Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WCB_gbzv0rVIjF0skJCU4hBXExE.roa
File:                     WCB_gbzv0rVIjF0skJCU4hBXExE.roa (raw, json)
Hash identifier:          M/XN672EQBcIf19d023djoj75cuv9u9Ogpii7finCCo=
Subject key identifier:   58:20:7F:81:BC:EF:D2:B5:48:8C:5D:2C:90:90:94:E2:10:57:13:11
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02D6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WCB_gbzv0rVIjF0skJCU4hBXExE.roa
Signing time:             Sat 31 Aug 2024 01:43:06 +0000
ROA not before:           Sat 31 Aug 2024 01:43:06 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        14.193.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726 (0x2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:43:06 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=58207F81BCEFD2B5488C5D2C909094E210571311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:28:d5:88:2b:a9:43:d3:84:63:fa:93:f5:
                    1b:95:ca:12:65:95:19:4e:10:c4:0b:bf:ad:5f:ec:
                    cb:88:a6:84:d6:ac:9c:39:ec:23:91:b4:fd:94:63:
                    75:54:10:21:8c:90:bc:56:1e:75:46:ef:2f:dc:7a:
                    e6:2a:01:e4:b0:be:c4:e4:ed:0c:31:8f:6e:f2:d2:
                    5f:62:9c:49:27:60:cc:22:1c:9a:ca:69:b6:3e:af:
                    ad:75:c3:0b:81:57:3a:7f:35:a8:ad:0b:32:a9:f2:
                    ce:15:e3:c8:af:49:c3:87:ee:4e:20:e0:5b:54:7e:
                    07:8d:1b:b5:73:b2:7b:aa:ea:ac:c7:ac:9c:45:32:
                    70:44:09:c1:eb:d2:1f:f7:7c:e4:9e:ab:00:4e:0f:
                    39:80:f8:61:be:45:33:c2:3a:e0:f8:d2:77:e5:a9:
                    bd:49:f0:d9:74:f6:90:ea:94:df:9e:f2:06:25:ef:
                    74:f2:cd:e8:03:15:d0:64:36:11:d6:53:3c:6b:93:
                    a8:93:35:72:9a:04:97:60:81:f4:59:a5:e4:85:f7:
                    5f:c0:a0:c3:69:e4:07:ed:33:5e:3f:fb:fc:96:f8:
                    03:d4:ef:f2:da:13:33:e7:c7:da:91:63:f1:fa:0d:
                    46:64:92:9b:c5:6e:b7:7d:b9:c8:bf:9b:aa:66:51:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:7F:81:BC:EF:D2:B5:48:8C:5D:2C:90:90:94:E2:10:57:13:11
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WCB_gbzv0rVIjF0skJCU4hBXExE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.193.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:ba:fb:10:eb:50:fe:78:df:cc:47:0f:dc:45:b1:45:33:70:
         2f:2e:50:bb:cb:e9:d7:9e:ab:85:9c:28:15:70:d0:6e:f5:4a:
         8e:ba:41:49:90:46:d0:62:f1:80:7a:41:4f:03:6a:34:f7:e2:
         ca:86:a1:26:46:9c:82:93:c4:f3:c3:be:a3:ae:3e:c6:b7:c0:
         88:18:89:90:51:a7:9d:4e:ba:2d:86:f1:61:dc:cd:d8:c8:8a:
         f9:89:ba:b5:c4:65:ef:76:cc:46:cc:88:44:9c:28:e9:76:2d:
         4f:2c:25:dc:da:42:29:1f:fc:ac:fc:90:85:a7:af:fd:7e:d6:
         b8:d6:b0:fa:7d:72:83:85:49:69:29:6b:96:b9:95:22:ef:81:
         35:03:43:6e:18:fd:19:3d:75:f8:dc:7c:cf:63:8e:e3:2c:5b:
         8a:06:2b:0f:03:48:81:73:54:19:0e:b4:df:b0:7f:fd:00:a9:
         fa:c5:80:a4:d8:b2:97:ca:18:1f:0b:3d:17:bc:03:f2:41:c1:
         12:be:48:28:f7:9d:cd:04:b9:58:7a:4f:0e:5e:d0:6a:3c:e2:
         30:5a:18:16:3f:3b:c7:b6:6b:82:ec:14:4d:3c:1d:95:ab:08:
         8c:43:82:07:60:9a:f7:53:02:1a:6d:3d:9d:94:aa:3d:08:00:
         be:5b:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org