Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa
File:                     qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa (raw, json)
Hash identifier:          zj5LDBOnYjwXcV7k536xSNa01f/csDd9wK4VepRfvWY=
Subject key identifier:   AA:14:2A:40:BE:4D:FF:2E:99:53:91:F2:C3:A2:3B:F1:7E:E3:55:D5
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       43
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa
Signing time:             Thu 25 Jan 2024 01:10:37 +0000
ROA not before:           Thu 25 Jan 2024 01:10:37 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 25 01:10:37 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=AA142A40BE4DFF2E995391F2C3A23BF17EE355D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:58:a2:d6:6e:b7:5e:ae:6c:e1:a3:db:f9:
                    41:8e:e6:f9:29:ae:3d:d1:52:38:b3:c3:e2:89:3c:
                    4b:53:53:9b:e1:f9:db:cb:35:4a:9d:42:67:72:2b:
                    56:dd:2c:36:e9:47:ac:b3:f4:f7:ff:11:46:49:5c:
                    65:2d:b0:8b:97:a9:4c:3d:be:97:62:76:3f:fa:ec:
                    b5:b2:98:49:d7:63:4c:b5:6b:16:93:ab:bd:a9:c2:
                    d8:9b:1b:c0:ec:2b:6d:26:31:8a:df:56:ac:c2:54:
                    dc:d2:e0:ae:f9:16:fa:08:b1:b3:f1:57:8c:85:aa:
                    cf:12:c6:df:40:40:78:ac:aa:d1:f6:0b:37:32:f4:
                    d6:2a:91:bb:bb:05:fe:36:2c:da:05:2a:e0:98:b5:
                    7c:e3:ab:68:f5:63:08:46:f8:80:54:d8:9b:38:33:
                    11:3a:c3:75:5f:36:3b:25:81:bd:e5:f2:9b:08:e3:
                    5b:57:f8:a4:d6:33:30:b6:5a:82:77:13:49:d9:9b:
                    8c:ff:f0:bb:17:dc:1c:ba:45:1b:f1:9e:76:9c:53:
                    fd:d9:64:99:7a:72:0a:88:f5:44:fb:1d:68:7b:6d:
                    54:be:6f:23:db:8d:db:f5:1e:37:99:8a:a7:fc:f9:
                    88:16:96:f2:87:ef:f9:3b:cc:fd:35:d1:47:26:93:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:14:2A:40:BE:4D:FF:2E:99:53:91:F2:C3:A2:3B:F1:7E:E3:55:D5
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qhQqQL5N_y6ZU5Hyw6I78X7jVdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:00:91:83:8c:55:31:9f:7e:0c:ee:27:a5:ce:d7:66:ca:e0:
         a0:0d:c5:ba:63:3a:cb:36:aa:5a:77:73:f0:f7:cc:d2:91:d4:
         5e:68:60:2c:5e:5d:26:56:f8:d5:84:9f:99:8f:aa:1f:00:e9:
         9d:f9:d6:bd:29:64:e4:7c:cd:6e:38:30:af:8a:5f:8d:50:b7:
         cd:de:45:60:37:45:3e:66:f7:f7:84:b4:7e:83:e9:cb:5d:7f:
         b5:76:34:de:a4:16:74:3c:27:54:8b:3c:4e:1e:6e:55:cd:df:
         79:f4:82:88:00:58:16:e1:e8:02:8a:a0:29:4c:75:79:22:e1:
         fa:40:b4:20:18:d0:43:e8:cd:f7:92:6f:dd:2e:5e:5a:17:e7:
         7f:1c:17:be:6e:4b:dd:82:e4:ab:fe:69:ca:53:e3:24:69:74:
         bb:19:f9:53:d9:9e:8e:08:fc:2e:2d:f7:3e:a4:7d:96:41:e8:
         59:52:24:44:89:05:02:26:52:ef:17:f6:6d:4e:be:5d:18:f7:
         ad:07:ba:68:93:b0:79:38:1d:17:7e:ea:d0:30:9c:8c:7d:36:
         eb:cb:a1:7b:63:c7:11:6d:0f:05:55:f2:b6:c3:f2:ec:f8:41:
         c9:66:f6:ba:35:2c:fc:a9:a7:13:d6:66:e7:70:78:8b:49:59:
         bd:a6:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org