Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qPKonaBl-0YpHeNxVFMTBeewm68.roa
File:                     qPKonaBl-0YpHeNxVFMTBeewm68.roa (raw, json)
Hash identifier:          qZTMO93/whNBy0RWVpxmJlSSVGglWawdsPDgvnoroBc=
Subject key identifier:   A8:F2:A8:9D:A0:65:FB:46:29:1D:E3:71:54:53:13:05:E7:B0:9B:AF
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       45
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qPKonaBl-0YpHeNxVFMTBeewm68.roa
Signing time:             Thu 25 Jan 2024 01:10:38 +0000
ROA not before:           Thu 25 Jan 2024 01:10:38 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 25 01:10:38 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=A8F2A89DA065FB46291DE37154531305E7B09BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7f:ee:76:1a:82:4b:a6:2d:34:a3:20:01:9f:
                    e7:43:5c:11:8e:99:ab:cc:06:45:d8:a9:da:c2:6d:
                    ca:bf:3d:80:1e:53:a2:6b:87:c6:2b:66:3a:84:0e:
                    bb:80:f2:1d:7f:d8:48:2d:cb:81:06:70:6e:e6:8d:
                    5b:28:01:b3:f0:b1:22:4c:81:ce:8e:f0:e2:82:f6:
                    cc:d4:5f:f5:f5:32:20:91:87:bc:fb:6b:e2:56:b0:
                    99:c6:b8:a6:7c:dd:a9:a3:a8:9d:5d:f9:3a:1a:07:
                    48:a0:50:56:28:e8:95:5f:88:9c:00:ff:5b:9d:ff:
                    9c:fe:55:11:d6:bf:bf:63:bf:5d:de:31:09:b2:2e:
                    0b:af:86:12:03:f1:90:e1:78:53:49:9c:03:a8:9c:
                    1b:b5:39:1f:70:74:45:ab:41:55:be:be:f2:e6:ad:
                    89:ac:36:a8:e7:bb:79:54:e0:e7:bd:d8:8f:c5:14:
                    65:52:5d:12:17:04:de:69:ef:bc:18:c7:a3:69:cb:
                    c5:d2:ed:dc:ae:cf:cb:14:ba:a4:b6:c0:f6:1e:7d:
                    94:7e:e0:51:07:11:d3:4a:0e:5e:b7:8e:15:ff:68:
                    30:7b:a9:28:c3:9c:07:b9:6f:db:80:a8:36:26:21:
                    bd:82:02:46:5a:10:94:c1:8f:03:aa:de:ff:9d:43:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F2:A8:9D:A0:65:FB:46:29:1D:E3:71:54:53:13:05:E7:B0:9B:AF
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qPKonaBl-0YpHeNxVFMTBeewm68.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:fb:ea:ee:1f:cb:76:6b:ff:b3:02:64:53:bb:b2:92:8b:
         27:4b:d8:93:e8:c9:9c:fd:8a:db:cb:a9:f6:43:16:05:6e:c7:
         3c:9c:48:b7:ad:2d:a6:d3:a6:84:fd:5a:50:0a:b2:23:82:2b:
         f0:6b:2c:93:2f:86:e1:ad:bc:94:95:af:b7:47:b8:45:52:a3:
         f0:31:64:be:d6:e0:22:96:99:7e:82:80:1f:9b:40:99:72:ef:
         98:a2:cd:9b:77:46:67:89:a1:12:eb:c8:61:78:9f:dc:49:39:
         65:34:0d:af:40:da:86:89:87:16:7c:7c:90:83:8b:7c:bb:22:
         ec:17:77:1f:fa:f9:66:4c:71:74:f2:0d:06:3d:6c:03:0c:df:
         1a:33:4b:4f:84:ca:df:47:d2:05:89:15:bd:d5:aa:93:45:e5:
         93:f1:bf:75:f2:1b:f9:4d:7e:ec:fc:b6:61:89:78:c9:90:1a:
         1b:9f:ac:89:90:34:44:6d:b0:2e:ea:9a:99:98:c9:45:20:bd:
         d9:c3:b6:5b:14:c2:af:56:2c:f0:59:84:24:2a:ab:66:a4:e5:
         27:e9:44:66:1d:44:e4:b0:6c:e0:2b:65:37:37:50:06:0d:69:
         6d:ce:9c:34:4a:60:2d:8b:e9:12:04:a0:a3:90:11:84:6d:f5:
         ae:9d:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:32 2024 by rpki-client on console-ams.rpki-client.org