Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/kAD-VH4nFWUgLSXVw7tTsHfklqc.roa
File:                     kAD-VH4nFWUgLSXVw7tTsHfklqc.roa (raw, json)
Hash identifier:          /dS0xnSEYlwLiM7TkGBq22ivKso7AqD3Zzt6naqC91s=
Subject key identifier:   90:00:FE:54:7E:27:15:65:20:2D:25:D5:C3:BB:53:B0:77:E4:96:A7
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       75
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kAD-VH4nFWUgLSXVw7tTsHfklqc.roa
Signing time:             Sat 30 Nov 2024 01:32:09 +0000
ROA not before:           Sat 30 Nov 2024 01:32:09 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov 30 01:32:09 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=9000FE547E271565202D25D5C3BB53B077E496A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9d:4d:a5:03:39:8d:40:72:de:66:2f:62:7d:
                    8e:83:7c:61:bb:7e:1b:0b:6d:b8:53:fa:9e:e5:c7:
                    9b:a4:04:ae:11:a7:c6:0c:94:7e:9e:2b:0b:19:c7:
                    9c:0a:27:93:7e:a8:68:fb:96:18:34:f5:25:7b:57:
                    23:cb:2f:c4:e3:fc:a3:64:03:9a:e9:cc:f3:77:c2:
                    29:58:a8:8b:c9:de:d8:48:e7:a5:3a:e7:9c:54:bc:
                    23:38:56:d2:8f:4e:53:ad:ea:29:e3:89:b1:3c:14:
                    5f:cf:0c:94:3d:fe:e4:c7:13:ba:be:54:ff:cd:6e:
                    b4:dc:bf:dd:db:6a:6a:be:1f:4d:66:b6:db:56:d2:
                    84:f5:21:e1:7b:29:d5:a5:5f:94:a5:02:4e:42:0e:
                    44:97:b6:36:f7:f4:23:66:40:37:9d:25:78:51:62:
                    79:6e:b7:69:30:68:74:55:a8:b2:11:c8:3d:fe:6d:
                    18:13:72:34:30:77:30:39:ef:42:90:5f:b4:da:86:
                    f8:c5:11:b5:35:ff:50:28:8e:1f:b9:ff:65:ed:73:
                    8e:0b:90:f1:f1:b5:c1:f7:1e:66:7a:5b:4c:60:5c:
                    52:62:d1:93:0e:53:93:dc:b7:ab:b4:94:3e:19:dd:
                    5f:b2:c2:45:d4:ee:a8:dc:06:38:2e:d1:1a:e3:02:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:00:FE:54:7E:27:15:65:20:2D:25:D5:C3:BB:53:B0:77:E4:96:A7
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kAD-VH4nFWUgLSXVw7tTsHfklqc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:94:53:7e:93:77:9e:2c:a4:d0:31:68:d9:4d:a5:42:c0:35:
         5c:c5:e8:87:8e:b3:a2:95:84:44:3c:32:a8:13:62:9c:18:c3:
         f1:66:0b:16:f4:f1:be:9d:f9:a0:04:95:d2:13:3b:65:5f:89:
         ea:76:fb:7e:32:64:6a:b0:88:ee:4d:19:12:47:af:0a:55:ca:
         04:2a:84:51:38:d9:8a:35:c4:66:d4:5d:fe:5a:12:9f:ea:dd:
         4a:94:92:a7:18:91:86:f7:67:c9:58:e5:08:49:2b:4f:89:31:
         32:b5:99:93:96:bf:88:02:e1:f0:8c:db:55:9b:a8:6c:dd:13:
         67:46:a2:f2:7b:22:b2:53:f9:e5:bb:36:a6:b5:d0:93:94:c0:
         7d:88:19:83:96:84:66:47:74:4c:0e:ac:78:0c:3e:2c:eb:41:
         f4:c3:d1:ce:c9:f3:80:7f:1a:be:00:97:df:03:6b:95:e0:7f:
         0d:d6:e2:48:40:a5:ee:7d:0e:b5:73:d1:2a:9e:60:8c:9b:d2:
         34:c9:1c:0a:a0:cd:8a:50:72:b7:85:0c:38:a6:87:9d:d3:93:
         f9:5d:76:17:e4:ee:e6:8a:4b:47:1e:db:25:41:cd:b9:87:7f:
         8c:9b:5f:61:51:ea:28:d9:a5:46:9b:ed:07:87:fe:e7:8a:3f:
         11:df:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:07 2025 by rpki-client