Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/wOHF0tARKnTN5GY6XyQdUogbdL4.roa
File:                     wOHF0tARKnTN5GY6XyQdUogbdL4.roa (raw, json)
Hash identifier:          4FJY9kzxDtWK1wbamugUas76xGxbS/8HNTu5fKfBsgA=
Subject key identifier:   C0:E1:C5:D2:D0:11:2A:74:CD:E4:66:3A:5F:24:1D:52:88:1B:74:BE
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       3D
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/wOHF0tARKnTN5GY6XyQdUogbdL4.roa
Signing time:             Thu 28 Mar 2024 08:35:42 +0000
ROA not before:           Thu 28 Mar 2024 08:35:42 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2519
IP address blocks:        203.79.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:35:42 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=C0E1C5D2D0112A74CDE4663A5F241D52881B74BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:21:5d:16:a5:ae:06:de:45:5e:d0:ec:34:
                    d0:21:ea:6f:b5:89:f8:41:12:39:19:23:8e:99:43:
                    92:45:90:e0:02:88:11:34:f5:3d:56:c8:10:d2:8a:
                    c4:df:1e:20:bb:3c:d0:18:b9:0b:44:97:9a:c1:13:
                    6e:81:3f:05:9d:5d:8e:8d:2e:67:3c:83:d4:52:31:
                    1d:3e:56:af:b2:7e:d2:a4:bf:97:ae:5e:0f:e8:10:
                    60:7f:28:b4:15:e6:af:c6:9e:9c:87:af:8a:86:51:
                    04:d5:35:ac:37:04:cc:3c:16:47:cc:a6:1c:36:32:
                    70:4a:64:26:b6:8e:e7:75:c6:ad:37:ee:df:87:dd:
                    8f:29:1f:67:08:b3:f2:50:53:d0:e6:e2:10:cc:2b:
                    1e:62:6e:2b:77:76:fd:1f:93:aa:68:e0:b3:24:0b:
                    33:14:43:ea:1b:a4:a2:9e:b1:9e:ad:64:01:c2:35:
                    71:7d:6e:7b:8e:a5:41:b0:e4:8f:e7:b0:d3:8c:72:
                    04:23:5a:a7:89:4d:9c:10:f2:3a:53:38:41:1a:2e:
                    a6:26:fa:24:33:0c:f9:eb:da:c0:c7:3d:e0:3a:8e:
                    9f:71:bd:18:dd:a7:7e:96:42:b1:84:27:66:f0:b4:
                    47:0d:90:ab:d0:e9:35:06:fa:42:56:63:4a:fe:ae:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E1:C5:D2:D0:11:2A:74:CD:E4:66:3A:5F:24:1D:52:88:1B:74:BE
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/wOHF0tARKnTN5GY6XyQdUogbdL4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:29:2d:58:4e:ca:14:1b:24:77:be:8d:4d:77:d0:88:6c:
         27:bb:fc:16:c3:6e:f0:fa:ac:ca:84:5a:25:5a:30:2c:22:70:
         0e:0a:6e:52:8a:8e:50:43:88:eb:30:81:6f:bb:a5:e4:40:07:
         b0:f7:90:19:cc:26:56:ea:fb:44:74:ef:6c:50:0d:99:5f:2c:
         22:2a:02:91:ad:19:4a:2e:85:8e:a0:0a:64:39:ad:17:6a:5c:
         f6:4b:aa:bc:82:61:b8:25:da:35:e1:df:bd:ce:9b:23:d1:cf:
         3a:da:29:d3:2e:93:dd:af:35:c9:2e:97:0c:46:15:9e:f5:53:
         05:b1:2d:28:16:2a:52:b7:da:d8:65:c6:9d:0f:1b:b3:b7:e1:
         3a:1f:f7:71:91:82:f1:0d:ad:40:54:b4:19:ec:ab:eb:16:c0:
         36:3e:d9:a7:6f:df:77:54:3c:91:07:b7:cf:f5:e3:6b:c9:82:
         6d:3c:f5:d1:d6:5e:fe:b5:65:47:e4:0e:c3:0b:79:34:0e:be:
         bb:d0:7c:85:62:c6:a4:03:3b:f9:35:a3:d1:6e:84:f7:72:08:
         f6:28:13:ed:73:9f:9d:9b:76:11:6b:20:b0:8c:54:b2:96:b7:
         e9:b7:16:f8:69:44:03:0f:55:f3:b6:e8:a5:33:10:de:b7:b5:
         ed:99:ff:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org