Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/wtMoths7-_KOjnhquehCEqjoPFw.roa
File:                     wtMoths7-_KOjnhquehCEqjoPFw.roa (raw, json)
Hash identifier:          vyTXckPPU1cv0QkkC3PC9LbpzCPBHZUioslB3K9D+IE=
Subject key identifier:   C2:D3:28:B6:1B:3B:FB:F2:8E:8E:78:6A:B9:E8:42:12:A8:E8:3C:5C
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       31
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/wtMoths7-_KOjnhquehCEqjoPFw.roa
Signing time:             Wed 10 Jan 2024 01:15:04 +0000
ROA not before:           Wed 10 Jan 2024 01:15:04 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:15:04 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=C2D328B61B3BFBF28E8E786AB9E84212A8E83C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:ec:48:4b:09:60:92:fe:dd:d6:7f:e5:13:
                    75:00:ef:14:07:63:03:d4:ed:50:a5:50:68:50:33:
                    de:9e:81:32:b3:a7:1a:dd:48:4c:3f:b2:f2:dd:10:
                    b4:09:e9:ee:a2:d6:07:8d:4e:39:75:df:d1:80:0c:
                    c4:79:68:7d:fa:9f:8c:5f:eb:ca:63:c5:80:ea:f1:
                    a8:a7:9f:ff:5d:57:38:2d:b2:87:4f:9c:7d:d8:25:
                    28:21:94:71:16:f8:f8:10:a9:7d:f9:7d:1d:c7:c5:
                    35:9f:7a:a3:65:55:9b:53:05:bc:07:a6:62:46:73:
                    7f:4f:23:78:8a:e9:23:07:d3:84:9a:ba:93:4f:16:
                    ab:86:f4:96:1a:f4:7c:27:c9:a1:82:a7:ca:88:99:
                    b8:50:59:d5:fe:f1:25:f4:c1:64:a2:ac:35:54:01:
                    4b:38:c2:66:37:da:97:ab:3d:47:ac:40:ca:f2:3b:
                    45:e1:b3:84:da:24:5a:fe:da:b7:06:93:89:0b:d4:
                    2b:6c:ed:5a:0c:ca:82:79:b0:5e:95:42:71:14:63:
                    45:2e:11:79:47:70:e4:69:6a:0c:a9:ab:a3:e1:34:
                    22:4d:11:c0:b1:7a:92:11:41:b9:95:dd:bb:3a:65:
                    3a:b5:62:84:39:3f:23:41:f7:19:7e:b2:25:dd:ff:
                    69:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D3:28:B6:1B:3B:FB:F2:8E:8E:78:6A:B9:E8:42:12:A8:E8:3C:5C
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/wtMoths7-_KOjnhquehCEqjoPFw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:68:06:b0:c0:69:35:13:3c:7d:0a:b1:ea:da:ca:f9:28:d6:
         ff:1f:0b:3c:cd:23:5a:8b:fd:38:c2:74:35:c6:85:64:73:46:
         4c:cb:f9:8b:4c:14:15:34:21:ea:d6:10:c3:a3:06:a8:b4:a4:
         38:d7:1a:26:56:e5:6f:26:de:20:b9:bc:91:fa:ed:70:cc:a2:
         4c:9f:ce:62:d3:33:e1:4b:c7:c2:3c:2c:d2:7b:9f:af:6c:f0:
         94:f8:74:3b:67:80:c7:fa:80:ac:77:7b:ca:60:48:c3:bc:a1:
         d2:68:87:62:0e:4c:bd:64:53:18:3a:1d:f8:14:41:3f:3c:97:
         22:58:ed:4f:26:e5:94:11:f9:7a:92:f0:b1:4e:34:dd:fa:78:
         83:10:32:1b:cf:9f:3a:a8:3d:b9:de:fa:dd:73:2d:56:36:2a:
         25:d3:91:ee:26:bb:60:43:82:d4:df:d4:92:21:7c:22:34:c6:
         2f:9a:10:0b:ed:eb:e0:12:30:c0:30:47:30:70:7a:a4:66:65:
         48:f2:ef:7d:64:67:0c:a8:83:41:dc:d8:a7:6c:0b:70:ea:32:
         a1:09:5a:0b:bc:54:1a:84:b1:02:e6:93:95:13:17:7f:c3:88:
         d0:28:25:58:e2:08:77:4d:f4:bd:56:09:b3:12:34:3a:43:a3:
         73:03:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org