Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/15G8-hamV5PC5_EVM2Fcg1XuBc4.roa
File:                     15G8-hamV5PC5_EVM2Fcg1XuBc4.roa (raw, json)
Hash identifier:          D/mJ7RYyCdsWPF0wEqxKGsPcZdas5VvkcgaYQ0cgeys=
Subject key identifier:   D7:91:BC:FA:16:A6:57:93:C2:E7:F1:15:33:61:5C:83:55:EE:05:CE
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       36
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/15G8-hamV5PC5_EVM2Fcg1XuBc4.roa
Signing time:             Wed 10 Jan 2024 01:18:56 +0000
ROA not before:           Wed 10 Jan 2024 01:18:56 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:18:56 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=D791BCFA16A65793C2E7F11533615C8355EE05CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:44:ce:11:a3:65:e1:42:0f:b1:bc:f1:1d:
                    99:a7:4d:33:d3:ef:22:b9:3a:53:ff:ae:85:69:01:
                    5d:fa:d8:b7:5e:39:84:f2:f7:ed:9e:46:2d:b7:ef:
                    ac:e1:e9:ac:d4:da:9f:76:64:79:47:cd:be:3d:c7:
                    68:67:07:e8:04:60:80:27:11:8a:9b:6e:2c:aa:76:
                    ec:2d:03:13:4d:0d:06:80:a5:8a:32:ff:45:7b:fe:
                    d6:ee:a3:a5:62:b9:55:9d:31:b2:3d:3c:d3:0f:eb:
                    a0:88:eb:04:33:e5:e6:8d:85:53:eb:4f:bc:9f:b9:
                    84:12:fe:d1:b9:54:4d:de:e9:23:39:fc:33:6d:c5:
                    14:fd:60:08:f2:73:e6:dd:93:ea:f8:91:d6:c3:78:
                    e0:a0:5b:e5:ae:40:8e:cb:eb:85:cd:70:c5:e3:64:
                    33:49:8e:10:0e:a3:65:a1:2f:d8:00:df:ab:6d:fe:
                    8a:35:37:86:07:e3:ed:d3:a9:3c:66:64:eb:1f:8d:
                    9f:ba:42:16:31:d5:79:82:8b:bf:d4:90:a7:1f:16:
                    ef:9d:e0:b6:8d:a7:a7:f5:e0:d6:8d:09:84:c1:6e:
                    3f:fb:74:c4:92:61:91:01:55:38:70:28:13:14:ac:
                    b3:56:7e:dd:10:ad:a9:23:8a:0b:06:34:42:4f:32:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:91:BC:FA:16:A6:57:93:C2:E7:F1:15:33:61:5C:83:55:EE:05:CE
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/15G8-hamV5PC5_EVM2Fcg1XuBc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:4c:f6:e4:dd:f6:55:31:68:f5:85:29:d6:5d:1c:54:a2:
         04:78:ba:3a:f9:35:c9:8e:de:ec:1e:e0:16:13:b0:5b:34:a8:
         a3:b8:d5:97:60:ce:d2:52:81:d8:1f:c9:ea:ae:c5:81:a6:e2:
         e3:44:80:d5:ca:e4:ec:f8:74:c0:5e:ef:af:04:73:3a:d0:39:
         75:fc:de:86:dc:a2:3f:3f:23:a0:d8:88:53:ed:d2:9d:d4:6c:
         49:b1:b2:88:a7:22:03:cf:45:f3:09:92:02:8f:af:af:a7:05:
         e7:e2:8f:1f:fc:a3:81:30:50:04:f4:a5:85:a1:57:07:32:35:
         6f:80:f6:e1:ca:d5:a5:42:23:88:0a:f7:79:8a:11:c5:d3:d4:
         f7:fb:69:26:66:f1:82:3d:db:e3:14:0c:5f:3f:ff:76:0e:72:
         3c:7b:80:da:b6:dd:a2:8f:80:1f:ca:96:ec:79:43:28:a8:f3:
         b5:fb:cd:a4:79:c2:dc:6e:e2:49:d4:6a:c7:31:1f:6d:10:37:
         eb:36:78:8e:38:fb:d0:d8:74:59:86:5e:2e:cb:9c:5b:eb:62:
         c8:89:50:8c:c9:16:0e:e3:b3:67:49:1c:c0:f8:c3:69:33:d9:
         bc:d3:77:9c:2b:2e:41:16:60:3e:76:29:4c:5d:93:ed:5f:95:
         ae:26:5d:ee
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx
MTg1NloXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoRDc5MUJDRkExNkE2NTc5
M0MyRTdGMTE1MzM2MTVDODM1NUVFMDVDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK4IRM4Ro2XhQg+xvPEdmadNM9PvIrk6U/+uhWkBXfrYt145hPL3
7Z5GLbfvrOHprNTan3ZkeUfNvj3HaGcH6ARggCcRiptuLKp27C0DE00NBoClijL/
RXv+1u6jpWK5VZ0xsj080w/roIjrBDPl5o2FU+tPvJ+5hBL+0blUTd7pIzn8M23F
FP1gCPJz5t2T6viR1sN44KBb5a5Ajsvrhc1wxeNkM0mOEA6jZaEv2ADfq23+ijU3
hgfj7dOpPGZk6x+Nn7pCFjHVeYKLv9SQpx8W753gto2np/Xg1o0JhMFuP/t0xJJh
kQFVOHAoExSss1Z+3RCtqSOKCwY0Qk8yoFUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBTXkbz6FqZXk8Ln8RUzYVyDVe4FzjAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5LzE1RzgtaGFtVjVQQzVfRVZNMkZjZzFYdUJjNC5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BASg+KAwDQYJKoZIhvcNAQELBQADggEBAA1JTPbk3fZVMWj1hSnWXRxUogR4ujr5
NcmO3uwe4BYTsFs0qKO41ZdgztJSgdgfyequxYGm4uNEgNXK5Oz4dMBe768EczrQ
OXX83obcoj8/I6DYiFPt0p3UbEmxsoinIgPPRfMJkgKPr6+nBefijx/8o4EwUAT0
pYWhVwcyNW+A9uHK1aVCI4gK93mKEcXT1Pf7aSZm8YI92+MUDF8//3YOcjx7gNq2
3aKPgB/Klux5Qyio87X7zaR5wtxu4knUascxH20QN+s2eI44+9DYdFmGXi7LnFvr
YsiJUIzJFg7js2dJHMD4w2kz2bzTd5wrLkEWYD52KUxdk+1fla4mXe4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org