Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/_qPsAFn6vuTNScjfiwe84TWvjTo.roa
File:                     _qPsAFn6vuTNScjfiwe84TWvjTo.roa (raw, json)
Hash identifier:          GiJ8m6uFRPL6qIzyLNRfqI5Bv4fc2I8GUz9uBsZuw/k=
Subject key identifier:   FE:A3:EC:00:59:FA:BE:E4:CD:49:C8:DF:8B:07:BC:E1:35:AF:8D:3A
Certificate issuer:       /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Certificate serial:       1D
Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/_qPsAFn6vuTNScjfiwe84TWvjTo.roa
Signing time:             Wed 31 Jul 2024 01:29:43 +0000
ROA not before:           Wed 31 Jul 2024 01:29:43 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        122.129.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
        Validity
            Not Before: Jul 31 01:29:43 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=FEA3EC0059FABEE4CD49C8DF8B07BCE135AF8D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:ad:99:fd:4f:31:21:e1:32:48:96:6f:81:
                    a2:ff:77:7b:ec:42:52:8b:39:1c:15:49:8c:51:dc:
                    f3:3b:50:81:0e:bc:9d:6b:d1:5c:c3:b7:59:6e:5b:
                    6f:37:dc:8b:c1:a6:e0:52:f8:d9:f5:ea:04:12:79:
                    ea:d7:37:a8:01:a1:fa:ed:24:d5:94:34:cf:75:0c:
                    95:60:10:26:56:5a:7e:72:fb:23:0e:8a:77:7a:4c:
                    96:9b:af:5e:27:5b:51:23:b9:90:2c:56:b9:48:e5:
                    50:44:43:a9:46:68:bb:64:37:ff:86:aa:cf:9f:f5:
                    cc:38:74:27:48:8b:ba:3f:e9:d6:c4:73:4d:99:47:
                    0d:d5:f2:72:c0:3f:90:51:f1:9f:e2:2d:ee:5e:7c:
                    80:3d:7c:9c:f5:49:0a:d0:27:29:1d:f3:fa:cc:65:
                    f7:33:40:12:1f:18:5c:77:f9:d8:ff:4a:bc:27:b4:
                    03:d3:e9:eb:96:c5:33:b2:d9:07:35:d3:76:33:16:
                    79:ef:95:5b:36:67:5c:04:ea:f8:9b:58:48:54:ea:
                    6a:e4:95:d2:98:14:a8:2b:8c:f5:66:cd:12:df:da:
                    e1:e8:77:53:a1:63:50:c1:f5:06:97:f5:2e:d4:8c:
                    5e:24:d5:27:08:09:9c:88:c2:ce:5d:78:f7:79:49:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A3:EC:00:59:FA:BE:E4:CD:49:C8:DF:8B:07:BC:E1:35:AF:8D:3A
            X509v3 Authority Key Identifier:
                keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/_qPsAFn6vuTNScjfiwe84TWvjTo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.129.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:33:1a:ea:59:5b:20:d6:0d:ea:c3:31:01:6b:e9:9b:a9:84:
         54:4a:c8:f5:b3:b9:6b:94:6c:a8:87:f6:1f:33:45:e7:cb:2c:
         86:bb:96:93:60:2c:59:21:58:12:d6:11:3e:30:68:f9:1f:fe:
         90:e8:65:87:b0:27:d2:29:fb:c6:05:9c:98:ed:b4:29:0c:ab:
         ce:1a:66:6d:2e:d6:8f:eb:ad:e1:2d:06:fb:97:33:2c:46:71:
         b3:d4:40:d4:95:3a:62:e2:fc:3d:f0:9d:7b:5f:c1:a8:56:23:
         69:0a:90:b1:d9:bc:20:f8:23:36:95:55:fc:7f:32:35:8c:30:
         db:ed:a4:67:19:1c:f1:af:50:d3:62:f3:4d:87:92:cd:2b:2d:
         f9:92:ce:fd:fa:6d:a2:a7:04:dd:d4:9c:bd:35:89:a8:9d:a3:
         66:55:3e:0f:2e:a3:42:58:df:66:9f:43:f6:ba:bc:0b:1b:d7:
         d1:7b:71:99:62:1c:b6:33:84:6e:0c:dc:3b:d5:19:2d:66:0b:
         7c:61:c1:eb:2a:f7:41:ad:35:66:6f:59:60:fe:e4:c5:16:93:
         16:c1:7e:0d:e3:15:c3:42:00:c7:7c:68:20:0f:5b:61:d6:e9:
         ab:08:f9:ad:60:c0:d8:fa:9a:2d:12:4b:f9:06:c2:62:34:75:
         8b:59:ad:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org