Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/JXoHXCe5Nl2QOIxTHGHeXCl7AMU.roa
File:                     JXoHXCe5Nl2QOIxTHGHeXCl7AMU.roa (raw, json)
Hash identifier:          bGRYfjyphRAMh+sVFUcVKmqsHQGz0JXnqHPbJTsD36M=
Subject key identifier:   25:7A:07:5C:27:B9:36:5D:90:38:8C:53:1C:61:DE:5C:29:7B:00:C5
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0107
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/JXoHXCe5Nl2QOIxTHGHeXCl7AMU.roa
Signing time:             Thu 01 May 2025 01:32:11 +0000
ROA not before:           Thu 01 May 2025 01:32:11 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        36.53.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 22:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:11 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=257A075C27B9365D90388C531C61DE5C297B00C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:06:c8:d3:73:07:cc:c4:70:bf:17:93:c7:
                    c8:f5:ac:dc:c0:3d:d2:ad:42:01:76:46:d5:96:38:
                    d1:c7:99:cf:99:15:43:cf:21:fd:1c:64:82:d5:10:
                    a8:b8:a0:0b:74:23:95:d2:e7:1a:bf:81:11:a7:a3:
                    22:c1:e5:99:10:70:fd:3d:ea:c6:df:8d:20:f8:11:
                    f3:d7:43:12:19:fa:ba:cb:27:e9:c8:05:20:c9:12:
                    68:ee:7f:62:e9:3a:2b:86:70:45:67:8c:a2:b4:35:
                    c2:5d:be:e8:ef:73:26:f7:b6:d9:92:fb:f6:43:46:
                    14:3d:fa:a7:dc:5c:d8:8f:f8:29:f6:7d:b9:12:80:
                    3b:3f:16:1e:54:32:75:5f:c8:05:42:00:2c:a6:33:
                    6c:c6:49:26:62:0d:89:a3:6a:6b:1b:fd:3d:3c:74:
                    ed:5e:f3:3f:82:20:68:e4:6e:b0:21:dc:3f:d8:e8:
                    3a:ed:90:71:bf:98:4c:9e:99:1f:65:4f:eb:a9:05:
                    d7:71:5a:4b:30:c5:fd:a7:6a:3b:f1:df:b5:e3:fd:
                    31:4c:16:1e:ab:11:90:fb:b8:d0:65:3b:ff:be:06:
                    a0:1c:26:a2:ad:4e:a5:6d:f5:9c:a8:52:ac:c6:3b:
                    53:9e:81:b1:7a:27:3e:e3:3b:52:52:c4:73:74:52:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:07:5C:27:B9:36:5D:90:38:8C:53:1C:61:DE:5C:29:7B:00:C5
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/JXoHXCe5Nl2QOIxTHGHeXCl7AMU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:a8:3f:4f:da:b6:0a:63:3a:ae:81:43:76:4f:15:a6:37:
         64:85:ec:85:3c:17:55:59:85:93:d1:cd:c4:88:b3:86:08:cf:
         82:3c:43:44:03:5f:f5:ff:f1:06:f0:37:43:dc:88:c9:d5:f5:
         19:b3:d5:7b:86:8b:af:75:40:61:e0:14:3e:ee:6b:e8:bd:c5:
         84:93:79:8e:b4:e5:19:9a:4b:c1:b5:9c:1a:10:ab:6f:4b:63:
         72:40:6b:6c:57:75:b5:00:50:09:eb:ad:ce:96:21:3f:1e:f1:
         d3:99:f1:32:76:9f:6c:ba:f9:d9:ab:a6:46:39:79:6e:08:76:
         fc:fa:55:fa:d0:8f:80:45:0b:bf:6f:1f:59:1e:2b:23:24:92:
         b2:16:26:bc:b7:50:ce:29:ca:f1:b3:f3:fa:ef:c2:ee:b9:91:
         57:8f:18:c7:c4:fd:46:ef:36:45:9c:6b:77:43:c5:ae:ed:74:
         26:4c:c6:0d:ce:29:12:02:6a:73:37:64:0a:39:4a:d2:f3:61:
         40:32:1b:e9:28:12:84:48:2e:4e:03:34:4e:3c:2d:01:e6:f0:
         50:dd:cf:81:bc:b0:fa:b0:5b:1d:34:f3:ac:80:c5:6f:e7:7b:
         f9:38:cc:49:73:7a:0a:f7:45:9b:80:ed:07:a3:18:8d:ab:c4:
         32:63:ab:b2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw
MTMyMTFaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDI1N0EwNzVDMjdCOTM2
NUQ5MDM4OEM1MzFDNjFERTVDMjk3QjAwQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGCgbI03MHzMRwvxeTx8j1rNzAPdKtQgF2RtWWONHHmc+ZFUPP
If0cZILVEKi4oAt0I5XS5xq/gRGnoyLB5ZkQcP096sbfjSD4EfPXQxIZ+rrLJ+nI
BSDJEmjuf2LpOiuGcEVnjKK0NcJdvujvcyb3ttmS+/ZDRhQ9+qfcXNiP+Cn2fbkS
gDs/Fh5UMnVfyAVCACymM2zGSSZiDYmjamsb/T08dO1e8z+CIGjkbrAh3D/Y6Drt
kHG/mEyemR9lT+upBddxWkswxf2najvx37Xj/TFMFh6rEZD7uNBlO/++BqAcJqKt
TqVt9ZyoUqzGO1OegbF6Jz7jO1JSxHN0UmRJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJXoHXCe5Nl2QOIxTHGHeXCl7AMUwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L0pYb0hYQ2U1TmwyUU9JeFRIR0hlWENsN0FNVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYkNYAwDQYJKoZIhvcNAQELBQADggEBADbqqD9P2rYKYzqugUN2TxWmN2SF
7IU8F1VZhZPRzcSIs4YIz4I8Q0QDX/X/8QbwN0PciMnV9Rmz1XuGi691QGHgFD7u
a+i9xYSTeY605RmaS8G1nBoQq29LY3JAa2xXdbUAUAnrrc6WIT8e8dOZ8TJ2n2y6
+dmrpkY5eW4Idvz6VfrQj4BFC79vH1keKyMkkrIWJry3UM4pyvGz8/rvwu65kVeP
GMfE/UbvNkWca3dDxa7tdCZMxg3OKRICanM3ZAo5StLzYUAyG+koEoRILk4DNE48
LQHm8FDdz4G8sPqwWx0086yAxW/ne/k4zElzegr3RZuA7QejGI2rxDJjq7I=
-----END CERTIFICATE-----
Generated at Sat May 17 02:37:28 2025 by rpki-client