Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1398/oWCMLYxAGUoYGPFLjJJLjKoEfic.roa
File:                     oWCMLYxAGUoYGPFLjJJLjKoEfic.roa (raw, json)
Hash identifier:          4SXX5S/y3LS5p/NhGPr95672DKc1qmJI9aZnmDpJMiI=
Subject key identifier:   A1:60:8C:2D:8C:40:19:4A:18:18:F1:4B:8C:92:4B:8C:AA:04:7E:27
Certificate issuer:       /CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
Certificate serial:       43
Authority key identifier: 20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/oWCMLYxAGUoYGPFLjJJLjKoEfic.roa
Signing time:             Thu 29 Feb 2024 01:29:34 +0000
ROA not before:           Thu 29 Feb 2024 01:29:34 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     58785
IP address blocks:        157.118.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20178CFE8934CBDC4FF5DB6A3DEDDB41B7C1F4F7
        Validity
            Not Before: Feb 29 01:29:34 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A1608C2D8C40194A1818F14B8C924B8CAA047E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:68:b0:77:ea:ac:56:a9:ec:54:e6:f8:f4:
                    50:57:8c:c7:09:ae:c1:89:73:10:c1:e7:45:1d:4e:
                    89:e2:5b:09:3c:0d:28:8c:88:2a:65:b1:76:0f:b8:
                    c8:ad:b4:20:45:16:f1:ea:ed:60:81:5e:71:43:21:
                    25:0a:ef:db:68:27:a5:55:3d:27:1b:09:37:ef:a7:
                    05:15:17:31:bb:83:4f:95:fa:9d:c2:ee:e9:52:59:
                    c8:b7:d6:78:c0:13:2b:10:3f:25:d9:c4:85:b2:56:
                    1a:a3:1e:a6:c1:68:de:40:97:c7:e0:17:d7:8c:24:
                    80:3c:a1:5f:1c:9d:ca:9c:68:01:f2:4d:34:f1:48:
                    7f:b4:7a:dc:ca:62:6a:12:ea:03:d5:e7:2f:50:33:
                    21:ba:9a:2f:51:12:b5:68:f3:71:8a:76:99:47:82:
                    bd:88:46:a7:50:45:fe:2c:91:56:5b:16:9a:6b:c3:
                    d1:10:13:d0:92:f7:27:d4:9b:7d:03:f6:4d:90:b5:
                    9a:23:41:cd:a4:77:81:4f:e0:2e:72:9e:a4:5b:76:
                    c6:b0:b7:cd:1f:8f:53:cc:a0:81:88:04:0e:cb:30:
                    32:b2:c1:4d:40:10:3e:94:09:74:81:93:77:de:5b:
                    f5:59:7e:f4:ff:7e:39:74:12:64:16:e4:85:27:84:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:60:8C:2D:8C:40:19:4A:18:18:F1:4B:8C:92:4B:8C:AA:04:7E:27
            X509v3 Authority Key Identifier:
                keyid:20:17:8C:FE:89:34:CB:DC:4F:F5:DB:6A:3D:ED:DB:41:B7:C1:F4:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IBeM_ok0y9xP9dtqPe3bQbfB9Pc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1398/oWCMLYxAGUoYGPFLjJJLjKoEfic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:ed:fd:2b:d3:ac:51:f8:fc:27:7f:ac:67:a6:68:a6:a4:
         29:d4:1e:7a:0d:e6:10:91:31:9b:ee:01:49:b7:7a:bf:dd:ba:
         ce:e6:fa:66:fb:e0:86:ea:c8:80:f6:87:86:c6:a3:f0:22:89:
         95:90:6a:1f:33:a9:17:b5:86:aa:74:3b:59:3b:74:28:64:fb:
         07:09:c4:61:2b:87:e2:6c:09:63:55:59:ab:b0:24:2a:3e:4f:
         10:6e:6d:d8:da:78:0e:64:7e:7c:99:2e:55:d6:81:7f:cf:8b:
         f5:63:6f:3c:ae:7c:fd:fc:ed:39:76:79:0c:44:ce:3d:52:da:
         cb:78:a9:5c:7f:cc:88:0a:b1:02:67:0c:55:d4:b2:c7:0f:9e:
         83:f0:55:8f:28:44:98:ae:bb:42:c8:d0:cf:2b:d3:20:fe:b1:
         60:51:62:98:c8:22:6c:6f:fa:52:2c:9c:31:dd:dc:0d:91:ec:
         fe:de:d3:5c:67:af:7a:54:89:e7:02:52:31:e3:cd:2b:6c:68:
         b3:80:66:9d:5d:05:6d:79:88:40:44:11:19:7c:0a:48:4d:e5:
         b2:c8:54:f1:6b:5a:c2:1e:b9:6c:01:18:f2:a9:63:35:93:7a:
         2f:48:bc:d4:f3:00:5d:68:01:11:be:19:ed:81:27:c2:fc:0c:
         1f:98:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:27 2024 by rpki-client on console-ams.rpki-client.org