Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/WjjiHom6OxJLy-LojXrVquIj_yE.roa
File:                     WjjiHom6OxJLy-LojXrVquIj_yE.roa (raw, json)
Hash identifier:          aCFZsMx1amut5P1wq/1mdNGxOXGj7YyJq0E2/4ouEek=
Subject key identifier:   5A:38:E2:1E:89:BA:3B:12:4B:CB:E2:E8:8D:7A:D5:AA:E2:23:FF:21
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       40
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/WjjiHom6OxJLy-LojXrVquIj_yE.roa
Signing time:             Wed 28 Aug 2024 05:24:36 +0000
ROA not before:           Wed 28 Aug 2024 05:24:36 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        180.214.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 28 05:24:36 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=5A38E21E89BA3B124BCBE2E88D7AD5AAE223FF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:8a:04:12:fd:c6:26:fb:d2:c2:07:7e:be:
                    0e:5b:77:0e:12:9a:62:df:8b:5d:2d:60:b5:4b:e1:
                    e6:fc:e8:c2:a8:b0:92:7d:0d:87:b4:b9:75:72:3e:
                    7a:c9:3f:72:88:99:08:db:c3:61:98:9c:7d:b5:de:
                    74:e7:96:73:3c:05:b7:2a:3f:d9:62:5d:37:a1:22:
                    59:e2:57:61:04:9b:84:58:dc:49:8a:1c:5d:04:fb:
                    fc:77:04:ee:e9:e4:8d:35:78:a5:9e:ab:eb:2f:dd:
                    10:ee:71:b2:ba:8d:66:d1:2f:b7:2a:c9:d4:fc:74:
                    28:e3:b6:78:5b:c7:48:b1:a4:a9:e9:71:97:94:3a:
                    13:15:b9:49:b4:ee:58:46:9f:09:24:15:30:2f:7e:
                    84:82:66:1b:15:dc:fe:85:95:2f:19:e9:bb:84:c0:
                    c1:65:99:47:9b:23:2b:cb:0f:e6:97:cb:75:4b:8f:
                    0b:f1:e9:d8:ec:a2:39:73:0e:69:e7:5c:ca:a5:c5:
                    9e:b2:2c:45:8b:7d:4b:5e:4e:9a:aa:86:2a:f2:f9:
                    c0:c7:3f:22:28:d9:6c:db:27:9c:cb:47:1e:08:15:
                    73:a2:d1:06:38:5c:db:41:48:29:52:cf:0c:22:19:
                    3e:1c:07:02:b9:71:ac:43:08:a1:09:8a:65:8a:66:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:38:E2:1E:89:BA:3B:12:4B:CB:E2:E8:8D:7A:D5:AA:E2:23:FF:21
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/WjjiHom6OxJLy-LojXrVquIj_yE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:74:7f:61:cb:9a:6b:75:c1:dc:e3:9d:41:d7:2f:19:ce:
         13:fc:7e:1a:67:f8:aa:4f:44:fb:b6:36:47:f3:a5:11:32:fd:
         03:ae:03:a6:8e:54:26:5e:48:0f:d3:f9:e1:01:31:15:ee:94:
         f1:86:22:bc:97:f6:79:e6:d0:35:fa:34:95:97:bf:87:b7:44:
         a4:c1:49:11:fd:80:6a:c2:cf:42:eb:f4:e3:89:a9:cf:ef:7b:
         7c:81:eb:ef:dd:76:09:ba:65:24:62:ed:cf:63:a1:8b:a7:29:
         a1:4c:6b:68:32:97:5a:3c:0d:3f:89:65:7a:ad:48:00:9d:02:
         5b:5f:57:80:62:4f:56:66:a2:e7:83:8c:17:08:54:e2:b9:33:
         84:a9:54:12:bd:58:90:35:f4:e4:37:15:d6:01:3a:83:ca:db:
         ce:b9:c5:d6:02:a3:5d:40:bf:c2:c7:0a:98:e4:c2:91:8e:27:
         e4:50:48:ae:da:82:f6:8c:4c:0e:31:7d:14:d1:21:91:34:9a:
         5f:07:5f:21:43:85:7a:ee:7b:b7:44:53:96:73:e0:0f:54:c4:
         47:3d:b7:8c:6a:0c:10:48:17:e2:21:01:83:b1:22:32:c1:0b:
         1f:6a:ad:9f:1b:d0:c2:29:c0:12:69:d5:ff:5a:64:be:71:e5:
         08:b7:e5:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:30 2025 by rpki-client