Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/uBvfNJIhkzOMpPbWuhq_kLkR-BM.roa
File:                     uBvfNJIhkzOMpPbWuhq_kLkR-BM.roa (raw, json)
Hash identifier:          moc/vJ/d1FCBL1FnwW3jEzPFVjT6aJ9FscZ38NuVFbU=
Subject key identifier:   B8:1B:DF:34:92:21:93:33:8C:A4:F6:D6:BA:1A:BF:90:B9:11:F8:13
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       30
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uBvfNJIhkzOMpPbWuhq_kLkR-BM.roa
Signing time:             Wed 10 Jan 2024 01:15:03 +0000
ROA not before:           Wed 10 Jan 2024 01:15:03 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:15:03 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=B81BDF34922193338CA4F6D6BA1ABF90B911F813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:aa:85:c4:c2:eb:71:c3:7f:f9:f2:8c:40:
                    6e:78:a1:b4:2f:99:aa:ce:49:24:67:22:98:71:e0:
                    1b:3f:ba:f0:aa:9d:ed:d1:8c:98:38:3c:8c:97:9f:
                    e9:35:5a:c1:0c:61:37:c6:d3:55:73:8d:3e:c6:e1:
                    29:1b:87:5f:b5:64:19:2e:fb:54:02:1b:a5:a0:66:
                    e4:01:5a:62:ae:43:0f:8f:e6:d2:3f:48:6d:9b:f3:
                    50:2b:1d:99:75:f7:51:8b:bf:1f:6a:61:36:27:19:
                    63:81:02:c2:6b:b4:92:b2:0e:b6:dd:64:e7:5e:b9:
                    c4:56:a6:8d:8d:be:ca:52:c8:2f:f7:90:86:6b:60:
                    15:48:d6:10:ea:6e:1e:53:01:2d:ee:21:31:01:47:
                    d3:fa:8e:f6:71:98:e2:c5:c8:b8:a7:cc:e9:22:e4:
                    cb:06:de:d0:d3:20:49:85:b6:6b:a8:b3:49:29:55:
                    8c:43:b1:cd:55:d4:42:2a:5e:a2:11:fa:68:f1:91:
                    36:ca:d1:8d:26:d9:ab:af:8e:ea:78:8c:c9:e3:5f:
                    c7:77:62:b6:ec:40:66:57:9a:57:d3:42:7a:5f:ea:
                    84:58:97:22:61:fd:1f:c3:06:cd:26:e3:b6:51:50:
                    ab:fb:ed:b8:46:1e:41:35:ab:7a:96:1b:0c:ce:88:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1B:DF:34:92:21:93:33:8C:A4:F6:D6:BA:1A:BF:90:B9:11:F8:13
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uBvfNJIhkzOMpPbWuhq_kLkR-BM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:99:1a:6a:11:28:54:32:ee:c4:a3:8e:62:a9:90:b5:dd:
         29:47:7c:7d:66:03:55:ef:9f:eb:e4:f8:dd:1f:e8:15:6f:d8:
         3b:34:57:df:10:a0:00:1d:a8:03:c4:f3:bb:78:dc:7c:9a:20:
         f8:8a:4f:99:a5:df:8e:0a:92:7f:68:c6:92:1c:ec:fe:26:3e:
         75:21:b1:79:4e:e2:fb:b2:9c:31:34:11:a9:f7:5e:86:14:6c:
         fd:06:38:5f:17:81:e0:42:c4:1a:c6:ca:2d:c1:37:88:68:cd:
         9b:07:7d:f5:9a:94:78:e1:ce:e7:82:a5:6b:5f:f9:a2:7a:49:
         b3:c3:1a:45:9f:53:ed:49:95:cf:18:36:2d:15:3a:64:ab:5e:
         38:d1:7b:ea:0c:bb:79:ff:a8:1c:bc:9f:b5:4c:51:e8:6d:41:
         92:49:6a:fc:d0:08:36:0a:34:fe:50:67:8e:f0:c0:30:83:23:
         4f:8d:c5:eb:a1:3e:a4:7c:c2:fc:76:82:96:89:4e:fa:70:e5:
         fd:6c:9a:52:f5:6e:48:5c:2c:de:3b:4a:d8:c5:59:77:9d:61:
         a3:99:33:1d:4b:49:a7:10:2b:25:8f:a8:0b:00:0b:c0:3d:96:
         1e:00:7b:ff:d6:5a:81:81:21:27:ae:ef:e7:46:aa:5f:ce:03:
         1a:f7:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org