Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/WJ-_Ea2dbivrpXDQ4cTKRl10Kh4.roa
File:                     WJ-_Ea2dbivrpXDQ4cTKRl10Kh4.roa (raw, json)
Hash identifier:          GfUV8GXp88GfJoMSU5mhZbHk6HN7x7h/PAzCQw2+PGQ=
Subject key identifier:   58:9F:BF:11:AD:9D:6E:2B:EB:A5:70:D0:E1:C4:CA:46:5D:74:2A:1E
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       4B
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/WJ-_Ea2dbivrpXDQ4cTKRl10Kh4.roa
Signing time:             Sat 31 Aug 2024 01:31:45 +0000
ROA not before:           Sat 31 Aug 2024 01:31:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        119.148.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=589FBF11AD9D6E2BEBA570D0E1C4CA465D742A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:33:1f:6d:2e:39:17:ed:ce:6e:cb:37:12:
                    f6:3d:4f:db:6e:9a:4b:80:23:3e:7e:78:23:65:1c:
                    d3:a3:b4:67:10:48:50:19:bc:48:44:83:4e:7c:82:
                    fc:a6:da:25:32:56:d1:36:f2:fc:e5:26:a0:b5:ec:
                    ff:1f:ad:61:d0:c3:c1:58:46:51:c9:ae:a1:0a:a2:
                    85:48:55:ae:53:92:bb:96:12:8f:27:4f:5d:0c:fb:
                    d4:86:14:a2:0d:58:19:ce:57:e2:81:aa:a1:67:53:
                    c7:52:12:4e:46:1f:4b:6a:8a:89:17:31:4b:d8:00:
                    e0:f7:a8:07:66:18:16:51:24:55:21:e5:0c:51:01:
                    90:58:f0:3c:a4:25:26:ca:ea:89:27:29:22:08:70:
                    22:f9:db:49:6d:20:2f:77:6f:b1:e5:89:c5:e8:21:
                    3d:0e:34:1a:70:7c:09:50:a3:b5:6a:31:7b:9c:f6:
                    d2:2d:54:ad:eb:4e:f6:36:ea:84:49:c9:00:a7:37:
                    0c:32:85:8e:9b:6d:ba:94:0b:18:bb:d2:19:89:97:
                    4b:df:ef:bd:40:75:30:b0:97:90:a1:3c:61:1d:d3:
                    01:ff:27:64:a4:38:95:e7:ac:a0:e8:f4:bb:08:49:
                    bc:7c:2d:05:9c:9f:62:71:85:1d:6b:4a:a2:74:86:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9F:BF:11:AD:9D:6E:2B:EB:A5:70:D0:E1:C4:CA:46:5D:74:2A:1E
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/WJ-_Ea2dbivrpXDQ4cTKRl10Kh4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.148.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:4c:50:23:e8:cb:af:bf:d5:bd:ad:75:ca:2c:67:a5:2f:
         8c:fd:f3:e3:65:8b:07:04:e2:01:4e:74:6e:a1:b3:cc:d2:64:
         ef:b9:d7:e6:f2:b3:47:f6:ec:a5:95:e6:4e:c8:12:b1:22:38:
         16:4e:14:ed:85:a3:e8:c2:6d:1c:da:8d:6b:49:e1:a4:51:72:
         51:cc:de:64:d7:96:1e:4e:2f:b0:15:c7:7f:d8:7c:5c:26:6a:
         4c:fc:c0:60:52:aa:ec:a2:b0:62:1b:22:4e:73:d7:9e:ea:a1:
         5d:73:98:b3:18:3a:57:2b:2d:50:92:bb:77:97:18:fb:ed:c1:
         b3:e9:ce:22:ad:92:14:09:1a:f5:cb:f1:97:60:0b:e9:cc:6f:
         c0:66:a0:04:7c:59:ad:01:36:47:a9:48:8d:a3:31:fd:4f:8f:
         b4:a3:e9:25:50:04:a1:14:99:46:d8:a7:9b:1a:09:85:bc:5f:
         57:32:1c:f8:3f:ec:36:32:9e:12:68:07:62:1f:6e:2f:d4:f9:
         58:46:9d:d0:7c:4b:af:f0:a3:a2:3d:3c:9a:84:af:2b:d5:6c:
         f0:9f:04:92:40:de:f0:d1:70:3c:10:29:37:a7:d0:07:1b:f1:
         0a:8f:1d:9a:d1:60:a6:76:3b:41:7e:04:16:e3:61:36:7e:bb:
         17:ec:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:08 2025 by rpki-client