Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/15fWCZxf18AAEawQLI6rKGYgysA.roa
File:                     15fWCZxf18AAEawQLI6rKGYgysA.roa (raw, json)
Hash identifier:          8uxDJLxgGg9FfmO7r3rDfVQO/jk3G2yz4w5aMqZGqvg=
Subject key identifier:   D7:97:D6:09:9C:5F:D7:C0:00:11:AC:10:2C:8E:AB:28:66:20:CA:C0
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0101
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/15fWCZxf18AAEawQLI6rKGYgysA.roa
Signing time:             Thu 01 May 2025 01:32:09 +0000
ROA not before:           Thu 01 May 2025 01:32:09 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 May 2025 03:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:09 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D797D6099C5FD7C00011AC102C8EAB286620CAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:d9:78:f0:76:f8:4c:b8:56:70:fa:5e:5f:
                    24:13:14:5d:21:ee:99:55:61:35:93:db:06:36:c0:
                    5a:e6:16:2e:c9:3a:ff:ea:9f:f8:b8:95:f6:fd:ea:
                    b6:74:e0:78:df:c3:d1:d9:8a:95:71:1e:45:28:0d:
                    fd:b4:2e:d6:c1:44:50:c3:3a:cc:5a:19:c9:52:bf:
                    8d:0f:a6:b1:f1:b8:b8:0d:ab:b4:3e:08:63:f9:54:
                    b0:5a:d7:72:4d:c3:4d:bd:c3:47:97:dc:83:82:98:
                    2a:01:8c:33:0e:75:e5:4f:66:72:d7:62:11:8e:ad:
                    14:9f:09:ac:c5:1d:fc:cd:40:a7:1d:01:81:5a:68:
                    66:96:8d:95:b3:c2:87:e4:1c:08:3b:06:7a:20:e8:
                    83:61:a6:b9:57:47:ca:59:66:7c:e9:bb:f3:93:2c:
                    4c:73:0f:21:73:29:56:32:dd:2a:63:11:70:63:24:
                    df:9f:c6:71:ef:23:39:12:c5:e3:e8:d3:b9:5e:6b:
                    86:e3:cd:ad:85:db:4e:93:86:24:d9:a7:92:12:0c:
                    a7:39:c9:59:6b:f0:eb:40:a7:aa:13:a1:89:ae:df:
                    21:be:d2:ec:46:66:e3:f3:70:68:1f:de:b6:a5:1a:
                    c1:e6:83:40:9f:b8:07:f6:16:a9:83:d9:c0:4b:82:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:97:D6:09:9C:5F:D7:C0:00:11:AC:10:2C:8E:AB:28:66:20:CA:C0
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/15fWCZxf18AAEawQLI6rKGYgysA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:3d:19:f9:ae:fd:7c:52:e4:b5:ac:0e:b2:4f:5b:83:4c:
         57:68:65:86:7a:73:78:20:1b:53:e4:4b:65:3e:bd:ed:9e:ed:
         2e:11:c9:71:ec:da:b8:e2:52:18:40:6b:26:a5:2c:50:c4:84:
         6b:98:1c:5d:26:f6:3b:34:cf:84:7d:a0:17:2f:7c:6f:44:7d:
         32:a6:2d:a3:93:d5:2c:6b:ca:89:f9:be:d5:23:43:f6:b7:fc:
         13:94:b9:ef:09:49:8b:79:30:19:27:df:51:5f:5b:0f:0a:cb:
         b3:e0:91:61:f7:7d:8d:77:35:f2:ac:0a:7e:9f:41:dc:ff:fe:
         ac:65:e1:2f:5f:01:ae:c6:d9:52:15:76:f9:d1:ce:f8:f0:9b:
         ab:02:b6:90:d6:89:67:a3:74:e6:37:76:fc:29:6a:19:b8:03:
         3e:49:4c:8a:b2:3b:a2:41:44:ac:ed:48:68:58:44:8d:4d:62:
         ab:a7:99:ab:f3:18:00:ed:41:09:46:13:ae:25:4e:ae:92:17:
         33:61:2e:02:c7:34:21:42:94:e2:6a:63:72:89:6b:6a:17:df:
         e5:ba:05:a4:08:67:5e:8b:5c:c1:8a:e6:ca:8c:06:98:9e:50:
         df:00:58:30:70:43:51:95:e6:cc:34:61:01:91:53:47:fd:df:
         7f:1f:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 05:54:53 2025 by rpki-client