Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/uDpEzCIXd15K8XtFuPN69hUOtM0.roa
File:                     uDpEzCIXd15K8XtFuPN69hUOtM0.roa (raw, json)
Hash identifier:          jcRdf3WF+1SKYjLup7079spOm4SqlSyK2CVrzQVCKqE=
Subject key identifier:   B8:3A:44:CC:22:17:77:5E:4A:F1:7B:45:B8:F3:7A:F6:15:0E:B4:CD
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       8A
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uDpEzCIXd15K8XtFuPN69hUOtM0.roa
Signing time:             Tue 31 Dec 2024 01:31:07 +0000
ROA not before:           Tue 31 Dec 2024 01:31:07 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec 31 01:31:07 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=B83A44CC2217775E4AF17B45B8F37AF6150EB4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:23:00:03:c5:17:8f:7b:dc:41:2a:ac:78:
                    8c:45:6f:eb:3d:b2:47:28:32:a2:c8:33:d8:da:49:
                    45:a3:c8:f0:65:e2:c6:8a:a5:b9:d4:8f:2c:f8:98:
                    07:6d:13:23:bb:08:25:68:ee:e4:70:da:07:1e:06:
                    7c:91:01:d3:d4:5b:c9:71:66:c3:65:0e:53:af:69:
                    78:b8:68:16:d2:8a:9b:df:e7:b5:52:9b:81:5b:fe:
                    cf:9f:68:59:7a:bb:13:1b:09:cf:df:76:27:0c:14:
                    ab:7c:de:75:3a:2d:d5:0c:2c:0a:50:90:b1:ec:06:
                    c6:95:13:08:0f:c4:d2:61:a2:70:fb:20:ab:a7:3f:
                    d3:5e:07:11:02:58:95:6e:73:ac:3a:3e:61:68:03:
                    3a:65:7a:f2:69:ad:bb:20:67:38:4a:02:0a:f0:fa:
                    0a:99:f1:cb:de:db:49:50:6b:ec:95:ce:33:5a:c2:
                    18:0f:a6:9a:ce:a4:9c:84:94:a8:48:cf:3b:c4:cc:
                    1c:95:d9:95:df:b6:e6:00:1e:32:31:c3:ba:4f:2e:
                    25:9c:88:2f:3a:c1:c4:7e:f2:a1:d1:b6:3a:da:26:
                    6f:91:30:0d:c2:aa:ec:8c:cd:b3:77:8e:eb:3d:b6:
                    fc:29:04:ab:0b:92:58:79:30:14:b3:57:9a:a9:19:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3A:44:CC:22:17:77:5E:4A:F1:7B:45:B8:F3:7A:F6:15:0E:B4:CD
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uDpEzCIXd15K8XtFuPN69hUOtM0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:22:81:6a:a8:1b:dd:2c:26:5d:89:27:63:1d:66:5e:f8:f3:
         ae:d6:5d:0b:78:47:7e:bb:9e:73:dc:fd:22:9c:92:bc:b6:ef:
         71:fd:3e:1b:d1:19:54:54:30:9f:d2:28:4a:09:2e:81:77:a4:
         cd:b9:52:26:9a:92:01:17:2f:9b:4d:2f:bd:3f:8b:dc:e0:e2:
         2d:fe:09:85:49:d6:cf:20:10:9d:3f:1b:d6:55:f3:ea:8f:d3:
         b8:1b:66:48:fb:a6:eb:ca:e9:18:59:e5:3a:5d:22:36:5f:dd:
         d3:e6:8b:1d:92:bc:f9:22:53:88:db:89:bc:1d:a8:da:7a:d7:
         e6:b3:ac:7a:b4:e6:67:16:01:6c:f6:13:78:19:85:ad:67:01:
         72:7b:1b:6e:dd:11:70:a2:81:c6:b7:3c:31:ec:4b:3e:72:73:
         ce:5e:27:d7:03:4c:e0:11:34:f6:a7:30:4f:0d:da:61:77:f4:
         6f:b5:01:6d:bc:9f:7a:9b:2b:ca:b3:cd:bc:3c:fd:cd:61:9b:
         b1:6d:fb:5e:04:c2:14:a7:d7:e9:aa:6c:93:ec:1a:08:b7:55:
         00:c7:c3:d5:47:55:2f:50:36:70:22:0b:7d:e3:96:69:8e:0f:
         22:be:cc:0a:f7:6b:2c:e6:42:a4:5e:b8:3e:65:b6:40:bb:d5:
         21:ad:6c:69
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNDEyMzEw
MTMxMDdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEI4M0E0NENDMjIxNzc3
NUU0QUYxN0I0NUI4RjM3QUY2MTUwRUI0Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcVyMAA8UXj3vcQSqseIxFb+s9skcoMqLIM9jaSUWjyPBl4saK
pbnUjyz4mAdtEyO7CCVo7uRw2gceBnyRAdPUW8lxZsNlDlOvaXi4aBbSipvf57VS
m4Fb/s+faFl6uxMbCc/fdicMFKt83nU6LdUMLApQkLHsBsaVEwgPxNJhonD7IKun
P9NeBxECWJVuc6w6PmFoAzplevJprbsgZzhKAgrw+gqZ8cve20lQa+yVzjNawhgP
pprOpJyElKhIzzvEzByV2ZXftuYAHjIxw7pPLiWciC86wcR+8qHRtjraJm+RMA3C
quyMzbN3jus9tvwpBKsLklh5MBSzV5qpGYm3AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUuDpEzCIXd15K8XtFuPN69hUOtM0wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOS91RHBFekNJWGQxNUs4WHRGdVBONjloVU90TTAucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAoPjPMA0GCSqGSIb3DQEBCwUAA4IBAQCZIoFqqBvdLCZdiSdjHWZe+POu1l0L
eEd+u55z3P0inJK8tu9x/T4b0RlUVDCf0ihKCS6Bd6TNuVImmpIBFy+bTS+9P4vc
4OIt/gmFSdbPIBCdPxvWVfPqj9O4G2ZI+6bryukYWeU6XSI2X93T5osdkrz5IlOI
24m8Hajaetfms6x6tOZnFgFs9hN4GYWtZwFyextu3RFwooHGtzwx7Es+cnPOXifX
A0zgETT2pzBPDdphd/RvtQFtvJ96myvKs828PP3NYZuxbfteBMIUp9fpqmyT7BoI
t1UAx8PVR1UvUDZwIgt945Zpjg8ivswK92ss5kKkXrg+ZbZAu9UhrWxp
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:03 2025 by rpki-client