Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OL24qLPZHD34H6XJMJaoAe7Efi4.roa
File:                     OL24qLPZHD34H6XJMJaoAe7Efi4.roa (raw, json)
Hash identifier:          E4/e7ShWleRV1wx2hQL0Omkw4EOhWGGmYD5GKokHBig=
Subject key identifier:   38:BD:B8:A8:B3:D9:1C:3D:F8:1F:A5:C9:30:96:A8:01:EE:C4:7E:2E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       034E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OL24qLPZHD34H6XJMJaoAe7Efi4.roa
Signing time:             Sun 31 Mar 2024 01:42:42 +0000
ROA not before:           Sun 31 Mar 2024 01:42:42 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        210.132.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:42:42 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=38BDB8A8B3D91C3DF81FA5C93096A801EEC47E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:b7:d4:5c:38:d1:5b:40:f0:9b:1f:02:ee:
                    94:46:7d:bb:33:ba:35:da:8d:f1:5e:69:a9:c0:57:
                    60:f5:43:7c:00:63:40:c6:32:d4:d0:d8:ff:2c:29:
                    c2:5b:ff:cf:83:7f:b0:0a:0f:1e:0f:ce:16:7d:5c:
                    e8:24:9d:17:0c:87:6f:78:aa:9b:42:c3:cd:fc:12:
                    40:cc:98:f6:78:80:b0:32:ea:97:e3:08:e3:e8:11:
                    c1:07:b4:2f:3d:1f:c2:0d:5c:56:b5:73:af:bd:79:
                    59:d2:49:e2:82:5a:e9:e0:dd:b9:da:03:64:99:b9:
                    b3:bf:e0:14:a9:74:9c:da:e9:c7:d2:7e:e7:76:17:
                    08:25:54:32:92:4c:15:b1:d4:39:b6:e5:14:ed:c1:
                    86:e7:34:96:c4:a3:97:f8:93:5b:a1:77:a6:c4:44:
                    63:c9:06:18:3f:89:bc:87:79:84:18:0f:bd:f4:42:
                    83:60:d5:4e:dc:52:0d:c7:a5:76:7d:cf:1d:19:a3:
                    dd:10:02:43:5a:d0:55:f4:5c:8d:f0:df:22:91:e0:
                    61:33:19:aa:b0:8a:37:3f:64:0f:fc:d1:d8:3f:e1:
                    52:26:c7:d6:7d:57:c1:d8:7c:4c:4d:69:a1:c3:20:
                    2c:26:46:5a:e0:b3:2d:7e:51:dd:e0:b4:8c:68:51:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BD:B8:A8:B3:D9:1C:3D:F8:1F:A5:C9:30:96:A8:01:EE:C4:7E:2E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OL24qLPZHD34H6XJMJaoAe7Efi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:5b:6c:d5:44:43:08:61:ad:b2:e0:77:f2:c1:fa:1a:6b:
         21:27:c4:51:c3:6f:13:e5:a9:fe:6d:60:21:85:a6:97:5c:e9:
         f6:95:c9:22:2f:f9:34:52:1b:e7:33:90:ae:e7:47:58:18:0f:
         ba:c6:c5:41:4f:1d:56:d7:c9:c8:c5:06:3a:10:bd:cc:53:0c:
         e3:0e:cf:66:1c:dc:dd:5c:54:c5:6e:9b:56:4f:9a:6a:69:56:
         5f:b8:d6:32:c3:3f:08:3f:38:01:f2:e8:90:0b:c4:75:76:3f:
         b8:56:8f:f4:19:6f:75:83:cb:e5:61:7e:19:f1:6c:38:db:19:
         f7:36:69:42:46:75:58:f6:a8:21:70:2a:eb:3c:ac:aa:70:08:
         e2:39:59:7f:a7:2a:53:05:31:31:7f:6a:17:57:2f:85:dd:03:
         27:d2:20:f2:2d:e7:4a:af:4d:50:5a:7b:62:16:f6:27:ad:0c:
         a3:3b:f8:58:a7:28:11:88:9c:32:f5:e8:4e:99:32:ad:4f:b7:
         89:cb:ed:ad:f1:01:cb:33:9a:48:9c:0e:d2:ed:0a:a8:95:b5:
         92:fc:ef:79:9d:c0:77:98:56:83:a9:a3:5a:63:31:35:de:5b:
         16:8b:ba:97:f4:b0:3a:8b:bf:07:58:7c:01:b3:9f:4e:1e:a7:
         56:c4:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:26 2024 by rpki-client on console-ams.rpki-client.org