Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/nzSYTWEplR-uNBrSJ8WKwl40_uI.roa
File:                     nzSYTWEplR-uNBrSJ8WKwl40_uI.roa (raw, json)
Hash identifier:          Ussyc9c6x1F31iVXJGUwJ5tj2vZydlXl5GTHfhIKoGE=
Subject key identifier:   9F:34:98:4D:61:29:95:1F:AE:34:1A:D2:27:C5:8A:C2:5E:34:FE:E2
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       14
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/nzSYTWEplR-uNBrSJ8WKwl40_uI.roa
Signing time:             Tue 05 Mar 2024 15:41:18 +0000
ROA not before:           Tue 05 Mar 2024 15:41:18 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     151381
IP address blocks:        2401:d20:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Mar  5 15:41:18 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=9F34984D6129951FAE341AD227C58AC25E34FEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:f0:5b:05:76:68:2d:fb:44:fe:0c:64:76:
                    f0:53:f1:0f:61:3e:65:2c:27:b8:a6:d8:56:01:67:
                    c3:13:aa:53:e4:dd:fc:94:d1:a1:a9:65:7d:96:27:
                    6f:ce:de:23:5a:1c:3d:a1:a5:08:98:af:a8:77:8b:
                    1e:51:53:d1:20:c6:f7:a7:92:a8:00:98:03:8d:0d:
                    41:75:13:6c:b7:8f:90:d6:e6:54:fc:90:94:66:1b:
                    ea:6d:6b:d4:b9:63:62:52:e5:c0:cd:f1:6d:27:65:
                    22:04:fb:c6:d2:c3:37:10:24:e0:d4:6b:57:c2:64:
                    4a:6f:ab:8a:e0:23:85:c0:33:60:3b:4f:2c:ab:2c:
                    5b:d8:7b:94:7b:24:ef:fe:ce:ff:eb:c0:01:f6:e8:
                    df:42:5c:f6:d4:9c:70:33:de:cd:34:2b:9d:e4:2f:
                    9f:58:20:3b:5f:1a:42:7b:ae:9b:c6:1c:49:84:78:
                    c9:93:55:38:6b:2a:64:24:ba:12:c7:aa:c7:a1:6f:
                    7a:e5:66:0e:1f:e3:e3:e2:08:4f:3f:1e:11:4e:31:
                    3d:fe:8c:8f:03:ac:3e:33:5a:be:a6:71:52:85:66:
                    8a:d0:39:d2:12:ee:e4:9b:ad:87:cb:37:6d:af:1e:
                    2e:95:09:ae:5b:53:a0:35:2a:ad:9c:91:38:6f:14:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:34:98:4D:61:29:95:1F:AE:34:1A:D2:27:C5:8A:C2:5E:34:FE:E2
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/nzSYTWEplR-uNBrSJ8WKwl40_uI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:61:74:31:20:97:68:7b:f9:3d:d5:aa:60:ab:23:2c:21:98:
         e1:0b:ef:4f:f3:66:4c:a9:be:5e:7a:fa:9f:e0:4d:b7:ba:d6:
         4e:47:34:8e:45:1c:45:62:7e:2f:4a:5a:80:4f:61:54:91:8a:
         9b:21:67:af:2a:1e:23:61:46:bd:29:f8:1c:1b:dd:3a:2c:89:
         07:d0:7d:ee:5e:a3:25:03:dc:fe:56:18:08:5c:6b:61:65:00:
         8c:67:ef:0f:fa:98:69:5a:14:36:a9:45:02:75:ad:ba:e7:3e:
         dc:5d:0e:7c:ec:ff:f7:43:4e:d5:6f:ae:f0:ea:fc:4b:1a:83:
         08:51:7c:de:c1:43:2c:32:f0:20:c6:66:a6:2e:20:c2:79:71:
         f4:ab:64:3e:83:9e:0b:6f:61:0a:1f:ab:14:16:fc:78:1d:c7:
         04:a5:da:42:ad:e4:e2:eb:f7:f2:85:76:59:5f:63:39:dc:28:
         8a:e3:1e:92:24:af:82:4d:3c:7b:c4:6e:85:6a:c9:9c:f0:8f:
         14:88:4e:3a:91:e8:ac:45:ba:06:f4:74:86:8d:9e:21:86:73:
         eb:33:0b:40:c4:4f:e0:9c:9d:c7:7c:3f:2c:38:02:d3:8d:20:
         88:53:6f:6e:80:b0:63:35:62:ef:28:42:bd:af:93:bb:86:e2:
         e0:bb:ac:68
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw
QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI0MDMwNTE1
NDExOFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoOUYzNDk4NEQ2MTI5OTUx
RkFFMzQxQUQyMjdDNThBQzI1RTM0RkVFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMHQ8FsFdmgt+0T+DGR28FPxD2E+ZSwnuKbYVgFnwxOqU+Td/JTR
oallfZYnb87eI1ocPaGlCJivqHeLHlFT0SDG96eSqACYA40NQXUTbLePkNbmVPyQ
lGYb6m1r1LljYlLlwM3xbSdlIgT7xtLDNxAk4NRrV8JkSm+riuAjhcAzYDtPLKss
W9h7lHsk7/7O/+vAAfbo30Jc9tSccDPezTQrneQvn1ggO18aQnuum8YcSYR4yZNV
OGsqZCS6Eseqx6FveuVmDh/j4+IITz8eEU4xPf6MjwOsPjNavqZxUoVmitA50hLu
5Juth8s3ba8eLpUJrltToDUqrZyROG8UHEECAwEAAaOCAiowggImMB0GA1UdDgQW
BBSfNJhNYSmVH640GtInxYrCXjT+4jAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq
br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x
X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDIzL256U1lUV0VwbFItdU5CclNKOFdLd2w0MF91SS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAQ0gIDANBgkqhkiG9w0BAQsFAAOCAQEAFmF0MSCXaHv5PdWqYKsj
LCGY4QvvT/NmTKm+Xnr6n+BNt7rWTkc0jkUcRWJ+L0pagE9hVJGKmyFnryoeI2FG
vSn4HBvdOiyJB9B97l6jJQPc/lYYCFxrYWUAjGfvD/qYaVoUNqlFAnWtuuc+3F0O
fOz/90NO1W+u8Or8SxqDCFF83sFDLDLwIMZmpi4gwnlx9KtkPoOeC29hCh+rFBb8
eB3HBKXaQq3k4uv38oV2WV9jOdwoiuMekiSvgk08e8RuhWrJnPCPFIhOOpHorEW6
BvR0ho2eIYZz6zMLQMRP4Jydx3w/LDgC040giFNvboCwYzVi7yhCva+Tu4bi4Lus
aA==
-----END CERTIFICATE-----
Generated at Thu Jun 13 17:53:30 2024 by rpki-client on console-ams.rpki-client.org