Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/OLM-6ndhoH3nySzSPfaAv8M2rao.roa
File:                     OLM-6ndhoH3nySzSPfaAv8M2rao.roa (raw, json)
Hash identifier:          abHa/QOEl7v1ogzne+94im5OcuE+nCaOheIeyaOmSnQ=
Subject key identifier:   38:B3:3E:EA:77:61:A0:7D:E7:C9:2C:D2:3D:F6:80:BF:C3:36:AD:AA
Certificate issuer:       /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Certificate serial:       21
Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/OLM-6ndhoH3nySzSPfaAv8M2rao.roa
Signing time:             Wed 31 Jul 2024 01:29:46 +0000
ROA not before:           Wed 31 Jul 2024 01:29:46 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        219.122.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
        Validity
            Not Before: Jul 31 01:29:46 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=38B33EEA7761A07DE7C92CD23DF680BFC336ADAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:c7:3e:72:95:30:8a:bc:6c:25:4e:99:c1:
                    b1:91:ca:ec:57:de:e4:aa:7a:de:18:34:17:77:1a:
                    7e:2a:d9:1a:19:d9:16:b5:4f:37:2b:c1:dc:c5:8c:
                    5d:96:b7:6a:95:41:f2:47:16:0d:87:ce:9d:70:3a:
                    39:6f:3c:18:23:12:68:45:95:1b:7e:d6:35:fe:cd:
                    ca:29:2c:6a:8f:f5:76:ce:39:49:e3:44:66:9f:91:
                    d6:84:9a:62:01:e3:e7:d8:bc:f8:29:fd:a9:f2:09:
                    d2:c6:8a:44:6d:a9:ab:f5:99:cd:ae:29:71:8e:10:
                    8b:ae:1c:7f:c9:f5:56:e7:e4:90:cf:75:63:b5:a8:
                    b9:27:72:f3:33:83:76:71:f0:0a:c5:ff:85:62:91:
                    18:e3:36:40:ec:e6:4a:bb:a9:b5:6b:0a:a9:30:43:
                    42:7b:25:bc:04:ed:5b:73:d3:42:80:55:96:58:4a:
                    bf:d0:89:d5:f8:5d:52:fb:46:4b:97:b3:36:c0:f2:
                    44:41:52:f2:82:89:73:9e:16:d0:6a:60:95:19:63:
                    fd:99:45:b7:75:22:d2:f4:fe:cd:d6:47:20:8e:1e:
                    18:1a:22:ae:9c:73:5d:ad:b5:3a:47:a8:73:ac:13:
                    ed:0d:6f:a2:fd:56:90:35:78:2a:8b:45:b4:a0:a7:
                    23:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B3:3E:EA:77:61:A0:7D:E7:C9:2C:D2:3D:F6:80:BF:C3:36:AD:AA
            X509v3 Authority Key Identifier:
                keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/OLM-6ndhoH3nySzSPfaAv8M2rao.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:15:5d:40:29:99:c6:9a:0f:1b:13:8c:65:47:e2:00:fb:eb:
         47:4c:4c:ca:e6:ea:3d:e6:1f:31:bb:63:1a:d0:a2:c5:6a:24:
         e1:7d:25:d6:68:5e:66:bd:41:85:93:ce:60:fd:1a:a8:b9:9c:
         a3:9a:9c:01:bc:34:ce:6e:6f:c1:01:87:84:ae:36:6e:9d:62:
         e3:a9:ee:ff:2e:85:36:cd:9d:e0:4f:c5:57:9c:35:3d:b7:c1:
         43:c1:0e:b0:74:c2:de:0d:ea:a2:83:71:47:01:01:1f:88:bc:
         7c:93:22:e5:4a:7c:8e:17:87:75:b8:33:0f:e2:6c:a7:cc:66:
         b0:84:24:1c:f9:af:ee:d7:b9:3d:d3:3f:c6:5a:8b:5b:08:0e:
         31:cb:72:30:b0:59:2c:b2:4f:7c:90:2f:c4:c3:c4:d2:61:ac:
         5f:21:af:a6:cc:84:e4:9c:c2:96:ef:b0:75:02:ea:01:73:92:
         66:41:db:51:fc:77:e3:bf:db:0d:82:c7:ee:68:16:d6:68:94:
         bd:2c:f0:16:88:7c:f2:74:35:94:e4:58:67:7c:3a:e1:f3:74:
         cf:25:df:ae:5d:eb:75:43:df:2d:49:3b:23:38:b4:bd:8b:b7:
         b7:08:73:82:14:37:4a:1e:e1:a4:a1:ce:cc:ca:ed:d6:61:e0:
         0b:7d:de:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org