Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/wbvc6Gtirhc2oCh7F2OpYfcN6HA.roa
File:                     wbvc6Gtirhc2oCh7F2OpYfcN6HA.roa (raw, json)
Hash identifier:          Go+1T5O+u5de6UKfWfEs9E3wGYFRQ5vsAXwVCwdSZLo=
Subject key identifier:   C1:BB:DC:E8:6B:62:AE:17:36:A0:28:7B:17:63:A9:61:F7:0D:E8:70
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       0F
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/wbvc6Gtirhc2oCh7F2OpYfcN6HA.roa
Signing time:             Tue 21 Nov 2023 06:52:39 +0000
ROA not before:           Tue 21 Nov 2023 06:52:39 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37901
IP address blocks:        240b:13::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Nov 21 06:52:39 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=C1BBDCE86B62AE1736A0287B1763A961F70DE870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:86:5c:62:59:04:3d:0c:ff:7f:79:0f:af:
                    25:d4:b1:76:3f:a0:58:d4:9b:63:a8:83:65:28:83:
                    ef:73:6a:9a:c3:ec:2d:0d:99:35:f3:9d:a1:2a:a4:
                    79:6d:d4:ef:8b:db:ab:31:a7:70:30:f9:d5:6c:e1:
                    3d:cd:35:c4:91:90:af:53:55:42:e9:83:27:6e:20:
                    62:1f:b1:4e:1b:5b:a2:a9:70:8b:a7:7d:3e:19:d4:
                    63:f0:52:de:26:e6:46:83:0a:06:e7:c6:f5:48:b4:
                    e4:86:81:da:7b:66:4c:7b:31:e9:68:ba:5e:ed:62:
                    c4:20:05:2c:f4:96:06:bc:83:d2:2f:8f:09:80:43:
                    2a:50:48:20:3a:84:96:60:0f:e2:7d:49:7b:e4:a2:
                    3d:a8:96:f8:d3:ef:f7:d9:2f:3d:68:04:43:ec:74:
                    64:7f:e7:83:af:21:17:14:ca:7c:df:3c:ba:11:5c:
                    7c:68:4a:fe:d6:dc:fb:69:2e:75:8d:1b:b1:99:1d:
                    0b:ea:8a:f9:38:11:48:21:5c:3b:17:67:50:66:7a:
                    42:b8:00:de:6b:c6:f4:91:cd:b6:ac:eb:ee:a1:d5:
                    d6:ed:9f:28:23:ca:d8:e0:c1:27:70:7e:63:81:3f:
                    c2:65:61:ed:df:45:27:54:ed:be:09:67:29:27:8f:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BB:DC:E8:6B:62:AE:17:36:A0:28:7B:17:63:A9:61:F7:0D:E8:70
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/wbvc6Gtirhc2oCh7F2OpYfcN6HA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:13::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:6f:34:6c:41:a3:97:a3:4e:c5:0c:d6:82:10:aa:68:36:3d:
         45:53:82:1b:5c:c1:31:8c:86:57:f7:07:3f:89:0a:e9:ae:8c:
         61:3c:8e:df:15:a2:b1:5d:bd:ec:45:d6:59:bc:4b:00:f6:d3:
         e5:37:63:33:d8:9c:e5:bf:9b:d9:1a:f7:28:71:ee:e2:9a:0d:
         2b:25:84:93:73:c7:43:e0:2e:9d:5f:f8:09:65:53:d8:21:b6:
         24:59:aa:a7:5c:a9:fd:c9:8f:18:b6:fc:ad:66:2c:24:ce:e0:
         7e:ec:d9:11:b5:84:10:90:1f:a9:65:85:a0:fb:d8:5e:bb:d6:
         68:c7:4d:41:7b:c8:04:57:48:9a:3f:7d:ac:ee:6f:d1:65:22:
         72:b7:ad:3e:64:48:30:94:28:2d:bd:8c:1d:48:70:95:fa:6c:
         46:d4:cd:38:00:35:3e:d1:96:fc:8c:7e:a1:59:c3:0f:3d:b0:
         7b:74:d4:ea:52:86:a9:60:a4:ac:ca:5b:2a:c8:75:3c:37:8f:
         a8:25:5b:d2:d0:01:7f:71:b5:db:64:b1:3f:83:f3:4a:58:5b:
         69:31:ec:8e:7a:91:64:09:7a:68:e6:33:48:32:86:f5:b5:b4:
         b4:97:40:3c:2f:56:96:5f:dc:d5:c4:f5:69:cb:bc:9a:87:98:
         03:21:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:21 2024 by rpki-client on console-ams.rpki-client.org