Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/EAB_Gm5qmd6nQS0AIuC4Q1gTuNw.roa
File:                     EAB_Gm5qmd6nQS0AIuC4Q1gTuNw.roa (raw, json)
Hash identifier:          WECxDHEnMot6jBlO5wJbGAyYT4RgUuQcfoNasLFml1I=
Subject key identifier:   10:00:7F:1A:6E:6A:99:DE:A7:41:2D:00:22:E0:B8:43:58:13:B8:DC
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       7F
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/EAB_Gm5qmd6nQS0AIuC4Q1gTuNw.roa
Signing time:             Sat 30 Nov 2024 01:32:13 +0000
ROA not before:           Sat 30 Nov 2024 01:32:13 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov 30 01:32:13 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=10007F1A6E6A99DEA7412D0022E0B8435813B8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:76:14:84:27:44:a6:16:6b:da:62:c1:9f:
                    9b:f3:7b:4c:8c:a3:10:88:71:d3:92:94:05:2a:8e:
                    cd:fb:ca:0e:66:eb:e0:a6:09:8d:13:e7:75:44:00:
                    af:9f:97:cd:ff:17:a6:b2:cd:e3:a2:1b:46:de:b7:
                    dd:1a:6b:da:46:25:a5:52:da:6c:22:0f:47:7f:5f:
                    19:a6:f5:0a:9c:e0:2a:15:ff:30:01:48:74:5f:8d:
                    15:ab:e9:53:fd:10:e0:be:8f:89:9f:09:61:34:6a:
                    e3:2b:e2:50:e0:e2:2f:bd:14:f2:7d:06:b7:9d:df:
                    0f:45:95:d8:89:d7:4c:c7:05:95:61:b8:94:90:c7:
                    8f:f5:80:b1:e3:43:20:67:49:bf:f5:d9:90:d4:94:
                    52:0c:b6:8c:32:70:01:63:e0:11:84:f7:92:a7:7f:
                    ce:b9:10:3a:4c:b9:ca:76:6e:c3:97:9f:a0:01:45:
                    eb:4d:04:ab:89:ec:fb:95:af:1f:99:a9:7d:8e:10:
                    18:f9:09:53:55:e9:c7:d8:50:9e:0a:74:03:da:1b:
                    fb:ed:58:13:85:61:eb:7e:f9:6d:24:64:e3:db:b8:
                    0a:f6:b8:15:42:d0:ec:17:d6:08:36:4b:80:0b:0f:
                    dd:78:c5:fb:20:2f:e0:f0:30:0e:3b:9e:85:f0:84:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:7F:1A:6E:6A:99:DE:A7:41:2D:00:22:E0:B8:43:58:13:B8:DC
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/EAB_Gm5qmd6nQS0AIuC4Q1gTuNw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:46:97:9e:95:34:40:b0:78:d1:b9:c0:f3:df:22:3b:9d:cd:
         53:d9:12:d2:0a:f5:09:36:54:7d:da:5d:79:a6:54:6f:ba:27:
         11:4b:e9:f6:14:2c:7f:12:ec:8b:94:46:05:f3:c8:a1:0a:51:
         99:ca:99:f7:07:f1:67:e8:11:74:ed:e6:b8:cd:e2:8e:34:bb:
         62:fb:59:77:1a:73:ce:f5:fe:e8:be:56:a8:d4:a4:13:31:15:
         9e:67:33:bc:17:70:03:3d:c4:87:3a:31:c6:9a:e4:e6:14:b7:
         d8:de:b1:e6:98:08:bd:b9:cd:a9:c6:d2:b7:4c:6e:32:42:d8:
         fa:f7:2f:08:47:00:78:b1:ba:86:61:09:ed:6d:e4:d2:b3:b5:
         ed:80:84:33:d9:65:aa:d4:a0:cc:24:b0:bd:c3:bb:66:c5:f4:
         8a:12:0d:02:09:9b:2e:ab:3d:b3:a2:15:9d:ce:6c:2f:6c:b4:
         8e:a8:0d:e0:7a:0e:61:ae:bf:d5:ed:d7:ad:e4:94:ad:a3:29:
         70:05:c4:46:a8:38:41:40:e3:89:52:3a:85:45:4f:3f:64:8f:
         78:fc:f5:27:98:bf:9e:d0:25:12:c7:be:75:45:c5:9e:61:1b:
         ab:7e:54:85:96:6c:41:28:d1:e9:66:a4:22:ac:61:9f:c0:10:
         18:f6:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:36 2025 by rpki-client