Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/SJWdDaXO1jXHrsxjgGsHrWI1fvs.roa
File:                     SJWdDaXO1jXHrsxjgGsHrWI1fvs.roa (raw, json)
Hash identifier:          dV/hsaBw5nR5aYOrPug4DUF236mEkrrh6jTqiEIUYto=
Subject key identifier:   48:95:9D:0D:A5:CE:D6:35:C7:AE:CC:63:80:6B:07:AD:62:35:7E:FB
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       2E
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/SJWdDaXO1jXHrsxjgGsHrWI1fvs.roa
Signing time:             Wed 10 Jan 2024 01:15:01 +0000
ROA not before:           Wed 10 Jan 2024 01:15:01 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:15:01 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=48959D0DA5CED635C7AECC63806B07AD62357EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:47:83:4a:c7:1c:97:24:97:73:c5:a6:b2:
                    eb:59:e0:69:15:4b:5e:3a:c7:d9:c5:2b:6c:00:f8:
                    9d:fc:85:67:96:43:4f:f0:32:96:3c:0b:4e:b2:46:
                    0b:88:6d:25:29:86:ac:4d:d6:20:d9:19:62:01:69:
                    ce:be:77:f5:11:59:e3:ee:e9:6b:64:20:7a:5f:5a:
                    20:e3:77:cc:b4:97:93:b7:15:eb:1a:07:a3:de:ef:
                    16:89:67:f5:c9:cf:e1:0d:84:37:20:1b:cd:07:e0:
                    e3:08:2a:9f:41:b7:d2:51:da:6b:57:c8:e3:6d:e4:
                    ab:cd:a8:eb:72:75:fd:ff:a7:8f:bc:aa:4c:6d:2a:
                    d3:5d:66:a6:19:71:54:f7:2d:7e:df:d9:0d:95:b2:
                    a4:c1:e3:df:29:5b:d6:c8:c2:ca:2a:a2:3d:42:49:
                    7e:14:0a:d2:25:8a:7e:f3:2c:f6:08:9d:c3:dd:4f:
                    62:c5:16:10:a7:0a:dc:0d:c9:e1:d7:1b:74:3c:82:
                    9d:69:83:96:42:68:45:a6:df:e2:78:cc:00:80:ab:
                    bd:86:fa:c2:09:48:2b:fb:eb:73:27:7d:4a:36:3d:
                    f9:6c:7c:3a:3f:9d:90:a2:bf:21:1a:ce:56:e1:bc:
                    67:05:b0:4a:58:6d:3b:05:89:c4:e4:74:79:cb:d8:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:9D:0D:A5:CE:D6:35:C7:AE:CC:63:80:6B:07:AD:62:35:7E:FB
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/SJWdDaXO1jXHrsxjgGsHrWI1fvs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:25:f7:45:af:43:be:b6:61:8c:09:00:e6:56:8c:b8:78:7e:
         ce:9c:74:33:dd:a0:4d:22:e2:b2:92:94:e3:b6:53:c9:73:1b:
         b0:bc:07:06:41:a4:91:05:d4:2f:74:36:d7:1f:d8:62:77:66:
         f5:dc:4f:b5:7f:1b:ef:fa:7e:1a:d9:cd:9d:80:d7:9d:b8:4a:
         fb:a8:ab:14:77:9d:3b:8f:13:71:2d:bf:ee:9d:94:5f:27:aa:
         9e:da:29:27:48:68:c1:23:70:10:64:96:6b:83:4b:ce:b0:ff:
         f7:32:04:e4:4b:2f:0b:e6:1a:d6:c5:f0:9d:7c:05:d8:59:a8:
         87:18:c7:f6:94:be:15:3f:50:1d:59:fa:85:70:46:9c:1a:3d:
         ae:52:2f:21:d6:3d:28:d2:e0:9a:c8:97:09:43:a0:8c:c1:e1:
         5e:0c:0a:ac:0e:aa:de:c2:d7:f8:47:ec:0a:e9:67:aa:ea:90:
         c3:c1:0a:f4:9b:cf:f9:46:bb:91:95:c0:16:7a:c5:10:c6:f8:
         c2:82:d8:fb:a9:49:23:bc:12:46:68:66:6a:c4:68:5f:e7:65:
         e2:17:0d:44:cb:03:c7:8b:e1:7a:d8:0d:e5:04:2a:a3:86:94:
         3f:46:9f:6e:e9:39:20:1e:7c:3b:14:be:1f:cb:b1:24:b8:c9:
         6e:db:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:06 2024 by rpki-client on console-fra.rpki-client.org