Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/tibay-S7SBgkYsQ-cHJNPAc4Zpg.roa
File:                     tibay-S7SBgkYsQ-cHJNPAc4Zpg.roa (raw, json)
Hash identifier:          8gULB4iwCEBiLEf2PTTyie1/dcHC/V1K7WSWje33aM8=
Subject key identifier:   B6:26:DA:CB:E4:BB:48:18:24:62:C4:3E:70:72:4D:3C:07:38:66:98
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       33
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/tibay-S7SBgkYsQ-cHJNPAc4Zpg.roa
Signing time:             Wed 10 Jan 2024 01:15:04 +0000
ROA not before:           Wed 10 Jan 2024 01:15:04 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:15:04 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=B626DACBE4BB48182462C43E70724D3C07386698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:c7:e9:4c:3e:7d:8f:9e:c5:43:a3:f6:df:
                    a5:9b:57:df:74:d6:83:ab:5d:20:fc:ac:b5:20:70:
                    75:4b:36:11:b7:d1:b5:d0:fd:c4:2c:2d:74:27:6e:
                    01:60:3b:b3:9c:f6:2a:68:a5:1e:f9:c3:fa:62:06:
                    c7:a7:02:f6:5b:63:d0:f2:d9:30:97:01:c5:7f:f4:
                    7c:8a:78:03:c9:a0:06:05:b1:7b:e1:ff:3d:54:45:
                    27:f5:73:af:70:36:10:47:c6:44:1d:fb:02:76:f7:
                    89:8b:62:be:c9:18:2e:00:d7:ca:ae:95:f8:09:d8:
                    bf:64:5c:90:3a:6f:ab:c5:34:05:c9:2b:a8:8b:ba:
                    6c:1b:d2:c9:d4:ee:9a:57:5c:a3:86:eb:e2:03:a7:
                    87:d5:7e:23:09:3a:27:1c:a0:ca:7e:ff:10:98:51:
                    bc:c3:44:4a:df:f4:00:4d:f0:a4:16:6f:28:22:df:
                    65:b7:4d:8e:29:9f:54:d5:08:7d:d0:79:16:ae:44:
                    46:60:8a:72:1b:a7:9e:34:a0:df:64:77:c1:72:e5:
                    16:2e:ef:d8:98:84:3c:91:f1:84:40:3b:47:f6:a0:
                    eb:42:62:53:a2:50:3c:dd:17:7c:71:40:39:01:99:
                    af:d6:ff:39:4f:c2:81:91:89:5b:23:72:8f:0b:46:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:26:DA:CB:E4:BB:48:18:24:62:C4:3E:70:72:4D:3C:07:38:66:98
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/tibay-S7SBgkYsQ-cHJNPAc4Zpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:e6:01:ea:69:61:e0:0c:f3:04:d2:70:e2:73:b1:00:5c:cd:
         06:87:28:b4:76:81:a1:ef:31:ed:7c:a6:06:57:0d:bf:83:b5:
         f1:cf:61:e7:db:36:4f:63:62:9a:d4:fa:52:1e:0d:15:5c:c7:
         82:bb:d6:08:53:d6:c4:d1:49:72:3b:b5:58:4c:d4:29:83:3f:
         27:df:45:44:44:fe:77:0a:bb:05:d7:22:32:40:54:e4:66:75:
         bc:93:42:d6:fa:e0:a2:4d:e2:90:73:12:63:eb:73:eb:6c:fe:
         b3:0c:ec:62:ed:d7:af:8e:31:17:30:08:77:50:57:dd:5a:db:
         99:a0:44:57:4e:cb:5a:57:20:e4:97:4d:7f:f5:68:6d:16:e2:
         b8:b0:d8:c4:0b:43:b0:06:f3:96:6e:86:9c:52:f3:ab:06:ca:
         0d:74:59:33:a9:f2:cb:f9:4a:bd:5c:e2:07:bd:01:e5:ee:08:
         5e:a2:aa:f0:4e:b6:49:24:f7:cb:77:8d:58:c1:66:9e:d0:e5:
         69:61:75:4b:b5:d6:94:bd:fc:16:ec:78:98:c5:6d:01:55:09:
         0e:99:9d:c0:02:70:11:45:d9:89:d7:c3:09:77:79:65:68:ab:
         40:9d:45:7c:c4:29:2f:61:fe:a8:49:d3:4d:45:e5:f3:8d:ae:
         0b:0c:49:b3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx
MTUwNFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoQjYyNkRBQ0JFNEJCNDgx
ODI0NjJDNDNFNzA3MjREM0MwNzM4NjY5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKvax+lMPn2PnsVDo/bfpZtX33TWg6tdIPystSBwdUs2EbfRtdD9
xCwtdCduAWA7s5z2KmilHvnD+mIGx6cC9ltj0PLZMJcBxX/0fIp4A8mgBgWxe+H/
PVRFJ/Vzr3A2EEfGRB37Anb3iYtivskYLgDXyq6V+AnYv2RckDpvq8U0BckrqIu6
bBvSydTumldco4br4gOnh9V+Iwk6Jxygyn7/EJhRvMNESt/0AE3wpBZvKCLfZbdN
jimfVNUIfdB5Fq5ERmCKchunnjSg32R3wXLlFi7v2JiEPJHxhEA7R/ag60JiU6JQ
PN0XfHFAOQGZr9b/OU/CgZGJWyNyjwtGr2kCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBS2JtrL5LtIGCRixD5wck08BzhmmDAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L3RpYmF5LVM3U0Jna1lzUS1jSEpOUEFjNFpwZy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKg+FwwDQYJKoZIhvcNAQELBQADggEBAA3mAeppYeAM8wTScOJzsQBczQaHKLR2
gaHvMe18pgZXDb+DtfHPYefbNk9jYprU+lIeDRVcx4K71ghT1sTRSXI7tVhM1CmD
PyffRURE/ncKuwXXIjJAVORmdbyTQtb64KJN4pBzEmPrc+ts/rMM7GLt16+OMRcw
CHdQV91a25mgRFdOy1pXIOSXTX/1aG0W4riw2MQLQ7AG85ZuhpxS86sGyg10WTOp
8sv5Sr1c4ge9AeXuCF6iqvBOtkkk98t3jVjBZp7Q5WlhdUu11pS9/BbseJjFbQFV
CQ6ZncACcBFF2YnXwwl3eWVoq0CdRXzEKS9h/qhJ001F5fONrgsMSbM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org