Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WEJlOxcWazsarQNfRM6xeQrQTDg.roa
File:                     WEJlOxcWazsarQNfRM6xeQrQTDg.roa (raw, json)
Hash identifier:          1JSrj5hbXSoFGLVza7aTQoOfUUKtc/gyduZB0Q1/reM=
Subject key identifier:   58:42:65:3B:17:16:6B:3B:1A:AD:03:5F:44:CE:B1:79:0A:D0:4C:38
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       1C
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WEJlOxcWazsarQNfRM6xeQrQTDg.roa
Signing time:             Wed 18 Sep 2024 07:24:06 +0000
ROA not before:           Wed 18 Sep 2024 07:24:06 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:24:06 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=5842653B17166B3B1AAD035F44CEB1790AD04C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:4e:df:8f:42:f3:d3:1e:fb:4c:b8:a1:08:
                    42:f6:12:f0:17:a2:fe:84:45:9e:fe:43:e6:3f:23:
                    3c:9d:03:0c:40:86:1d:77:15:29:44:7c:41:74:8a:
                    4d:f8:b8:66:ef:ed:b8:f4:d7:08:26:08:bb:8f:65:
                    be:e5:9e:f6:bb:ef:32:be:5d:f5:85:5b:3b:9c:8c:
                    8c:9c:21:05:53:34:e8:4d:f3:87:e4:ae:ed:c1:81:
                    6c:40:33:42:d7:d2:56:2e:d0:a5:8a:66:51:8c:9c:
                    e9:b7:4e:02:20:05:99:63:af:8e:48:a9:cf:0b:11:
                    c4:38:a5:d1:91:36:11:b1:70:ce:6a:35:c2:99:45:
                    e5:3b:9d:c7:35:9d:70:1b:86:f3:55:8b:4b:4e:7e:
                    0f:c8:ba:af:d2:1a:0e:2d:cd:8b:53:59:af:b5:f5:
                    96:d5:40:09:91:47:b3:96:53:ad:f7:45:58:dc:a6:
                    92:64:66:12:45:77:fa:f1:16:23:a5:c9:9a:52:61:
                    61:fa:2b:ff:cd:19:9f:05:a8:f5:26:16:bb:b7:55:
                    6d:c5:2f:5e:9e:cd:57:2e:50:c4:52:66:74:e4:f8:
                    cd:45:11:51:70:03:31:bc:76:12:47:d2:78:28:c9:
                    6b:dd:35:3d:a3:46:24:b5:9e:e1:2a:c7:dc:e3:8f:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:42:65:3B:17:16:6B:3B:1A:AD:03:5F:44:CE:B1:79:0A:D0:4C:38
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WEJlOxcWazsarQNfRM6xeQrQTDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:b7:e9:07:9e:ad:9e:68:6a:7f:e0:4e:56:96:2f:41:f8:
         93:82:7e:64:de:db:39:55:12:20:9a:0a:56:d1:c0:4a:6d:83:
         59:80:00:37:95:c0:af:d9:18:74:d3:e7:2e:2b:e0:12:7b:b8:
         b0:66:fb:29:1a:3a:31:a5:70:e0:fc:0e:94:34:3f:76:36:93:
         f3:54:9d:03:d4:58:8f:9f:9c:ab:27:30:ab:54:48:2c:e9:a4:
         36:57:bf:c4:95:1b:e9:97:c9:f7:cd:51:44:c1:b1:f7:7e:ae:
         c7:68:15:c7:00:11:fe:de:5b:9b:3a:a0:d8:ea:78:2b:b8:83:
         19:d1:a5:02:c1:ad:ab:d4:b8:93:fe:32:f9:57:d5:50:db:02:
         37:10:53:25:9a:e7:77:b1:35:1b:bc:84:48:d8:80:9b:d1:5a:
         fc:15:f1:2c:83:b0:9d:86:ab:f9:ed:a8:25:b8:f8:70:ef:13:
         57:c6:b2:01:e0:54:d6:dd:1a:e6:bb:ff:52:bc:41:41:00:66:
         bc:cc:27:bf:42:c9:52:92:a6:01:df:4b:b1:e3:44:50:85:e8:
         86:ce:77:e5:32:59:02:47:89:13:0c:0f:89:0a:ff:a4:8a:fa:
         56:f5:68:14:44:0e:9d:2b:71:3d:9a:5d:e0:ad:dd:b0:9b:5c:
         1d:b3:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:39 2024 by rpki-client on console-ams.rpki-client.org