Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa
File:                     Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa (raw, json)
Hash identifier:          OW1a9fJXbnd5dRA6aPAoX3XECFuiihiMUNsm3zVdQQ0=
Subject key identifier:   12:68:FF:05:0F:B5:B6:DF:9B:51:86:8C:42:BC:BD:88:67:82:D1:D8
Certificate issuer:       /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Certificate serial:       03
Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa
Signing time:             Mon 18 Nov 2024 06:22:58 +0000
ROA not before:           Mon 18 Nov 2024 06:22:58 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     45681
IP address blocks:        160.191.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
        Validity
            Not Before: Nov 18 06:22:58 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=1268FF050FB5B6DF9B51868C42BCBD886782D1D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:a8:59:62:10:60:8e:b1:fe:77:25:1f:15:
                    d3:1c:b3:7a:60:81:10:e0:73:10:f5:37:d9:f3:0a:
                    7d:27:28:ba:88:e6:9f:bb:26:ac:ec:a4:0f:c9:04:
                    4e:b5:76:89:59:fb:a1:da:d1:65:e0:a7:bc:cb:16:
                    75:81:98:dd:e0:14:ce:4a:c3:ce:d7:a4:02:a6:92:
                    36:5e:b3:a7:c9:36:dc:f7:00:03:36:60:fc:ad:49:
                    05:45:7c:da:63:0d:eb:f8:80:bb:e1:f1:f6:b8:3f:
                    a1:fe:a5:ad:fa:23:9a:fe:62:d3:33:65:16:92:70:
                    51:b2:cf:c2:63:1b:13:81:49:ae:b7:25:ac:c8:59:
                    f6:0b:68:80:98:86:0b:85:11:4e:3e:63:65:ec:56:
                    21:6d:b1:c3:c5:d7:c7:c1:35:d2:7c:45:af:52:c9:
                    1a:1a:d6:99:be:5c:60:98:3f:fc:c8:53:94:09:bf:
                    48:4a:8b:43:89:b0:93:29:0f:b2:db:ef:8d:4d:19:
                    13:fc:0c:6d:ff:37:3a:20:f1:96:f5:1f:99:13:95:
                    ac:fb:fc:1c:74:51:cb:2b:ed:82:9f:74:a5:55:61:
                    76:8b:b0:91:ad:93:85:a5:04:c8:a0:47:07:1d:67:
                    e7:fa:c0:84:ec:1d:31:b8:b2:6c:c3:79:ae:8b:9d:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:FF:05:0F:B5:B6:DF:9B:51:86:8C:42:BC:BD:88:67:82:D1:D8
            X509v3 Authority Key Identifier:
                keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:97:af:1a:9e:e8:5d:b1:5b:c1:f8:c0:42:0b:4e:b4:77:
         a3:fb:40:b7:30:61:9d:85:2f:a3:21:c8:bb:aa:e2:b3:f5:20:
         20:de:a4:39:c7:81:12:2e:c5:37:2c:58:99:4b:3d:52:80:a8:
         4d:3b:16:75:a3:02:ea:0b:c6:df:c4:d8:56:67:3e:7d:af:9c:
         3a:7d:a4:f0:df:3b:13:31:04:6d:d8:bc:41:3e:fa:90:3a:1d:
         6a:2f:f5:9b:a5:d4:ac:71:40:af:1c:a3:b6:40:7a:85:fc:b4:
         ad:b6:e7:57:53:27:49:4a:a0:18:0f:f5:e5:1f:33:22:3a:84:
         86:4f:08:2c:8b:e8:45:7c:9b:8d:9d:a9:29:b2:15:7f:1a:00:
         dc:69:f8:88:03:12:62:e1:6f:c6:33:46:b2:94:a3:81:97:1f:
         4f:7f:a1:3a:0b:f6:18:6d:fe:5d:14:5b:5f:c1:b6:66:25:c8:
         05:bf:ec:ab:a7:d1:79:f5:6f:f4:e4:88:bd:7a:6e:b9:97:65:
         70:89:b5:fa:0b:e1:9b:02:8b:71:5f:3e:f4:4d:50:a9:94:f7:
         fd:0e:80:df:60:c3:fe:99:71:c7:26:23:5b:7c:20:03:f5:21:
         c6:27:34:2a:2d:83:23:eb:69:99:9e:df:3e:67:50:3f:7a:32:
         dc:e8:a2:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:33 2025 by rpki-client