Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Rm_ehzGT-bKpG5g1041I_muYRXk.roa
File:                     Rm_ehzGT-bKpG5g1041I_muYRXk.roa (raw, json)
Hash identifier:          QLMyuWVBdpDQ8wI5kU3l7REZzvQmXUNPPz9N3diNk9A=
Subject key identifier:   46:6F:DE:87:31:93:F9:B2:A9:1B:98:35:D3:8D:48:FE:6B:98:45:79
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       26
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Rm_ehzGT-bKpG5g1041I_muYRXk.roa
Signing time:             Wed 10 Jan 2024 01:11:08 +0000
ROA not before:           Wed 10 Jan 2024 01:11:08 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:11:08 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=466FDE873193F9B2A91B9835D38D48FE6B984579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ad:44:34:44:95:39:66:63:d5:70:38:bb:be:
                    70:3b:28:0b:a5:f8:b5:56:39:87:ba:97:27:38:b0:
                    54:6b:b1:e3:6a:6b:49:48:15:1c:10:f1:73:5e:a8:
                    ec:7c:01:f3:79:22:08:32:96:01:65:8c:3c:3e:cd:
                    57:d1:43:84:20:16:c0:9d:cd:3d:b7:0a:53:17:6f:
                    40:57:1c:c9:7f:8e:69:36:d3:54:06:47:bd:5a:d0:
                    cf:49:c5:85:b9:c0:71:41:0a:01:92:dd:9b:9e:30:
                    e6:7c:04:4d:1d:d3:74:6b:5d:c3:c8:ff:19:19:45:
                    48:5a:75:85:2f:b5:49:18:bd:31:1f:b3:cf:95:0e:
                    fc:d7:a5:0d:32:cf:b5:b8:fa:d8:19:27:42:c2:53:
                    58:4e:25:21:0c:59:8c:a0:ec:ce:21:a3:b0:e3:15:
                    4f:8d:98:47:71:1b:f7:66:a6:57:7a:cf:33:a0:92:
                    0c:d1:32:a0:94:ab:fa:64:64:7b:c6:54:2a:ef:cb:
                    59:9d:18:96:83:70:dc:84:53:28:89:70:90:c1:5a:
                    c7:bf:fd:2f:21:5b:51:3c:96:d6:27:ba:34:cb:b0:
                    cd:3e:e0:8e:04:f9:bc:ec:23:3f:38:81:a6:b1:c2:
                    0e:31:37:df:66:5c:60:c2:cf:43:85:cf:67:97:cd:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:DE:87:31:93:F9:B2:A9:1B:98:35:D3:8D:48:FE:6B:98:45:79
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Rm_ehzGT-bKpG5g1041I_muYRXk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:8f:25:c1:7c:ae:64:14:28:63:bc:9a:c6:15:50:56:5e:
         07:a5:36:c4:e7:58:c0:9d:3a:b6:aa:80:df:af:22:9f:95:3e:
         1a:cd:99:40:00:56:3a:97:5f:51:94:c5:1f:ab:7b:17:1e:1c:
         a6:d4:b3:11:4c:b8:e4:6e:e7:72:f1:5c:56:6c:13:8d:5b:23:
         fe:84:7c:44:0b:28:58:85:3d:0d:62:ba:a1:74:e8:4c:c7:8b:
         93:3a:15:8b:be:57:09:de:34:00:6f:d8:27:4a:24:b4:20:96:
         b4:a6:0a:ca:6c:7d:89:1a:2e:58:05:ef:ee:0b:70:0c:ef:e1:
         78:44:d3:b3:08:74:53:52:34:46:46:23:34:ae:27:09:d7:19:
         97:08:3c:6c:70:cc:08:5e:93:3f:07:6b:4c:a6:29:15:8c:c9:
         e8:85:e9:25:2b:1a:d2:a3:15:77:c0:a9:75:32:1e:7a:b0:94:
         e1:18:df:80:c2:a5:1b:b9:22:c2:91:a9:4d:0d:22:55:d3:31:
         9e:e4:d8:8e:49:0f:d8:db:3e:6f:c4:3e:e0:f0:71:f7:90:d7:
         8a:6a:d7:1f:3f:c6:c2:63:59:1e:a5:26:36:6e:5f:c1:6e:52:
         2e:b3:a5:77:69:26:c8:f5:a9:99:f3:a4:d1:99:49:8f:1a:4a:
         c0:bd:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org