Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/_7VFw7h-UhBScHWVVOtN-MZv6DQ.roa
File:                     _7VFw7h-UhBScHWVVOtN-MZv6DQ.roa (raw, json)
Hash identifier:          C/P09qS7GntyHU4ybs+5i3cwy8kJCUo8P9bd451nw1k=
Subject key identifier:   FF:B5:45:C3:B8:7E:52:10:52:70:75:95:54:EB:4D:F8:C6:6F:E8:34
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       1D
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/_7VFw7h-UhBScHWVVOtN-MZv6DQ.roa
Signing time:             Wed 10 Jan 2024 01:03:00 +0000
ROA not before:           Wed 10 Jan 2024 01:03:00 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        157.65.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:03:00 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=FFB545C3B87E52105270759554EB4DF8C66FE834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:f3:7b:eb:7a:24:ce:4f:a0:d7:95:b4:88:
                    8e:bd:bc:75:71:5e:c3:59:45:c7:7f:7a:5f:1b:b8:
                    f6:14:1f:de:c4:59:64:54:e5:5d:06:c1:94:41:75:
                    7c:80:93:76:37:ca:3e:9c:e8:d3:24:cb:e4:b8:23:
                    19:67:a4:d8:56:19:d3:b5:4d:51:28:8e:ed:7c:27:
                    37:98:86:e8:f2:73:dc:82:91:20:13:9b:7f:84:ee:
                    50:00:8e:b3:ef:0f:ec:7f:c4:1f:d0:28:d7:9a:ad:
                    95:8f:c9:38:b1:f4:8d:42:8d:43:e3:c9:34:16:52:
                    7e:97:be:af:0c:06:7e:b8:84:10:36:ed:9c:c6:74:
                    6b:26:dc:50:d2:12:4b:50:0f:c4:65:a9:dd:a1:af:
                    1f:cc:78:0d:f6:c0:a7:65:15:d9:dd:3a:69:46:52:
                    35:42:31:eb:cd:eb:93:b6:08:e2:40:fc:2d:ba:72:
                    45:0c:7a:93:18:90:93:ac:69:00:13:cb:e0:63:b3:
                    f7:91:b4:f1:14:36:1b:81:38:ee:04:78:f6:53:44:
                    7c:25:e0:77:01:1f:87:aa:3e:14:4d:02:fe:73:2f:
                    44:ff:8d:eb:fa:65:53:e3:d8:e8:30:97:e8:36:77:
                    33:51:4a:f2:ec:44:98:b5:09:e2:a3:8f:76:eb:29:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B5:45:C3:B8:7E:52:10:52:70:75:95:54:EB:4D:F8:C6:6F:E8:34
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/_7VFw7h-UhBScHWVVOtN-MZv6DQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:af:c4:dc:b0:c3:45:8f:c5:52:2f:4e:95:1a:19:97:39:
         53:1e:25:c2:36:fd:61:ad:5f:d0:c1:4f:f8:27:79:5d:bf:4f:
         93:71:d9:d4:b5:5f:96:20:40:d2:6d:1b:99:47:88:88:68:c2:
         25:9c:26:73:7e:fb:59:81:be:e4:dc:2b:b3:a1:2d:a1:cb:aa:
         ed:08:5e:2d:75:d6:7c:ba:cb:da:57:a7:28:de:1e:e0:70:19:
         39:3a:2d:70:6f:d6:ff:80:4f:09:e7:2f:82:f7:2e:58:98:b2:
         a4:ab:0f:8a:54:59:bd:7f:b7:3d:4a:47:18:39:0b:71:6c:ad:
         6e:66:b2:43:7d:2f:68:f8:51:89:33:65:25:e3:14:eb:ef:4f:
         96:4a:6a:46:2b:06:40:b0:fb:14:93:70:92:0a:97:83:e4:c5:
         29:7e:b0:59:d4:7c:7b:55:6a:00:10:39:c2:cf:8e:0b:8b:50:
         fa:e2:03:a4:5f:ae:fe:2b:70:9b:9c:01:c5:34:73:01:22:cf:
         ef:ac:a2:fb:5e:d1:fd:b5:41:9b:24:ad:e5:6a:38:6b:1d:46:
         b1:77:bf:ea:a9:a9:24:fb:c2:cb:25:b7:67:b3:8f:69:88:d5:
         9f:fa:1b:aa:db:8e:cb:1d:f4:e6:17:33:d3:e6:df:35:a5:5f:
         50:0e:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org