Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/simple/2/3130332e3232342e39322e302f32342d3234203d3e20313531313838.roa
File:                     3130332e3232342e39322e302f32342d3234203d3e20313531313838.roa (raw, json)
Hash identifier:          oI/iyPCKE7Dhiyna6BSlrjwcht0MioCVz33JmPEPdpg=
Subject key identifier:   71:A9:28:EE:08:E4:06:A1:94:65:8A:0B:F0:FA:7A:8F:23:0E:B6:C3
Certificate issuer:       /CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
Certificate serial:       21BDDBDA48DE73BF638906EE3C2EE5B7C76AFF78
Authority key identifier: BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/simple/2/3130332e3232342e39322e302f32342d3234203d3e20313531313838.roa
Signing time:             Mon 25 Nov 2024 21:30:36 +0000
ROA not before:           Mon 25 Nov 2024 21:25:36 +0000
ROA not after:            Mon 24 Nov 2025 21:30:36 +0000
asID:                     151188
IP address blocks:        103.224.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl
                          rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Dec 2024 13:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:bd:db:da:48:de:73:bf:63:89:06:ee:3c:2e:e5:b7:c7:6a:ff:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
        Validity
            Not Before: Nov 25 21:25:36 2024 GMT
            Not After : Nov 24 21:30:36 2025 GMT
        Subject: CN=71A928EE08E406A194658A0BF0FA7A8F230EB6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:11:a9:f8:ad:8b:0e:98:e8:33:3b:50:93:
                    6f:8e:94:18:cd:ac:7c:82:60:ae:d2:c6:20:ed:34:
                    9b:db:88:4d:e0:d2:06:8e:63:c1:57:9d:c1:1e:07:
                    61:86:f2:99:fd:fc:2e:f9:c3:4f:60:13:aa:b2:4a:
                    97:74:ee:6d:0e:f5:52:dc:9b:05:ee:c5:d2:50:ff:
                    4b:f7:79:6b:60:5b:6f:f4:c8:fe:50:f9:18:9e:4d:
                    f5:87:a7:bb:f6:93:e6:1a:6d:2d:29:28:5b:79:3d:
                    82:41:2b:0c:05:2e:56:52:16:20:c6:81:9d:15:67:
                    fc:cd:63:a1:da:90:0c:fc:72:39:72:a5:a8:a5:d3:
                    6e:4d:24:47:a3:53:a9:61:c1:e8:b9:0b:15:14:1e:
                    03:fc:ed:21:01:7e:35:d6:0c:4d:38:e2:fe:1a:71:
                    02:57:38:f0:ad:12:cd:8d:2d:b7:ce:c6:92:a4:d1:
                    e5:cb:d5:ea:ac:be:81:34:96:17:e3:a9:fd:22:4e:
                    49:ee:2a:4f:85:01:0c:d3:f0:49:95:71:8e:e6:cc:
                    aa:33:cb:cb:55:16:f1:ab:72:fb:ed:c8:3f:56:d4:
                    af:47:6e:66:8d:36:d9:48:7f:16:00:b8:28:a3:0a:
                    33:e1:de:f2:3a:c7:45:0a:ab:39:a4:d0:d3:8e:92:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A9:28:EE:08:E4:06:A1:94:65:8A:0B:F0:FA:7A:8F:23:0E:B6:C3
            X509v3 Authority Key Identifier:
                keyid:BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/3130332e3232342e39322e302f32342d3234203d3e20313531313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:3b:16:83:69:c9:dd:b8:1a:fd:7f:36:06:08:fc:85:3d:
         21:2b:26:90:3d:c7:5d:38:58:17:3e:f8:07:56:b8:6f:bd:2b:
         21:fd:88:13:42:ef:9a:64:d0:e9:83:82:53:36:8c:fb:bc:af:
         5d:ed:76:56:8e:ec:a5:2c:ff:74:a3:ba:14:e0:30:f3:09:9b:
         3f:a5:71:92:a6:c8:47:27:92:65:61:ce:52:1d:76:0b:ee:34:
         c2:77:91:5a:53:af:00:ce:18:29:59:a6:2b:42:72:79:06:78:
         2b:6a:cd:26:c4:b5:94:a4:52:66:b0:0a:59:7a:1a:f2:82:f3:
         c6:ef:3b:fe:a1:10:ed:e3:a3:6f:d3:14:8d:2a:04:57:dc:58:
         bf:1a:fb:c0:9b:a4:8f:71:4f:30:8e:ee:37:fb:04:fa:7b:24:
         e0:d9:21:5a:47:6d:89:ec:be:ba:96:cf:a4:20:19:47:91:48:
         52:21:fd:b9:98:f9:43:0d:bb:29:81:a7:b2:6b:1f:b2:a4:4e:
         f0:bf:93:9f:a3:b0:ae:1b:98:5f:05:9d:06:b4:a9:e1:8e:10:
         b4:25:29:b9:0e:52:92:93:70:5b:90:c6:15:ba:9f:4d:cf:bd:
         94:e5:d6:47:db:88:ce:34:d6:29:6f:bb:30:26:d0:8b:17:58:
         24:80:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 16:16:35 2024 by rpki-client on console-fra.rpki-client.org