Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/WPCFFkAVCRoH7NAsFrLV4AOh_zY.roa
File:                     WPCFFkAVCRoH7NAsFrLV4AOh_zY.roa (raw, json)
Hash identifier:          j0ZIoQBtSTA48zQPVvB+qZpiYl9J/Sd8zf7/UNkwnLE=
Subject key identifier:   58:F0:85:16:40:15:09:1A:07:EC:D0:2C:16:B2:D5:E0:03:A1:FF:36
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       011F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WPCFFkAVCRoH7NAsFrLV4AOh_zY.roa
Signing time:             Fri 01 Sep 2023 01:31:41 +0000
ROA not before:           Fri 01 Sep 2023 01:31:41 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        210.138.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:31:41 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=58F085164015091A07ECD02C16B2D5E003A1FF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:f3:b7:a5:03:8a:07:c7:1b:03:82:60:ab:
                    58:f4:44:6d:17:61:97:51:70:27:ae:90:85:ee:bc:
                    2f:3f:57:07:c2:bd:41:37:2c:71:98:ee:e2:19:18:
                    71:a7:36:30:41:ab:c1:0f:6b:5c:59:36:3d:e3:b6:
                    22:f7:59:b5:c6:9d:e3:e7:44:2f:3c:00:b6:ca:a8:
                    fe:2d:7a:8e:32:42:2c:c4:8e:33:63:15:8f:86:63:
                    0d:79:7f:18:cd:ff:79:e6:d3:0e:af:99:94:1c:b3:
                    17:57:7f:b3:3e:00:c3:0e:00:95:3f:87:63:1f:d8:
                    e9:99:04:fa:aa:96:7a:d2:ac:4b:85:ff:f0:fe:56:
                    02:3a:a5:85:01:15:65:e4:77:19:00:ed:c0:47:18:
                    36:4b:18:8b:4c:3e:08:35:af:bd:f7:64:05:79:4c:
                    68:c1:10:b1:6a:6e:a9:7d:5b:36:5b:13:56:a1:08:
                    ba:13:bd:01:96:4a:07:58:55:cb:9a:c9:64:1c:f7:
                    ed:d7:3d:65:55:a3:3c:ab:57:26:26:a5:13:cd:9e:
                    d7:4e:79:41:67:d7:59:44:58:74:43:89:7c:18:ea:
                    a2:60:68:be:f0:d3:95:43:aa:45:30:82:e0:c6:bb:
                    d1:e5:f1:41:cc:d5:94:e4:ab:b4:2a:33:9b:43:1c:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:85:16:40:15:09:1A:07:EC:D0:2C:16:B2:D5:E0:03:A1:FF:36
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/WPCFFkAVCRoH7NAsFrLV4AOh_zY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:eb:14:1b:12:35:2f:45:d9:a5:a0:4b:34:2b:b7:82:90:
         f5:67:2f:a9:b3:60:3a:00:76:15:39:92:1d:9b:d9:f3:fa:3b:
         0b:7e:6a:d4:44:9c:d0:c4:e2:b1:cb:db:71:a5:7b:49:f6:f8:
         5a:2e:08:da:12:6e:c3:ca:6e:9e:1f:17:e5:30:79:b7:b9:76:
         3e:c4:b8:b5:f5:6e:a0:af:ae:27:97:4b:01:7d:a9:2a:45:88:
         96:be:e9:3c:6f:96:d3:01:60:34:6f:86:a8:33:60:f6:68:29:
         1b:de:ed:23:e6:46:9a:85:e1:7b:5f:d9:ae:f2:f8:1f:89:0c:
         d9:8d:c3:33:3c:ec:a1:52:c4:f3:78:25:db:82:f9:1f:33:32:
         32:1c:91:a8:e4:3d:9c:02:ef:ad:67:c7:2f:25:9f:c0:a5:64:
         fa:ce:1c:09:ed:57:d2:dc:51:6d:53:4a:47:4f:d4:19:69:6a:
         f8:31:40:14:5b:1e:85:e2:f4:ce:67:44:a0:cd:96:c5:d8:49:
         d2:c7:25:f2:96:30:79:1e:5f:22:a6:6e:f7:5c:5e:e2:c8:23:
         37:b1:53:7c:11:9f:25:cf:6d:be:f1:06:4e:bb:99:f5:54:33:
         75:8c:b8:2b:9b:bd:8c:48:72:3f:e5:a7:35:3f:f7:20:92:1b:
         79:87:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org