Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/WGXIchGcjd5cQse2Z6_ffmAzktw.roa
File:                     WGXIchGcjd5cQse2Z6_ffmAzktw.roa (raw, json)
Hash identifier:          J3N7Uxe6uTaitQlt2PU43FMb5/sw+L/OJNBBcZJ29yI=
Subject key identifier:   58:65:C8:72:11:9C:8D:DE:5C:42:C7:B6:67:AF:DF:7E:60:33:92:DC
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       1E
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/WGXIchGcjd5cQse2Z6_ffmAzktw.roa
Signing time:             Fri 01 Dec 2023 05:36:32 +0000
ROA not before:           Fri 01 Dec 2023 05:36:32 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     55385
IP address blocks:        133.247.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Dec  1 05:36:32 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=5865C872119C8DDE5C42C7B667AFDF7E603392DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:7d:21:40:4e:71:e2:6b:b8:dc:ea:a6:af:
                    bc:59:73:58:e4:5c:2b:bc:64:b9:f6:20:bc:4b:29:
                    4b:df:64:96:4d:b0:28:b4:eb:0f:b3:6b:87:14:54:
                    07:84:75:b8:c9:cf:9d:13:9c:95:00:8b:5f:06:1e:
                    e6:e8:1c:07:42:2c:5e:d8:7d:f6:93:3c:f5:8e:27:
                    eb:de:16:44:4e:12:1d:4c:cd:34:dd:52:bc:2e:90:
                    76:69:93:0c:05:ce:01:25:29:7d:e6:7f:6f:da:c9:
                    41:11:29:1a:64:ba:bd:d8:5c:2b:87:d9:b7:2f:bf:
                    fc:ad:72:1f:dd:28:ab:14:81:a5:0b:9d:4c:94:4f:
                    5a:8b:f4:db:4e:d4:79:6a:c4:04:0c:42:fa:06:3d:
                    7f:a6:9d:bc:5e:47:76:6f:2b:ad:be:fa:64:33:d3:
                    6c:4b:8b:41:89:8c:51:53:3c:e5:fe:d5:32:e1:28:
                    14:ad:54:a9:c6:90:e1:c1:08:8b:22:2b:18:50:e2:
                    df:e2:60:5b:4e:67:83:f9:53:54:cb:e6:9c:aa:1e:
                    ea:36:84:17:2f:83:38:b5:67:9e:ff:1a:ae:ae:88:
                    32:39:14:1d:6d:e8:d1:97:58:a6:11:04:e1:c8:cf:
                    ea:1b:f7:fa:21:df:3e:ef:52:42:cb:72:5a:02:8e:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:65:C8:72:11:9C:8D:DE:5C:42:C7:B6:67:AF:DF:7E:60:33:92:DC
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/WGXIchGcjd5cQse2Z6_ffmAzktw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:db:a9:22:88:14:10:b3:ff:21:8b:f2:d8:e2:d9:b4:3e:
         cb:fa:2b:0c:70:2a:b8:06:e4:70:bb:6f:bc:53:5e:02:fd:ac:
         99:97:2a:6b:25:4d:84:f3:ae:b6:a8:71:6b:84:fe:8d:bc:41:
         78:84:a9:2e:b9:8f:77:9d:a3:79:01:07:9c:81:49:c6:30:a8:
         9c:d8:7b:84:0a:c1:97:97:4d:91:b2:68:d1:b0:9c:e3:2f:83:
         dc:4a:ac:16:30:77:7e:8f:ab:11:ed:58:a9:09:8d:09:82:52:
         43:9a:ec:81:3c:3b:ff:33:e1:95:01:89:9d:8b:38:17:84:29:
         b4:47:59:1c:e1:a8:b4:d1:57:ef:dc:fa:17:2e:7f:e9:5e:55:
         de:7a:5d:00:7a:c3:ab:44:b2:c8:48:85:89:35:59:44:96:24:
         b0:05:1f:7b:1f:16:00:1b:d4:a5:cc:d6:5e:c3:03:54:de:4f:
         2d:e2:e1:03:fa:63:a5:7a:a1:82:cd:a5:33:ed:7b:f7:44:f7:
         72:08:1f:4b:c0:3c:f6:3a:91:19:96:ae:d5:ab:4f:a3:7d:06:
         68:26:32:d2:61:f9:ad:bb:ce:18:72:e7:b7:80:00:38:fd:72:
         b3:a5:3c:c3:6e:e7:f8:0a:3d:0d:32:36:83:36:ff:d7:7c:75:
         d2:f5:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:52 2024 by rpki-client on console-ams.rpki-client.org