Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/q6VFE7eUxFMAFwQ-4l4HByizeC0.roa
File:                     q6VFE7eUxFMAFwQ-4l4HByizeC0.roa (raw, json)
Hash identifier:          MBPNJJCzcdE2P1jVr8VTOqZLOAi6AvofPD3jRXa7q3w=
Subject key identifier:   AB:A5:45:13:B7:94:C4:53:00:17:04:3E:E2:5E:07:07:28:B3:78:2D
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       7B
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/q6VFE7eUxFMAFwQ-4l4HByizeC0.roa
Signing time:             Sat 30 Nov 2024 01:32:11 +0000
ROA not before:           Sat 30 Nov 2024 01:32:11 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov 30 01:32:11 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=ABA54513B794C4530017043EE25E070728B3782D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:87:60:af:60:94:25:97:9e:d7:7a:1b:fe:
                    9f:5d:09:02:dc:ec:c8:fd:09:f2:10:59:3b:b0:69:
                    39:6d:6d:3b:4c:05:96:6e:1a:2e:6f:85:ff:a1:f3:
                    d2:91:03:fa:28:f1:a6:88:be:c5:8f:db:b4:4f:17:
                    16:e1:d8:32:45:a2:cc:29:9d:6d:f4:ab:f5:62:87:
                    67:f4:3c:28:ff:b4:ac:ce:fc:40:a3:6b:ab:92:dd:
                    6a:ef:2c:31:82:a9:66:a7:d2:a3:db:29:66:7d:19:
                    cc:62:86:34:6a:14:7e:e8:07:38:c7:92:81:04:89:
                    48:9c:86:8d:16:cc:20:48:2b:fd:dd:6f:e1:e2:21:
                    c7:81:89:b0:b3:4c:c0:3c:90:3b:4f:cb:40:63:d4:
                    b4:10:c4:40:2a:b0:d0:fe:54:ce:b4:c0:99:3d:ee:
                    02:0b:a3:ff:ac:64:da:54:7e:40:8d:7b:24:ed:b2:
                    eb:44:3f:f1:bc:c9:36:b6:12:b6:7d:d6:a1:45:04:
                    99:92:c7:86:e6:4c:b0:0c:b7:09:10:f4:c0:08:43:
                    96:0e:4e:61:37:7b:72:55:f6:c6:e4:b4:ca:d2:f5:
                    74:6b:65:75:ba:7d:50:f9:c2:39:d2:59:48:3c:10:
                    52:4c:79:b6:0a:b5:4c:84:82:4a:d5:fb:99:19:be:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A5:45:13:B7:94:C4:53:00:17:04:3E:E2:5E:07:07:28:B3:78:2D
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/q6VFE7eUxFMAFwQ-4l4HByizeC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:b9:c7:99:6a:fb:08:16:ee:9a:1f:d1:80:51:04:af:aa:
         0b:c6:11:91:ee:bb:0d:98:01:17:77:43:88:a4:5f:7e:08:c2:
         ec:73:ba:cd:f0:5a:c8:ca:09:59:83:7c:94:07:0a:fc:8c:b5:
         4b:8a:5c:f6:38:f2:cc:a8:fd:b7:07:f1:a8:12:00:cb:a7:97:
         8d:d0:d8:8b:f2:26:ab:45:a6:32:fc:c0:df:8f:88:8f:68:15:
         4d:c0:a9:8e:0f:34:e8:15:b9:43:f1:87:d2:36:f5:bc:47:99:
         eb:79:72:e7:e2:22:63:1e:d8:18:25:0b:8b:93:8e:59:47:b7:
         3f:94:30:5b:95:d4:e2:44:23:23:71:aa:b6:ab:78:09:ea:9a:
         60:21:0c:82:b2:0a:36:a8:bf:bc:03:3b:ac:dc:3a:c1:51:df:
         45:13:9b:0a:1b:4d:87:86:4f:a8:81:02:6c:b5:a7:a9:6a:ac:
         cb:68:39:ad:81:c6:97:51:e0:13:55:c3:8d:f8:e3:1f:47:fb:
         08:3b:f0:8d:d5:f3:c0:bf:fc:d5:f6:75:0e:37:4c:2e:4a:f1:
         52:67:fe:0e:31:8f:b1:de:e6:c1:7f:63:fb:6b:8d:0a:40:42:
         91:e4:8b:13:62:55:74:8f:f2:36:1e:58:13:18:74:26:67:ac:
         e7:40:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:53 2025 by rpki-client