Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ej-7LG6f5Sh5xRHjHg6ebx2AVTI.roa
File:                     Ej-7LG6f5Sh5xRHjHg6ebx2AVTI.roa (raw, json)
Hash identifier:          oenv94r5QNZkNRzsQXfsacqK6iE9nqWCSBVLuhp83gw=
Subject key identifier:   12:3F:BB:2C:6E:9F:E5:28:79:C5:11:E3:1E:0E:9E:6F:1D:80:55:32
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       25
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ej-7LG6f5Sh5xRHjHg6ebx2AVTI.roa
Signing time:             Wed 10 Jan 2024 01:07:02 +0000
ROA not before:           Wed 10 Jan 2024 01:07:02 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:07:02 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=123FBB2C6E9FE52879C511E31E0E9E6F1D805532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7a:6e:80:80:a6:f3:dc:b7:59:05:82:28:94:
                    27:37:12:ce:fb:b4:ea:2a:44:30:87:60:36:c2:1e:
                    89:16:df:22:65:e0:4d:6b:9a:32:7c:88:83:be:07:
                    d1:29:e4:41:b7:e7:bb:2b:22:b0:47:61:ab:e5:87:
                    f9:0f:3d:0c:bc:db:46:db:c8:dc:18:81:48:89:30:
                    dc:be:33:7e:25:da:c8:47:58:dd:80:a1:7e:0a:7f:
                    f8:89:ae:56:d0:05:a0:47:12:2c:a2:0c:12:eb:fa:
                    53:d4:f0:25:01:9a:a6:bc:28:a0:fd:14:ef:f6:b3:
                    df:98:dc:37:19:9a:9f:a3:24:a4:ac:76:7d:b9:d7:
                    d3:6b:05:26:64:d2:1e:24:c1:6f:8f:1f:53:b4:31:
                    3c:38:2c:49:cc:a9:05:66:eb:f0:37:d4:7a:d5:d7:
                    0a:58:31:1a:b8:d4:6c:80:35:cc:c0:db:47:59:be:
                    f3:2d:39:55:14:62:dc:d8:10:d4:1c:d5:b4:b3:67:
                    ca:11:25:05:f8:86:cf:c9:7d:bf:fe:17:de:95:2e:
                    27:bd:1f:ae:b5:c3:8b:2d:26:bc:33:61:4a:e7:75:
                    cc:75:c2:72:20:2d:d7:c5:64:d1:bb:f6:a7:b1:c6:
                    cb:23:dd:e9:fc:34:97:54:4b:c1:17:d9:09:34:01:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:BB:2C:6E:9F:E5:28:79:C5:11:E3:1E:0E:9E:6F:1D:80:55:32
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ej-7LG6f5Sh5xRHjHg6ebx2AVTI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:e4:48:6c:81:5b:23:61:ea:21:c9:24:13:9a:39:12:a5:
         6e:c4:fa:8c:16:15:e4:35:a4:af:ae:dd:7e:a0:72:7f:13:89:
         16:24:0a:0b:eb:c9:01:67:04:13:d5:a0:97:05:0c:22:15:58:
         94:7a:59:1f:e8:e1:15:79:12:87:ad:aa:87:98:04:ad:14:90:
         f0:fa:56:10:a5:59:8b:dc:9d:06:83:c6:c3:37:76:c6:c3:14:
         20:82:6c:ab:06:92:9e:de:73:7a:e7:04:f9:40:de:c8:97:6e:
         50:cd:7a:ed:e9:68:db:e8:f7:93:44:c2:96:37:fc:76:2d:81:
         9b:7b:4b:ab:3d:d1:b8:89:73:be:f0:85:d0:91:fc:5f:93:e3:
         28:41:89:66:31:1f:ed:c3:08:32:4e:e5:77:37:14:01:38:f7:
         fa:3c:ae:30:cc:87:17:6e:82:1d:2f:ca:d3:f5:b4:d2:fd:ac:
         8c:11:27:96:48:d9:60:ba:b3:26:fc:df:03:02:b4:59:3e:9e:
         da:85:48:35:ca:ef:24:32:b2:65:3c:d8:8e:0c:de:f8:35:3c:
         b3:27:e2:07:66:ba:f5:1a:20:29:be:f3:1d:a4:db:46:4d:a5:
         c2:38:8c:26:18:b8:21:76:d5:24:b6:54:d5:4f:86:d2:29:53:
         6f:39:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org