Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/wv7wy-sAKp4rLtfQ4JwmeDryiuw.roa
File:                     wv7wy-sAKp4rLtfQ4JwmeDryiuw.roa (raw, json)
Hash identifier:          Ibfw2/AY7wX7UhO9ZNAjx/EGdSYXAOc+6URA4rjBPjw=
Subject key identifier:   C2:FE:F0:CB:EB:00:2A:9E:2B:2E:D7:D0:E0:9C:26:78:3A:F2:8A:EC
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       3E
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/wv7wy-sAKp4rLtfQ4JwmeDryiuw.roa
Signing time:             Wed 28 Aug 2024 05:22:29 +0000
ROA not before:           Wed 28 Aug 2024 05:22:29 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        112.137.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 28 05:22:29 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=C2FEF0CBEB002A9E2B2ED7D0E09C26783AF28AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:f3:94:b1:3f:f2:0a:b3:61:ba:e5:4e:1e:
                    e8:3b:fa:04:9a:ae:28:30:c9:41:f0:3e:ed:bb:da:
                    c7:85:5b:20:49:61:87:8a:0e:55:c0:89:85:5b:ca:
                    24:1b:7b:58:61:6c:b7:6a:3a:31:cd:ba:34:fa:9f:
                    b0:5a:11:02:47:a4:73:19:ea:a0:3c:e9:22:ee:37:
                    c7:69:80:d7:17:67:07:80:c8:3c:3b:e0:47:f6:84:
                    66:ec:3e:4b:31:e7:ee:1d:81:df:3f:5a:a7:e4:df:
                    02:be:60:e2:d7:ba:e8:4c:b3:33:4b:aa:11:5a:37:
                    9f:59:cb:06:ba:bf:50:b9:14:55:a8:3d:e7:0b:2e:
                    77:cf:64:62:7e:48:8f:f8:a7:4e:a5:9b:a6:57:d7:
                    e7:31:61:43:50:29:b6:b6:e0:22:6f:9b:a7:4f:25:
                    15:4e:4e:8f:9b:f9:e5:23:70:e0:9a:36:9e:d1:78:
                    18:0f:44:c5:ec:6b:a2:45:67:7f:e5:e8:9d:cb:ea:
                    3a:b5:f7:30:07:b6:6a:fe:1f:b4:fb:73:9b:11:20:
                    ce:aa:e6:e2:be:ee:39:cc:f3:3c:8e:ef:bf:4c:ca:
                    ac:6f:96:2e:f2:c1:9b:6b:ee:c3:ab:42:49:da:a8:
                    44:f7:80:e3:e2:f2:96:f8:41:87:e0:85:68:90:fe:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:F0:CB:EB:00:2A:9E:2B:2E:D7:D0:E0:9C:26:78:3A:F2:8A:EC
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/wv7wy-sAKp4rLtfQ4JwmeDryiuw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:25:a3:d6:d4:c4:df:d9:d1:9d:f9:f3:a8:83:99:8b:83:
         29:a9:be:3e:be:36:52:00:f8:6f:80:57:ac:bf:bf:6f:9a:90:
         f1:33:5e:26:62:17:d4:a5:58:ed:dc:b9:7b:5e:16:56:92:83:
         98:f9:85:87:93:54:3e:7c:cc:e0:8d:bd:0d:be:ae:84:93:ea:
         0b:62:81:3e:23:00:b9:60:4b:ef:a8:41:31:7c:23:aa:59:18:
         e7:d8:33:37:aa:3f:5c:1e:41:fd:32:df:57:9c:06:28:b9:0f:
         97:bb:40:f9:f9:76:20:2d:20:58:c6:2d:21:c2:81:f6:78:05:
         d9:e9:e1:74:a8:0b:a4:72:77:0a:52:10:3f:4d:88:99:4b:f9:
         f9:59:aa:7a:b6:39:93:1f:18:5c:19:ef:21:5d:0c:58:75:d3:
         be:32:fc:86:bc:ec:02:19:b8:7f:7e:06:bd:86:56:7b:dd:aa:
         33:84:85:1a:27:93:b7:39:dc:0b:4f:8a:48:44:f0:80:24:6f:
         9b:3a:93:22:91:9c:bd:97:ae:4c:fc:90:42:97:1e:47:39:0b:
         dd:49:78:ae:aa:5b:1c:72:cd:96:f6:55:4a:f9:21:7c:25:63:
         b3:3a:2b:f0:b7:4f:50:87:ce:11:12:7d:e1:3e:c8:4b:11:6d:
         ce:ae:d6:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:55 2024 by rpki-client on console-ams.rpki-client.org