Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NANuHtXFbWIxH_OAdersncN8zew.roa
File:                     NANuHtXFbWIxH_OAdersncN8zew.roa (raw, json)
Hash identifier:          4X3xlzFsoz5I/eBMqjJqzJyCORKnME20GgsH1hOA0Xw=
Subject key identifier:   34:03:6E:1E:D5:C5:6D:62:31:1F:F3:80:75:EA:EC:9D:C3:7C:CD:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0386
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NANuHtXFbWIxH_OAdersncN8zew.roa
Signing time:             Tue 30 Apr 2024 02:00:07 +0000
ROA not before:           Tue 30 Apr 2024 02:00:07 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:07 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=34036E1ED5C56D62311FF38075EAEC9DC37CCDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:d4:8b:42:1c:bf:2b:78:2a:bb:5b:23:5c:
                    b6:e7:d6:6c:ab:8d:d3:ef:79:a5:3c:ee:69:67:8b:
                    df:e2:59:60:3c:f9:86:cb:57:19:b8:87:41:5b:fb:
                    8c:61:75:08:aa:96:f7:b7:75:2b:f8:e1:e4:0b:a1:
                    4a:5e:b3:72:a3:5b:3a:af:80:91:78:cd:f9:56:34:
                    d6:51:95:61:80:12:7c:34:9d:07:d2:61:ca:5f:3f:
                    82:7e:71:de:6d:d5:15:bf:60:93:cc:8a:0f:89:b1:
                    75:f6:dd:72:9e:7e:fe:68:67:6d:29:83:eb:62:aa:
                    08:61:37:75:66:17:f4:c6:e5:92:d1:3b:f6:43:f3:
                    d5:e5:e5:92:39:db:86:c8:68:67:5b:22:d4:a4:f3:
                    d7:2a:79:5d:dc:e8:38:6f:4a:97:46:46:8a:c8:03:
                    87:d8:6c:0a:07:08:35:9d:62:94:73:b9:74:30:91:
                    ec:f6:01:19:1b:96:92:ce:a9:25:df:db:33:fc:f6:
                    56:07:8d:67:0a:d7:8e:eb:ef:d6:7e:81:e4:84:fb:
                    4e:0e:d4:fe:a9:f3:9b:eb:91:7e:55:fb:fd:92:c2:
                    ea:f9:88:12:f9:83:3e:aa:22:20:6e:c5:84:17:11:
                    3e:c5:a5:58:16:94:8f:fd:b6:36:d1:14:ae:7d:7a:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:03:6E:1E:D5:C5:6D:62:31:1F:F3:80:75:EA:EC:9D:C3:7C:CD:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NANuHtXFbWIxH_OAdersncN8zew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:10:6d:a1:f0:3d:be:0a:7b:a2:af:7d:78:b1:1d:2d:5d:
         6f:c5:a3:5a:57:55:96:3a:fd:9f:0d:0d:8b:f3:cd:da:89:df:
         67:a6:67:a3:b2:48:25:89:51:ab:e2:43:1f:10:13:56:a9:e5:
         d0:22:46:3e:95:84:25:70:a0:a1:35:b8:55:3d:fa:67:46:da:
         99:83:1b:1f:af:ff:4b:9c:b3:b1:bd:82:ff:f9:f2:6b:37:94:
         15:fe:b7:0e:7b:81:17:d2:52:51:75:6a:1c:73:0e:a5:0e:c8:
         34:27:60:02:d0:79:1f:44:d5:c5:7a:b4:43:06:67:71:f6:4a:
         22:62:d4:8b:50:2e:a6:a1:e9:6a:68:a2:58:cf:c2:d6:b9:78:
         12:86:74:6a:1c:4a:12:80:a9:94:99:49:29:31:8c:97:ae:f5:
         39:20:8f:2f:5c:4a:f3:0f:0d:1e:65:b4:8a:96:75:80:7c:4e:
         7d:88:f2:24:0b:3c:71:15:48:3b:ec:f5:87:26:14:07:db:b7:
         fd:97:ae:9f:9c:63:03:4a:44:2b:63:6f:ea:e8:4c:b7:88:9b:
         b2:95:62:23:74:e4:8a:4c:27:ee:2b:58:9e:c0:fe:ec:86:c2:
         b2:80:9b:d8:1c:6b:35:ad:85:a2:0d:e9:67:b0:f6:40:24:87:
         0a:ce:05:67
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MjAwMDdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM0MDM2RTFFRDVDNTZE
NjIzMTFGRjM4MDc1RUFFQzlEQzM3Q0NERUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxW9SLQhy/K3gqu1sjXLbn1myrjdPveaU87mlni9/iWWA8+YbL
Vxm4h0Fb+4xhdQiqlve3dSv44eQLoUpes3KjWzqvgJF4zflWNNZRlWGAEnw0nQfS
YcpfP4J+cd5t1RW/YJPMig+JsXX23XKefv5oZ20pg+tiqghhN3VmF/TG5ZLRO/ZD
89Xl5ZI524bIaGdbItSk89cqeV3c6DhvSpdGRorIA4fYbAoHCDWdYpRzuXQwkez2
ARkblpLOqSXf2zP89lYHjWcK147r79Z+geSE+04O1P6p85vrkX5V+/2Swur5iBL5
gz6qIiBuxYQXET7FpVgWlI/9tjbRFK59eg1FAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUNANuHtXFbWIxH/OAdersncN8zewwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9OQU51SHRYRmJXSXhIX09BZGVyc25jTjh6ZXcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAcAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBGjxBtofA9vgp7oq99
eLEdLV1vxaNaV1WWOv2fDQ2L883aid9npmejskgliVGr4kMfEBNWqeXQIkY+lYQl
cKChNbhVPfpnRtqZgxsfr/9LnLOxvYL/+fJrN5QV/rcOe4EX0lJRdWoccw6lDsg0
J2AC0HkfRNXFerRDBmdx9koiYtSLUC6moelqaKJYz8LWuXgShnRqHEoSgKmUmUkp
MYyXrvU5II8vXErzDw0eZbSKlnWAfE59iPIkCzxxFUg77PWHJhQH27f9l66fnGMD
SkQrY2/q6Ey3iJuylWIjdOSKTCfuK1iewP7shsKygJvYHGs1rYWiDelnsPZAJIcK
zgVn
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org