Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/OdMeL-2wBHjYUT3hRHoehtyEtm4.roa
File:                     OdMeL-2wBHjYUT3hRHoehtyEtm4.roa (raw, json)
Hash identifier:          3sc3jBwhJgRjv0X4mkmojSxqhqpMIkgoIqPRGhVEALI=
Subject key identifier:   39:D3:1E:2F:ED:B0:04:78:D8:51:3D:E1:44:7A:1E:86:DC:84:B6:6E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02B8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OdMeL-2wBHjYUT3hRHoehtyEtm4.roa
Signing time:             Sat 31 Aug 2024 01:42:53 +0000
ROA not before:           Sat 31 Aug 2024 01:42:53 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9617
IP address blocks:        58.85.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:42:53 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=39D31E2FEDB00478D8513DE1447A1E86DC84B66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:75:b5:df:20:e4:40:e2:0b:a6:15:71:a8:
                    b5:34:b1:a4:eb:39:0b:49:c9:7e:7f:ae:e1:ec:c7:
                    89:ab:bb:74:e2:d0:8d:70:d5:5a:66:3a:28:bd:40:
                    a5:92:cc:63:0e:86:eb:3f:10:d2:93:59:3e:05:3e:
                    39:2a:3f:ce:27:8f:3c:7a:12:74:eb:c2:b5:a2:b6:
                    08:b3:aa:83:7f:2e:cb:cb:79:52:f6:fb:c7:43:19:
                    92:ac:e7:c3:52:f4:f3:6b:9e:b4:c5:a8:14:5b:98:
                    0f:6f:0a:3a:4a:eb:c0:24:6a:6c:80:15:50:0e:2b:
                    d6:9e:2a:b9:97:84:f5:f4:b6:b1:35:45:cd:22:fc:
                    d4:26:4e:fb:75:3c:85:84:12:69:d0:5a:5a:b8:81:
                    fb:ce:57:9e:65:4c:e2:2e:6d:d7:36:c9:6c:6d:b4:
                    fc:c9:16:cc:af:53:22:7c:9b:e7:a3:11:e2:b5:11:
                    c5:d0:a0:9c:f7:85:82:91:67:0e:b2:fc:61:0b:f2:
                    ac:f9:07:e0:bf:c3:a4:f7:12:a2:b9:93:a8:f1:87:
                    08:f4:c1:e9:09:62:8d:50:fd:12:eb:9c:04:5e:f7:
                    79:57:e4:94:b0:20:28:56:54:2d:e7:d0:40:b3:11:
                    ef:34:89:f5:ad:49:33:e5:ec:f9:2a:b2:66:4a:1f:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D3:1E:2F:ED:B0:04:78:D8:51:3D:E1:44:7A:1E:86:DC:84:B6:6E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/OdMeL-2wBHjYUT3hRHoehtyEtm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.85.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:57:01:20:cb:2f:0e:dc:c4:a2:1f:b4:00:b8:5f:c1:ff:bc:
         36:09:a9:7b:d8:ff:d8:1d:86:c3:c7:4c:a6:ea:43:64:88:30:
         bd:3b:c9:dc:ad:a1:24:7f:82:83:7d:1f:c9:66:93:1b:ed:ad:
         2f:2b:7b:a7:36:62:fe:63:a9:0a:3a:b1:52:1d:eb:a2:b8:e1:
         9c:cf:85:a3:49:15:21:0b:4f:94:1a:8b:18:2c:1f:7f:32:67:
         6e:c8:06:00:7f:e6:c6:72:e0:22:9c:4a:a8:ff:4e:da:85:42:
         34:85:76:fb:bc:c3:f7:c7:5c:93:60:eb:8b:5c:72:5c:f7:2e:
         79:d6:b8:32:75:40:a4:2a:ac:f0:bf:3b:af:99:1e:d5:5a:d2:
         87:43:c1:5e:17:74:b1:57:a9:25:af:b3:8d:ce:b4:24:70:5e:
         db:e1:97:df:64:69:e1:a5:e9:f4:32:27:b2:85:8c:2a:f9:ef:
         03:ac:83:d4:a8:91:81:0f:23:6b:2d:47:7f:8f:a2:2d:b4:20:
         7e:37:a4:d6:9c:8a:c8:df:2d:cd:14:ab:56:20:31:5f:e6:3a:
         51:53:36:f7:7a:01:a1:5d:2d:0d:b7:37:b0:9a:35:be:71:ca:
         45:a5:58:4f:4a:93:dc:66:36:1b:14:61:e8:36:09:c8:f3:6d:
         dd:8e:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org