Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/A8Gc8DkYglOyD2UC0t5cgoZQPLM.roa
File:                     A8Gc8DkYglOyD2UC0t5cgoZQPLM.roa (raw, json)
Hash identifier:          UYAzfLegm2Mmh1vOFSuJ+eO7fJI3ga6dSjZsC/pZ0Zg=
Subject key identifier:   03:C1:9C:F0:39:18:82:53:B2:0F:65:02:D2:DE:5C:82:86:50:3C:B3
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       39
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/A8Gc8DkYglOyD2UC0t5cgoZQPLM.roa
Signing time:             Thu 25 Jan 2024 01:02:28 +0000
ROA not before:           Thu 25 Jan 2024 01:02:28 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 25 01:02:28 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=03C19CF039188253B20F6502D2DE5C8286503CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:d7:38:63:66:64:d8:38:86:f9:dc:d8:c3:
                    01:27:37:26:8b:2d:ee:08:0d:2d:80:fe:8c:1a:59:
                    97:18:57:3f:a1:49:a2:a1:e3:04:b1:81:91:3c:05:
                    3d:19:eb:d4:3c:e4:18:a4:d1:b3:66:09:75:da:03:
                    78:5c:a0:e9:8a:5d:25:83:b6:81:bd:61:b1:84:71:
                    8b:62:4b:b3:96:64:2a:08:fd:ea:87:96:69:21:61:
                    c9:d9:0a:34:93:69:6d:a7:2b:46:8b:d5:a7:f7:75:
                    68:20:0a:88:fb:63:71:58:54:1c:44:fc:b4:31:80:
                    e2:6a:8c:73:d6:71:3b:9c:a2:9f:ea:fd:e0:36:e2:
                    f1:24:52:b0:93:4e:04:95:de:2c:5f:34:fe:53:05:
                    e0:65:26:46:5b:8b:5e:b8:30:24:5b:89:ab:0e:9d:
                    2c:01:b1:01:34:db:a8:ad:ed:c4:cf:70:28:c1:b8:
                    aa:9a:32:32:f5:63:f8:19:23:00:9c:3c:6b:2e:af:
                    41:a5:93:47:55:93:fa:b9:cf:72:9e:10:f2:df:6c:
                    58:a3:40:9e:2b:8b:22:11:93:98:6c:38:85:1d:c5:
                    7c:16:02:c1:f9:cb:37:44:f3:8a:ad:71:4d:09:11:
                    92:49:76:0e:90:16:5c:07:bd:ca:01:fa:11:55:0b:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:9C:F0:39:18:82:53:B2:0F:65:02:D2:DE:5C:82:86:50:3C:B3
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/A8Gc8DkYglOyD2UC0t5cgoZQPLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:8f:cb:40:31:eb:7b:cd:3d:6a:45:29:3f:cf:c5:87:5c:
         97:4e:3f:94:ca:00:fc:99:ef:fe:9f:77:66:dd:05:4b:f9:88:
         a0:e3:1f:80:6b:d1:fb:e6:84:30:f8:22:82:10:40:82:49:ff:
         1f:53:12:c1:df:ef:c9:06:04:f1:9d:c0:52:20:cf:dc:43:b4:
         8f:2e:b0:81:ef:7a:ec:80:d3:0d:00:ea:64:98:c7:32:b5:67:
         e8:17:33:f0:dd:22:e7:cd:2d:69:ae:cf:14:18:1f:b6:d0:38:
         92:39:41:27:5b:fd:6e:37:46:e2:ee:42:85:c9:02:75:93:bb:
         25:94:52:0e:60:f9:86:ef:67:04:6f:b2:b4:ba:69:91:80:b8:
         30:c2:c3:c6:4d:ee:a1:6a:0e:74:dc:73:4c:f9:5b:bd:72:09:
         b8:85:0e:49:84:1b:83:a7:2b:61:48:0d:87:ea:a3:91:a4:73:
         a5:27:85:a0:07:ee:80:bc:7a:a8:3d:52:48:5f:bf:e7:57:0c:
         d7:03:48:ed:08:96:27:87:f1:b6:57:01:34:34:25:5e:0f:83:
         45:ac:b7:32:75:13:9d:67:e7:64:92:5f:41:e6:d2:c9:d2:2d:
         8c:de:7f:e1:c0:8e:f5:8b:1d:f3:00:87:72:ac:4e:a9:27:90:
         a8:c0:b8:00
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDEyNTAx
MDIyOFoXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoMDNDMTlDRjAzOTE4ODI1
M0IyMEY2NTAyRDJERTVDODI4NjUwM0NCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKtN1zhjZmTYOIb53NjDASc3Jost7ggNLYD+jBpZlxhXP6FJoqHj
BLGBkTwFPRnr1DzkGKTRs2YJddoDeFyg6YpdJYO2gb1hsYRxi2JLs5ZkKgj96oeW
aSFhydkKNJNpbacrRovVp/d1aCAKiPtjcVhUHET8tDGA4mqMc9ZxO5yin+r94Dbi
8SRSsJNOBJXeLF80/lMF4GUmRluLXrgwJFuJqw6dLAGxATTbqK3txM9wKMG4qpoy
MvVj+BkjAJw8ay6vQaWTR1WT+rnPcp4Q8t9sWKNAniuLIhGTmGw4hR3FfBYCwfnL
N0Tziq1xTQkRkkl2DpAWXAe9ygH6EVULxEcCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQDwZzwORiCU7IPZQLS3lyChlA8szAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L0E4R2M4RGtZZ2xPeUQyVUMwdDVjZ29aUVBMTS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAOg+MAwDQYJKoZIhvcNAQELBQADggEBAJwMj8tAMet7zT1qRSk/z8WHXJdOP5TK
APyZ7/6fd2bdBUv5iKDjH4Br0fvmhDD4IoIQQIJJ/x9TEsHf78kGBPGdwFIgz9xD
tI8usIHveuyA0w0A6mSYxzK1Z+gXM/DdIufNLWmuzxQYH7bQOJI5QSdb/W43RuLu
QoXJAnWTuyWUUg5g+YbvZwRvsrS6aZGAuDDCw8ZN7qFqDnTcc0z5W71yCbiFDkmE
G4OnK2FIDYfqo5Gkc6UnhaAH7oC8eqg9Ukhfv+dXDNcDSO0IlieH8bZXATQ0JV4P
g0WstzJ1E51n52SSX0Hm0snSLYzef+HAjvWLHfMAh3KsTqknkKjAuAA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org