Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/NSuX_swEYvf6FqavSBKZ7Ql_ewo.roa
File:                     NSuX_swEYvf6FqavSBKZ7Ql_ewo.roa (raw, json)
Hash identifier:          JfXvSaDI17Yh015mfXfFqZ+txyZ1kJwP2NRaXCyfkSA=
Subject key identifier:   35:2B:97:FE:CC:04:62:F7:FA:16:A6:AF:48:12:99:ED:09:7F:7B:0A
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       02
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/NSuX_swEYvf6FqavSBKZ7Ql_ewo.roa
Signing time:             Thu 11 May 2023 08:25:34 +0000
ROA not before:           Thu 11 May 2023 08:25:34 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:25:34 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=352B97FECC0462F7FA16A6AF481299ED097F7B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6b:e2:75:78:5a:b3:15:c2:e8:2a:90:87:92:
                    e5:37:97:10:76:bc:7a:0e:46:ba:de:c0:62:04:50:
                    48:82:25:a7:bf:98:eb:83:35:8f:af:00:27:f5:6e:
                    df:b2:1b:60:37:03:3b:10:30:d8:b3:c6:26:7b:a6:
                    6a:c5:e0:e1:96:2c:06:d0:0f:eb:0b:97:d0:f4:d8:
                    b8:e5:6f:fa:8e:51:43:c8:9e:d5:bc:49:ea:81:2b:
                    ab:61:28:e6:e8:0b:db:55:8b:5f:43:4a:32:f4:2d:
                    32:ae:bc:90:95:60:9a:9f:38:b2:30:40:d4:a4:13:
                    f9:17:96:7f:01:f9:0c:94:49:d1:30:13:ba:47:b6:
                    45:1c:60:3d:9b:f0:c0:bd:d9:87:96:12:30:1c:03:
                    56:48:0e:dc:5a:2d:d7:aa:74:a4:7d:89:e9:29:6d:
                    6a:ba:c6:20:f1:7f:cb:6a:c3:82:a5:dc:37:1e:c3:
                    01:32:1a:d3:a7:5a:01:c8:79:3a:fe:e9:8a:ba:b1:
                    b0:83:71:1b:61:57:cb:a3:22:0d:c2:d5:1a:23:f6:
                    ab:e6:c4:dc:8b:5f:9b:bc:4f:17:7b:30:b1:63:a7:
                    39:08:bd:cf:f4:80:0b:79:85:e7:93:34:91:cd:11:
                    99:a4:1b:cd:22:3a:fb:d0:15:a6:85:2d:6c:44:62:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2B:97:FE:CC:04:62:F7:FA:16:A6:AF:48:12:99:ED:09:7F:7B:0A
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/NSuX_swEYvf6FqavSBKZ7Ql_ewo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:91:c9:96:04:54:ac:ce:62:6b:ac:b4:d1:8c:af:36:1a:a1:
         e2:bb:0d:96:bf:3f:2c:95:13:65:fb:3a:64:21:7d:49:51:4e:
         96:7f:18:42:4b:a1:a5:db:33:80:e9:53:dd:15:d9:31:74:1f:
         dc:78:64:f0:18:b3:7c:70:48:1e:b2:8a:8c:be:c6:d6:94:66:
         bf:9b:77:c6:8d:aa:d2:10:9f:90:23:89:32:e5:b5:76:58:72:
         2d:04:00:95:68:66:d6:d1:c5:4e:7e:f9:8e:12:f1:55:06:d7:
         0c:0c:fe:37:95:79:60:3b:dd:5e:98:19:3a:b2:1a:0c:d7:5f:
         68:2d:45:d0:17:c7:d8:3d:b3:58:15:7c:e9:ec:8b:54:3b:c4:
         dc:79:b3:8d:6e:3f:b2:9c:62:1f:e7:16:5b:5a:08:f4:d9:39:
         c8:ff:48:14:77:0b:d7:8a:be:ee:8b:8d:89:5e:8d:a8:a7:e0:
         c8:c8:80:3c:e8:2c:2e:dd:1c:03:9e:5c:12:f6:07:20:91:4a:
         34:d4:84:88:5a:e3:4e:33:9b:11:9e:0e:21:ec:12:b6:54:0b:
         29:cd:e4:87:dc:9b:69:85:a4:36:1e:f8:c3:77:ee:9a:71:d3:
         39:12:c7:9b:42:9a:67:c7:4f:fa:57:b7:04:ed:c0:6b:ce:e6:
         e1:a4:be:98
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTIzMDUxMTA4
MjUzNFoXDTI0MDUxMDA4MTkwNVowMzExMC8GA1UEAxMoMzUyQjk3RkVDQzA0NjJG
N0ZBMTZBNkFGNDgxMjk5RUQwOTdGN0IwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOtr4nV4WrMVwugqkIeS5TeXEHa8eg5Gut7AYgRQSIIlp7+Y64M1
j68AJ/Vu37IbYDcDOxAw2LPGJnumasXg4ZYsBtAP6wuX0PTYuOVv+o5RQ8ie1bxJ
6oErq2Eo5ugL21WLX0NKMvQtMq68kJVgmp84sjBA1KQT+ReWfwH5DJRJ0TATuke2
RRxgPZvwwL3Zh5YSMBwDVkgO3Fot16p0pH2J6SltarrGIPF/y2rDgqXcNx7DATIa
06daAch5Ov7pirqxsINxG2FXy6MiDcLVGiP2q+bE3Itfm7xPF3swsWOnOQi9z/SA
C3mF55M0kc0RmaQbzSI6+9AVpoUtbERipA0CAwEAAaOCAiowggImMB0GA1UdDgQW
BBQ1K5f+zARi9/oWpq9IEpntCX97CjAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L05TdVhfc3dFWXZmNkZxYXZTQktaN1FsX2V3by5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAX7AIDANBgkqhkiG9w0BAQsFAAOCAQEAC5HJlgRUrM5ia6y00Yyv
Nhqh4rsNlr8/LJUTZfs6ZCF9SVFOln8YQkuhpdszgOlT3RXZMXQf3Hhk8BizfHBI
HrKKjL7G1pRmv5t3xo2q0hCfkCOJMuW1dlhyLQQAlWhm1tHFTn75jhLxVQbXDAz+
N5V5YDvdXpgZOrIaDNdfaC1F0BfH2D2zWBV86eyLVDvE3HmzjW4/spxiH+cWW1oI
9Nk5yP9IFHcL14q+7ouNiV6NqKfgyMiAPOgsLt0cA55cEvYHIJFKNNSEiFrjTjOb
EZ4OIewStlQLKc3kh9ybaYWkNh74w3fumnHTORLHm0KaZ8dP+le3BO3Aa87m4aS+
mA==
-----END CERTIFICATE-----
Generated at Fri Apr 26 08:25:08 2024 by rpki-client on console-ams.rpki-client.org