Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/RAshu6cbRvHpZw55i7guatIw1WA.roa
File:                     RAshu6cbRvHpZw55i7guatIw1WA.roa (raw, json)
Hash identifier:          NUi/VS9r9WdsCeB/7gT/QB9FwgglNhjojTj8K+WSMg0=
Subject key identifier:   44:0B:21:BB:A7:1B:46:F1:E9:67:0E:79:8B:B8:2E:6A:D2:30:D5:60
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       46
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RAshu6cbRvHpZw55i7guatIw1WA.roa
Signing time:             Thu 25 Jan 2024 01:10:38 +0000
ROA not before:           Thu 25 Jan 2024 01:10:38 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        161.34.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 25 01:10:38 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=440B21BBA71B46F1E9670E798BB82E6AD230D560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:20:d8:41:bd:c6:ec:9a:1c:2c:64:5b:31:
                    18:3d:c1:5f:97:7b:08:02:19:c5:a7:db:3a:9a:3d:
                    e7:bb:44:77:c7:c9:7d:da:b5:54:cd:d4:c1:2e:30:
                    74:2d:08:15:02:48:fe:2d:91:e6:23:9e:96:f3:bd:
                    62:65:23:3a:45:c7:85:1a:a1:8d:51:ba:3c:1f:44:
                    63:1d:b7:39:06:9a:86:69:96:78:a0:83:8a:e6:a0:
                    da:10:a9:f8:e5:e0:c3:f0:31:a5:11:45:9c:bc:5b:
                    f8:94:b9:fc:8b:2f:ad:cc:06:82:14:a2:20:c5:bb:
                    d9:cd:51:6c:66:a7:70:f6:ca:f9:05:56:a0:39:4b:
                    3e:8a:a8:fc:50:a7:a8:e7:8b:c1:85:59:57:41:f4:
                    cc:15:f9:0c:37:6b:ae:70:6e:89:da:6d:43:ab:f4:
                    86:63:e2:9c:21:aa:f3:61:ae:13:7a:e5:62:9f:90:
                    7c:1c:b7:62:6c:b1:72:d5:d8:aa:1a:81:b9:9a:be:
                    a1:2a:ac:64:38:61:6d:8e:09:44:43:2a:98:99:92:
                    a3:92:6e:6e:0a:71:28:e6:88:92:a1:9e:74:8d:2a:
                    4e:bd:10:00:07:23:7e:63:a7:2a:87:92:89:43:b8:
                    88:9e:8a:ea:d3:2e:0e:8c:18:03:8e:40:cd:bb:5c:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0B:21:BB:A7:1B:46:F1:E9:67:0E:79:8B:B8:2E:6A:D2:30:D5:60
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/RAshu6cbRvHpZw55i7guatIw1WA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.34.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:1a:30:58:64:09:7e:df:66:88:c1:01:82:60:b3:4f:31:
         fc:12:e9:05:48:2d:af:48:91:a3:7f:65:20:5e:23:54:c5:e3:
         c7:15:d6:03:ad:ea:64:76:1f:9d:0d:89:3a:b2:1b:43:0c:9c:
         4a:93:e7:f4:83:99:e2:75:49:de:55:71:7f:b0:4d:7c:70:e4:
         8e:18:9d:54:c4:40:70:9b:e7:fb:82:fb:c9:ed:cf:f1:18:f0:
         54:72:38:f0:61:22:e2:45:20:0e:63:d1:f7:d8:53:13:89:10:
         6f:37:d2:95:9a:cb:c6:d3:54:e9:c0:1d:40:ac:be:0e:ec:57:
         35:b0:e4:77:c5:f1:0a:26:d7:c6:3c:45:0f:38:9d:0e:93:6f:
         8c:48:e7:46:12:e0:89:09:c5:4c:a3:71:55:f7:3a:1f:de:78:
         21:b8:df:72:c1:22:ab:21:74:42:fe:a5:71:ac:9c:46:64:0b:
         3f:1a:35:26:46:17:14:a3:42:39:32:40:f2:9e:e9:20:fd:dc:
         9e:bd:11:fa:1e:e5:3d:36:da:73:37:a2:46:92:20:64:ef:c5:
         09:2a:06:34:82:c8:64:fd:19:7a:70:25:69:10:4a:0e:ae:c3:
         1d:45:22:00:14:b5:95:af:d8:d9:77:5c:5d:c6:ff:08:3d:46:
         32:6a:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org