Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/z9aA67enndNYFo03ngPWyVjswIM.roa
File:                     z9aA67enndNYFo03ngPWyVjswIM.roa (raw, json)
Hash identifier:          CnDfBrA7hEko+ozPQMy92uGe3gkyrIhm0RQypRNqAp4=
Subject key identifier:   CF:D6:80:EB:B7:A7:9D:D3:58:16:8D:37:9E:03:D6:C9:58:EC:C0:83
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       37
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/z9aA67enndNYFo03ngPWyVjswIM.roa
Signing time:             Wed 10 Jan 2024 01:18:57 +0000
ROA not before:           Wed 10 Jan 2024 01:18:57 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        160.248.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:18:57 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=CFD680EBB7A79DD358168D379E03D6C958ECC083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:15:c3:7c:6c:c0:c5:6d:c3:aa:34:0a:39:
                    77:44:46:05:7e:92:7c:a0:19:c3:4b:58:66:dc:ff:
                    74:93:43:e4:bc:24:2a:c8:5a:eb:60:9c:72:82:62:
                    70:58:62:4c:9a:91:66:1f:f3:42:b9:46:d5:3b:af:
                    98:37:0c:0e:85:52:be:de:fa:a3:b0:d9:38:e0:fc:
                    c1:ff:a2:a8:0e:5a:1b:a1:3b:71:4d:d4:d1:86:d1:
                    7a:18:5c:17:63:79:6d:f9:8a:dc:74:ac:76:a0:61:
                    89:83:a3:ac:79:99:a5:ae:24:a7:d3:dc:3d:5a:c3:
                    5d:77:a4:2b:59:12:2e:0a:96:68:96:e3:0f:05:a0:
                    3f:d5:af:f3:00:ac:1e:ed:3f:6c:7c:75:4f:69:f5:
                    2c:43:f6:93:f1:13:3a:c0:c8:2a:8d:46:94:fb:d9:
                    97:fa:39:d2:00:4d:af:a2:45:75:c6:22:21:72:95:
                    08:b5:c5:55:c5:d3:05:61:a2:fc:0c:d0:97:be:c7:
                    22:d2:99:9f:04:a9:d6:66:f2:33:3b:e6:73:f0:1f:
                    77:7b:74:db:78:1c:ba:5b:f0:2a:0d:f9:8c:d2:0f:
                    e4:8a:fb:3c:07:92:93:8a:85:d0:b5:19:27:88:d2:
                    50:5f:2f:fd:e5:7f:3d:c4:71:6e:95:ba:38:56:29:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D6:80:EB:B7:A7:9D:D3:58:16:8D:37:9E:03:D6:C9:58:EC:C0:83
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/z9aA67enndNYFo03ngPWyVjswIM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:f5:ab:06:38:a9:56:be:53:41:f2:19:3b:cb:ac:6d:07:03:
         5c:0d:2d:e8:a9:d2:49:fd:84:88:67:13:82:57:5c:6e:9a:f3:
         81:1a:88:9c:74:6c:8f:28:a5:b6:c2:7b:f0:4e:6b:1d:11:43:
         20:77:89:ac:91:3f:2c:d5:68:5d:96:ef:d2:10:46:71:b4:81:
         f1:42:31:5b:db:4c:73:39:0c:ef:c2:80:f6:34:7e:97:b9:5e:
         e5:70:a9:41:f4:44:2b:16:42:23:64:cf:e1:07:ab:71:9c:62:
         54:1a:d0:c3:c1:4d:3b:6b:66:70:c2:f4:0a:ae:e4:9b:eb:33:
         5b:2e:26:ec:8e:12:f3:ee:1e:95:87:46:e6:99:90:ca:ac:73:
         78:cb:16:6a:8e:c7:57:0c:70:01:8a:5b:ae:53:f7:41:e9:1c:
         57:32:2c:56:21:b7:2f:00:a6:76:97:42:17:46:61:f8:88:6e:
         74:58:4e:4d:77:9b:be:58:13:4a:b5:b7:c3:5a:aa:a8:f4:45:
         8f:84:53:6b:b8:4f:cf:b0:e9:f9:8e:9b:de:2f:aa:53:06:eb:
         6e:f3:f2:ce:1f:25:01:52:fc:fc:f3:71:e4:03:db:f9:08:e2:
         0f:84:81:bb:0c:97:4e:f9:6f:fd:30:e9:06:d1:78:29:40:db:
         75:68:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org