Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/simple/2/3130332e3234342e3136332e302f32342d3234203d3e20313531313838.roa
File:                     3130332e3234342e3136332e302f32342d3234203d3e20313531313838.roa (raw, json)
Hash identifier:          iAKsMSJgYc/F+LavCcjlyxEXsCUkLL4CKK+ghLCCS/k=
Subject key identifier:   AC:D0:BB:D1:D2:54:A5:1C:1B:A4:43:13:89:E0:70:5E:BE:79:8A:B8
Certificate issuer:       /CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
Certificate serial:       2367231B0E00156265087594DF08DA51930DA936
Authority key identifier: BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/simple/2/3130332e3234342e3136332e302f32342d3234203d3e20313531313838.roa
Signing time:             Mon 25 Nov 2024 21:30:34 +0000
ROA not before:           Mon 25 Nov 2024 21:25:34 +0000
ROA not after:            Mon 24 Nov 2025 21:30:34 +0000
asID:                     151188
IP address blocks:        103.244.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl
                          rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Dec 2024 13:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:67:23:1b:0e:00:15:62:65:08:75:94:df:08:da:51:93:0d:a9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
        Validity
            Not Before: Nov 25 21:25:34 2024 GMT
            Not After : Nov 24 21:30:34 2025 GMT
        Subject: CN=ACD0BBD1D254A51C1BA4431389E0705EBE798AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:c5:27:ce:08:ab:55:df:af:8d:02:6d:b1:
                    31:0a:12:c1:54:10:62:74:b7:4a:c4:b0:ad:54:09:
                    06:fe:cd:00:96:5e:a7:3f:6e:95:2f:60:60:c6:4d:
                    fd:3b:7a:58:b2:3d:e7:69:cb:eb:2e:c2:da:2f:dd:
                    72:20:60:a9:a3:f3:d8:dd:22:f3:f3:96:f4:3d:9e:
                    1e:ff:be:58:b3:d0:b3:fc:f4:b3:16:63:2c:db:97:
                    b1:69:be:cc:fd:b2:26:62:45:47:57:c1:bb:34:ff:
                    e8:d4:1a:68:5f:ec:03:f3:c0:57:17:26:47:39:4e:
                    a9:d5:26:9c:79:45:e0:cf:50:c5:1f:34:e5:22:d6:
                    d6:02:17:c5:7c:88:07:0f:44:8d:5a:35:58:95:5a:
                    05:a8:ef:d4:09:00:c9:3e:9a:9f:c3:4e:d9:4b:d9:
                    aa:ac:3a:46:e1:3d:11:43:14:e2:5f:7a:ae:7e:20:
                    1c:93:cd:2e:10:4e:af:ff:5f:48:81:67:ee:5e:a9:
                    88:3c:72:f3:39:95:39:c0:87:98:6c:b1:f6:b9:6e:
                    c3:e3:14:01:b3:2f:0b:9d:bf:5b:64:27:e3:5b:cc:
                    48:49:81:cb:fa:99:7a:85:f3:39:53:d9:6a:ff:31:
                    a8:25:13:cc:57:6f:be:48:1d:fa:46:c6:35:bb:46:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D0:BB:D1:D2:54:A5:1C:1B:A4:43:13:89:E0:70:5E:BE:79:8A:B8
            X509v3 Authority Key Identifier:
                keyid:BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/3130332e3234342e3136332e302f32342d3234203d3e20313531313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:32:5e:11:16:73:21:f7:c5:d1:01:f0:2c:16:76:fc:ad:
         e5:6e:77:88:93:99:76:e9:38:ec:9e:ef:09:59:b8:c6:43:8e:
         33:60:f3:9d:c0:0c:39:09:16:ac:b7:da:9c:b0:8d:3e:64:e7:
         1b:72:31:27:3a:bd:51:8c:f2:35:9b:24:67:40:5c:00:52:3c:
         9a:6b:2b:72:6e:db:90:5b:24:46:38:db:1b:51:3a:14:93:aa:
         49:33:8d:ed:b4:dc:2c:b0:47:5e:ec:90:05:bf:4a:d8:d0:ee:
         40:e0:f4:65:7c:c6:23:67:79:9f:92:cd:f4:9b:6c:41:91:fa:
         8a:ef:b7:73:4e:86:4b:c5:58:77:a6:50:d8:a2:f4:7f:2d:67:
         45:74:aa:d6:53:30:59:8b:a5:59:a2:f1:2e:18:25:8f:97:97:
         28:d6:55:8f:a1:91:b1:81:e5:f4:26:a8:c7:8a:ce:e4:6c:21:
         79:5e:5e:76:32:29:78:fc:2b:4f:f2:5d:d2:c9:51:bb:f6:31:
         69:1b:42:d9:da:6a:7d:f1:71:a5:00:5d:d6:fb:95:2e:1c:0b:
         72:c1:55:c5:b9:d4:4c:7a:99:10:51:e5:4a:68:25:8f:c2:53:
         d2:f2:37:99:a5:0b:57:db:b3:a5:90:c7:a3:7f:6d:de:0a:9d:
         a5:d7:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 15:26:13 2024 by rpki-client on console-ams.rpki-client.org