Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/aQeMs31mDABZFI5ejVkxtsGHALg.roa
File:                     aQeMs31mDABZFI5ejVkxtsGHALg.roa (raw, json)
Hash identifier:          4+FPcIUJLRePdbrq2myrmPk3DxvwJ+DSjSqLG6OkCDE=
Subject key identifier:   69:07:8C:B3:7D:66:0C:00:59:14:8E:5E:8D:59:31:B6:C1:87:00:B8
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       44
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aQeMs31mDABZFI5ejVkxtsGHALg.roa
Signing time:             Thu 25 Jan 2024 01:10:37 +0000
ROA not before:           Thu 25 Jan 2024 01:10:37 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 25 01:10:37 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=69078CB37D660C0059148E5E8D5931B6C18700B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:a2:93:db:19:bc:b0:f2:24:2f:f4:78:f1:
                    b2:b3:7f:7e:ab:b0:54:5b:ef:ec:b0:5c:22:dc:7c:
                    1e:d3:5c:0e:12:1c:35:1b:0b:ff:92:e6:ed:8d:c8:
                    c6:68:26:dd:cc:23:21:ef:4e:ce:70:0d:e7:03:8d:
                    09:5b:da:92:d0:c6:24:cc:db:5a:c4:b0:81:ca:7b:
                    05:1c:5e:3e:0e:5f:62:f4:e9:86:a9:94:39:81:51:
                    aa:e9:7f:ad:ce:1a:c7:fa:58:11:33:ee:6c:0d:a7:
                    ac:be:e8:2e:3f:ac:5d:61:96:78:c8:84:25:da:15:
                    29:f2:23:5b:ae:ca:7f:fb:a2:e8:e5:f8:47:dd:82:
                    df:1c:fa:f7:68:35:e8:8a:2f:68:86:8d:67:62:b2:
                    86:09:d1:4d:b6:e4:ae:93:37:2f:d8:89:3c:cc:6d:
                    4f:7e:5c:6f:23:13:2b:04:e8:4a:72:60:a3:23:7c:
                    6b:6b:5c:c4:92:d3:fd:97:81:c4:c3:f8:81:64:75:
                    f8:6b:89:9e:8a:39:eb:d8:e7:03:f2:dc:0f:a9:ad:
                    62:7d:9f:14:cf:05:4a:0c:76:e2:00:08:88:ed:4b:
                    f4:63:67:6a:17:df:10:3f:05:81:5a:ef:a4:a3:28:
                    12:3d:9b:d1:47:30:23:00:c5:80:32:c8:42:aa:29:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:07:8C:B3:7D:66:0C:00:59:14:8E:5E:8D:59:31:B6:C1:87:00:B8
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aQeMs31mDABZFI5ejVkxtsGHALg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:d2:65:33:4c:df:1e:0b:7c:f2:5c:20:83:65:ce:ad:6a:
         af:9b:c4:57:51:76:d2:32:39:7b:18:9c:b3:10:dd:b4:c7:60:
         54:47:91:dc:bd:86:ae:41:40:37:2e:79:fe:8d:31:3d:36:b8:
         08:79:88:90:05:2e:7e:47:2a:6a:c2:0d:bb:a3:ed:40:4d:30:
         aa:48:21:70:eb:6a:f1:4d:dd:23:49:a5:cf:02:4f:41:51:76:
         58:02:9f:19:8d:3d:c6:b8:8c:85:e4:ec:52:72:d3:7a:f4:29:
         73:5a:3b:0a:32:5f:9c:6b:5c:2b:a8:22:82:8c:80:17:51:df:
         ad:1a:4b:01:c9:b4:f4:de:3e:3d:ab:27:37:bd:ac:e7:83:ff:
         3a:bd:1e:40:42:56:bb:4e:dc:c5:0a:41:09:c9:20:41:be:8c:
         f1:1a:82:59:c4:ce:6b:e4:24:64:6a:2a:41:01:2a:97:80:65:
         fc:8e:5d:69:71:24:b3:12:d7:4d:68:76:8a:f6:4b:b2:2d:61:
         8e:cf:e3:9c:80:9a:a5:42:08:a6:60:22:91:c3:c0:6c:76:ec:
         68:81:ab:47:da:a9:a2:aa:ce:fa:12:e0:29:ce:a9:be:b4:73:
         65:4d:32:0e:a9:32:7f:81:1b:e1:03:cf:0c:97:1a:b2:5c:4d:
         f9:15:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org