Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZmwpXjUCzfZzE7ZkSWj5Rb0h63k.roa
File:                     ZmwpXjUCzfZzE7ZkSWj5Rb0h63k.roa (raw, json)
Hash identifier:          ra80+DnBSLwj/oGCnHv9ZT57bFpVkDXAdeqbDOIsZps=
Subject key identifier:   66:6C:29:5E:35:02:CD:F6:73:13:B6:64:49:68:F9:45:BD:21:EB:79
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       32
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZmwpXjUCzfZzE7ZkSWj5Rb0h63k.roa
Signing time:             Wed 10 Jan 2024 01:15:04 +0000
ROA not before:           Wed 10 Jan 2024 01:15:04 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:15:04 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=666C295E3502CDF67313B6644968F945BD21EB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:9b:29:c9:d0:d5:77:ad:d0:01:a1:ae:4f:
                    db:53:8e:af:66:dc:36:e0:58:07:0b:be:8b:ec:70:
                    fd:20:ce:76:a9:41:37:fc:61:b7:23:93:9f:13:a4:
                    4b:47:96:f1:14:f8:9f:32:ab:a0:93:74:aa:8d:0b:
                    ab:92:e4:08:3f:22:54:ad:e8:a0:f9:e7:30:e4:5e:
                    1c:15:8f:da:17:05:7f:73:cf:cb:65:d7:32:9c:d8:
                    5d:94:8b:b0:bb:a0:f7:19:1e:c7:3c:f3:79:d3:f4:
                    c9:80:f8:f6:1f:14:dc:b8:8a:8b:78:16:56:df:19:
                    ea:70:98:b0:2b:6e:34:ef:28:f0:4d:98:dc:ec:06:
                    86:95:a8:48:5b:2b:08:d9:bd:f8:98:3d:fb:16:ad:
                    45:bb:91:e3:39:96:c4:68:e2:27:2b:d6:26:7b:4b:
                    22:6d:ac:b6:11:ba:33:ce:b2:9f:79:5c:0c:8b:ae:
                    5b:89:79:22:57:66:31:62:32:d2:38:80:1f:c6:53:
                    f1:2d:5d:0e:ce:50:ca:e6:4b:f1:1d:91:1f:85:6a:
                    0f:0c:22:6e:1d:09:5e:a3:51:af:17:42:86:23:97:
                    98:11:f3:82:04:c0:27:83:4d:c2:70:24:23:5a:e7:
                    40:55:e4:d7:7e:ec:d6:19:49:f0:28:4a:d7:56:b8:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6C:29:5E:35:02:CD:F6:73:13:B6:64:49:68:F9:45:BD:21:EB:79
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZmwpXjUCzfZzE7ZkSWj5Rb0h63k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:ab:51:a8:d9:59:eb:43:e6:e0:1a:c5:2d:a1:7e:8c:5e:
         4d:dd:89:51:c1:fa:cc:4c:45:7a:cd:ce:ff:d6:8e:61:d3:de:
         c8:28:88:07:2e:36:b9:b4:04:54:65:b3:f4:b5:60:81:67:b4:
         25:18:4e:7d:5b:3f:de:0a:cb:15:db:2c:79:89:6d:a4:b9:16:
         84:8f:ff:d1:69:7c:db:59:bb:26:29:00:7e:b1:61:31:2f:04:
         31:33:80:0e:be:09:40:d5:09:b6:93:d5:a8:3f:82:2f:c1:55:
         d6:c2:b5:6a:07:68:fe:8b:99:c7:b7:8d:30:a9:61:ca:68:0c:
         59:d6:09:f4:66:d8:6c:8e:b8:b1:78:30:ab:66:bb:95:db:7a:
         37:98:24:4f:9a:13:b6:54:aa:a1:9c:8d:9a:e5:b5:62:95:d3:
         b8:63:db:7e:b9:6a:7f:4b:f8:ae:6d:4b:42:19:d7:a0:b6:da:
         56:33:a8:12:98:cf:95:cd:84:40:b5:5b:b9:f6:d8:32:e7:e2:
         c9:d8:4d:93:af:32:b9:f0:49:2e:86:18:aa:fb:a3:38:75:38:
         b9:96:fe:81:df:f0:17:0f:81:04:cc:37:68:47:a3:bc:e9:89:
         66:22:31:b3:df:20:97:bc:65:af:8e:88:48:9a:27:06:8e:05:
         fe:9f:b7:43
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx
MTUwNFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoNjY2QzI5NUUzNTAyQ0RG
NjczMTNCNjY0NDk2OEY5NDVCRDIxRUI3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALqymynJ0NV3rdABoa5P21OOr2bcNuBYBwu+i+xw/SDOdqlBN/xh
tyOTnxOkS0eW8RT4nzKroJN0qo0Lq5LkCD8iVK3ooPnnMOReHBWP2hcFf3PPy2XX
MpzYXZSLsLug9xkexzzzedP0yYD49h8U3LiKi3gWVt8Z6nCYsCtuNO8o8E2Y3OwG
hpWoSFsrCNm9+Jg9+xatRbuR4zmWxGjiJyvWJntLIm2sthG6M86yn3lcDIuuW4l5
IldmMWIy0jiAH8ZT8S1dDs5QyuZL8R2RH4VqDwwibh0JXqNRrxdChiOXmBHzggTA
J4NNwnAkI1rnQFXk137s1hlJ8ChK11a4rgECAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRmbCleNQLN9nMTtmRJaPlFvSHreTAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L1ptd3BYalVDemZaekU3WmtTV2o1UmIwaDYzay5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGg+FowDQYJKoZIhvcNAQELBQADggEBACzIq1Go2VnrQ+bgGsUtoX6MXk3diVHB
+sxMRXrNzv/WjmHT3sgoiAcuNrm0BFRls/S1YIFntCUYTn1bP94KyxXbLHmJbaS5
FoSP/9FpfNtZuyYpAH6xYTEvBDEzgA6+CUDVCbaT1ag/gi/BVdbCtWoHaP6Lmce3
jTCpYcpoDFnWCfRm2GyOuLF4MKtmu5XbejeYJE+aE7ZUqqGcjZrltWKV07hj2365
an9L+K5tS0IZ16C22lYzqBKYz5XNhEC1W7n22DLn4snYTZOvMrnwSS6GGKr7ozh1
OLmW/oHf8BcPgQTMN2hHo7zpiWYiMbPfIJe8Za+OiEiaJwaOBf6ft0M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org