Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/simple/2/3130332e3234342e3136332e302f32342d3332203d3e20313432303436.roa
File:                     3130332e3234342e3136332e302f32342d3332203d3e20313432303436.roa (raw, json)
Hash identifier:          d5phvaZPd2/L9thePGOSTNwlasQgkQLPsuxhjsVMdaI=
Subject key identifier:   18:FF:7A:7A:62:8B:79:50:AE:2D:41:54:56:03:1B:B6:4D:72:BF:C8
Certificate issuer:       /CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
Certificate serial:       0C5B29C18A5D91F842336C2B0C1ACF24017E36E9
Authority key identifier: BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/simple/2/3130332e3234342e3136332e302f32342d3332203d3e20313432303436.roa
Signing time:             Mon 25 Nov 2024 21:30:37 +0000
ROA not before:           Mon 25 Nov 2024 21:25:37 +0000
ROA not after:            Mon 24 Nov 2025 21:30:37 +0000
asID:                     142046
IP address blocks:        103.244.163.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl
                          rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Dec 2024 13:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5b:29:c1:8a:5d:91:f8:42:33:6c:2b:0c:1a:cf:24:01:7e:36:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808
        Validity
            Not Before: Nov 25 21:25:37 2024 GMT
            Not After : Nov 24 21:30:37 2025 GMT
        Subject: CN=18FF7A7A628B7950AE2D415456031BB64D72BFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:87:c6:20:f2:0b:84:cb:1f:91:f6:71:c9:
                    39:ed:f2:f8:a0:57:08:8a:98:14:64:3f:23:61:ba:
                    2a:96:65:46:13:d6:f7:8d:4c:45:50:1c:1f:63:47:
                    d7:c7:e4:b7:13:4f:06:29:7f:4b:08:38:92:8b:d0:
                    91:66:db:8a:6a:35:fd:6f:b1:1b:cb:7f:bb:23:bc:
                    6d:c2:c5:88:65:08:d2:94:84:51:a5:ca:80:e0:5b:
                    a3:75:ef:00:b8:fb:38:75:0b:18:94:2e:f2:83:63:
                    36:76:68:4b:83:04:41:7f:29:69:f2:66:c1:14:ca:
                    a2:4f:be:be:5d:ee:e7:df:82:f3:6e:f1:10:cf:55:
                    74:87:36:0c:c9:b9:29:a3:4d:ea:61:a2:c5:b3:44:
                    bf:be:8e:36:51:23:fc:59:f4:95:b2:12:af:61:33:
                    8c:41:b5:07:6d:69:c7:75:12:0f:43:ba:ae:2a:5a:
                    d4:7d:0d:c6:a6:d7:3d:95:63:97:af:4f:93:11:02:
                    0e:aa:30:9d:1d:f0:06:dd:c4:7c:8b:43:b5:2e:1a:
                    28:af:6c:72:a2:d7:f6:f1:53:3b:e1:3f:a2:fd:a1:
                    09:2d:a3:be:03:67:2f:cf:db:40:31:24:4f:ba:16:
                    a9:0e:a8:92:dc:fe:1e:e9:20:58:eb:9b:f0:6f:ee:
                    81:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FF:7A:7A:62:8B:79:50:AE:2D:41:54:56:03:1B:B6:4D:72:BF:C8
            X509v3 Authority Key Identifier:
                keyid:BF:62:B3:9E:CA:ED:B0:C4:EF:1B:AB:32:7D:1A:9A:54:51:FB:88:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/BF62B39ECAEDB0C4EF1BAB327D1A9A5451FB8808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2KznsrtsMTvG6syfRqaVFH7iAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/simple/2/3130332e3234342e3136332e302f32342d3332203d3e20313432303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:ad:b5:c5:01:5e:bd:4a:bf:06:d2:c5:a8:bf:ff:7e:23:a3:
         28:08:60:92:21:69:eb:68:bc:b1:ab:2b:a8:7c:59:2a:a8:1b:
         45:58:ef:e4:72:ea:46:23:31:a5:3d:8f:ef:0c:77:b5:73:49:
         e9:52:f6:9f:dc:dd:3a:7c:13:f2:9c:bb:49:92:98:34:77:43:
         1d:d2:d7:7e:35:ba:93:93:2a:80:30:41:3a:71:b4:1a:b3:32:
         e0:45:e4:3a:51:e1:56:3f:14:fb:1c:0b:31:ba:52:52:6d:88:
         3e:c4:6c:00:dc:01:22:1f:69:6d:9f:3e:99:3a:b7:f0:e6:cd:
         a0:73:a4:da:9c:96:86:9e:15:ed:a9:cd:b9:00:12:98:57:89:
         13:c6:30:fc:8b:c6:fa:1d:4f:79:9c:ef:bb:15:03:a3:99:a0:
         f9:3c:0c:8f:65:0e:44:7b:be:ce:86:71:42:c5:c0:cb:bf:17:
         31:78:42:84:c7:72:3d:05:84:30:bc:3e:9f:8a:26:e7:e2:9f:
         1f:c9:73:29:3e:af:f5:0b:b1:fe:27:50:a4:4f:eb:d0:75:15:
         de:01:8c:4c:89:5a:bd:91:dc:18:f1:2a:4f:73:3e:cc:06:4a:
         6e:e9:1e:e7:48:0e:e5:79:c6:f7:9c:1d:92:e1:ff:ca:94:be:
         97:b2:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 16:16:36 2024 by rpki-client on console-fra.rpki-client.org