Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/gyiPug5V52aVwkzvq25UKIRnuQ8.roa
File:                     gyiPug5V52aVwkzvq25UKIRnuQ8.roa (raw, json)
Hash identifier:          M/SmGh/8dG0NkBG4qiIiOt0AuIcv0ObT9PuBuH5LgBE=
Subject key identifier:   83:28:8F:BA:0E:55:E7:66:95:C2:4C:EF:AB:6E:54:28:84:67:B9:0F
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       72
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gyiPug5V52aVwkzvq25UKIRnuQ8.roa
Signing time:             Sat 30 Nov 2024 01:32:08 +0000
ROA not before:           Sat 30 Nov 2024 01:32:08 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov 30 01:32:08 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=83288FBA0E55E76695C24CEFAB6E54288467B90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:3f:6f:d2:10:81:8f:a2:8c:4f:59:24:41:
                    7e:ff:43:ee:36:6c:7d:b8:9e:a9:f1:fd:22:b0:28:
                    bb:d8:9d:61:4c:8e:bb:c7:f9:33:ae:db:31:1b:a4:
                    77:85:b9:d4:d5:02:2f:84:52:12:8d:57:48:0b:fa:
                    33:4f:2d:68:2d:27:41:ea:3a:c3:e1:20:89:36:59:
                    39:0c:f4:50:2b:e3:46:12:61:e4:7f:4a:0e:e4:b1:
                    7b:c4:d5:b5:8c:31:48:ea:de:c2:59:ec:21:c9:d0:
                    0f:31:c5:53:dd:0b:70:62:5c:42:9c:87:97:0e:4f:
                    31:72:90:e1:a9:59:32:44:ce:9f:62:1b:b4:0f:6d:
                    f9:e8:cc:fb:fa:5e:9e:5b:3b:5c:84:8f:98:6f:db:
                    15:a6:55:ee:f1:fc:6d:36:0b:52:db:a1:fb:17:b5:
                    33:4e:b2:84:32:8f:57:d9:a0:c7:58:d1:0e:37:07:
                    0f:9d:d7:a4:3f:83:59:61:28:39:73:a5:23:a9:73:
                    c0:68:2f:a5:6f:7e:90:bf:b2:22:14:11:7c:83:b6:
                    f6:59:d1:e7:5b:9f:bd:83:99:45:7c:1f:f5:b0:c0:
                    e9:56:7a:24:9b:c0:61:02:30:38:7b:05:d4:92:87:
                    25:32:ec:c5:5e:d9:82:2c:3f:8e:59:e6:a2:12:07:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:8F:BA:0E:55:E7:66:95:C2:4C:EF:AB:6E:54:28:84:67:B9:0F
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gyiPug5V52aVwkzvq25UKIRnuQ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:0d:30:ac:9e:53:ac:49:59:ac:f4:a7:96:d8:73:ae:84:93:
         a0:c1:6c:e3:6e:ba:01:d8:c3:90:a5:ff:a9:9a:96:21:a5:44:
         f8:fd:48:4b:b4:78:35:84:a4:9b:02:a6:f9:39:1e:74:4d:e2:
         8d:38:b0:8d:15:fd:44:bd:9c:64:2f:ba:43:62:98:ac:18:da:
         2a:0a:d9:32:02:7d:25:98:c2:77:72:24:f1:d5:67:0a:95:a5:
         5e:e8:e5:67:f5:22:1d:54:c9:b0:b6:da:6b:c9:af:14:7d:2a:
         c3:52:4c:b7:ff:5b:ff:ad:2e:2f:28:9d:c7:82:b7:b9:af:ee:
         d1:5e:ce:9b:8c:bc:1b:08:33:1a:b3:7e:44:80:ab:f4:08:01:
         ac:7f:de:57:4b:66:51:cb:3f:7f:33:4b:3d:89:92:06:c2:dc:
         9f:e2:ba:4c:de:f5:a8:9d:11:73:86:75:8f:da:4f:6a:4b:4e:
         96:3f:9e:b4:1f:22:1e:f5:87:6b:d8:71:22:77:4c:3d:da:a1:
         b3:9f:04:53:87:5a:6e:c0:30:a6:3f:6b:f4:88:af:56:a0:d5:
         ec:d9:ab:0b:84:3b:ae:2d:ad:67:3c:11:9b:a2:d6:de:18:3c:
         eb:48:f0:f4:9b:4f:82:c6:97:5a:9c:64:2a:25:5b:f2:6c:4c:
         05:ed:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:36 2025 by rpki-client