A8tvVKMo8uF+0Pg7zauFlGnI=
Subject key identifier:   EF:EF:6B:39:02:BD:A2:CB:74:68:B7:80:69:76:1D:D3:21:64:D8:A4
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       5A
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7-9rOQK9ost0aLeAaXYd0yFk2KQ.roa
Signing time:             Fri 01 Sep 2023 01:28:57 +0000
ROA not before:           Fri 01 Sep 2023 01:28:57 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        160.13.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Sep  1 01:28:57 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=EFEF6B3902BDA2CB7468B78069761DD32164D8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:25:d4:37:4d:03:5c:c0:ba:64:7b:a3:c4:
                    61:5d:33:7a:68:76:d3:89:fd:03:19:31:f9:8a:ae:
                    a3:25:19:06:09:a6:59:24:49:02:aa:d4:f2:bf:fc:
                    9b:2c:68:d0:47:6a:c6:0a:54:5e:48:10:ee:a2:51:
                    44:e0:2a:c7:40:29:9f:93:01:7a:6f:84:73:d1:0f:
                    67:eb:f3:fd:19:88:cf:c8:93:e9:2e:c6:b2:33:3a:
                    9b:9e:fe:c9:82:e7:11:5c:50:1e:13:28:64:a2:1c:
                    e6:a9:92:5e:7e:cd:0b:4f:01:7d:d4:fd:b7:77:d5:
                    92:0e:35:8e:e9:44:43:e6:7a:b4:7e:dd:b5:15:d8:
                    4b:34:ed:44:bd:0e:a7:d9:09:dd:02:ba:21:7c:73:
                    03:78:7e:2c:b7:72:45:52:91:57:59:b4:9c:8e:c1:
                    c4:fe:72:af:21:26:80:ac:08:c4:66:b4:d7:5e:02:
                    d0:af:f1:29:9f:14:dd:5f:66:89:27:8e:00:bc:ff:
                    9a:8f:70:93:b6:4d:5e:e3:ee:53:cb:52:ab:74:86:
                    da:4c:86:4e:0b:4d:2c:4b:55:92:fc:58:2f:69:01:
                    4b:05:94:66:d3:5d:5e:45:15:e0:9f:7a:69:aa:d0:
                    f9:b0:a7:6b:78:92:6d:f1:0f:00:1f:d5:de:54:34:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:6B:39:02:BD:A2:CB:74:68:B7:80:69:76:1D:D3:21:64:D8:A4
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7-9rOQK9ost0aLeAaXYd0yFk2KQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:bf:69:7d:46:27:f1:1b:74:7b:12:87:bb:f5:b4:3f:19:
         a9:f9:79:6f:ce:a6:23:bf:2e:27:2f:8c:5d:29:88:5f:bc:bb:
         f8:85:d4:6c:d0:31:5f:70:7f:bd:3e:23:e1:ea:86:bd:e8:86:
         b9:cf:76:d9:3e:a8:6b:fa:96:0d:b2:3d:d4:ed:f2:55:b3:e4:
         f2:95:ff:6b:94:60:cf:73:15:b1:2d:0a:b9:6a:61:63:aa:4a:
         7f:1c:63:f2:b8:89:3a:9d:36:c4:00:f3:8d:02:97:57:3c:74:
         96:c4:53:eb:46:3b:ac:34:3d:84:15:40:4d:28:02:89:72:45:
         69:2f:e6:33:3e:1c:a8:52:68:53:8e:8c:47:f5:95:6b:c1:8d:
         fd:8d:58:27:2f:d3:67:59:a7:4e:00:ab:3b:98:ca:a3:60:a0:
         17:06:2a:cf:31:ac:a1:c0:a2:46:ec:e5:b4:fd:23:ca:22:0a:
         fa:b0:78:06:5e:bd:91:3c:e4:20:2b:6a:63:45:dd:b6:d1:ea:
         e7:40:14:bd:3d:c9:21:15:9f:13:e4:c7:96:bc:e7:62:f8:6b:
         04:bd:fa:c2:e4:f6:e7:c1:92:a2:a7:8f:46:3a:f8:c5:ce:34:
         f4:36:01:76:a4:64:9b:fe:80:40:a3:7b:33:02:36:e2:77:e7:
         53:5b:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:46 2024 by rpki-client on console-fra.rpki-client.org