Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/R6iVdx4UfcFYALJpTJoh7uZh_3U.roa
File:                     R6iVdx4UfcFYALJpTJoh7uZh_3U.roa (raw, json)
Hash identifier:          Qw+j8BTYK04PlMMlVDgfvow0GLGYrRlcouc7mypgq/w=
Subject key identifier:   47:A8:95:77:1E:14:7D:C1:58:00:B2:69:4C:9A:21:EE:E6:61:FF:75
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       010B
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/R6iVdx4UfcFYALJpTJoh7uZh_3U.roa
Signing time:             Thu 01 May 2025 01:32:13 +0000
ROA not before:           Thu 01 May 2025 01:32:13 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:13 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=47A895771E147DC15800B2694C9A21EEE661FF75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:b2:29:6b:b9:c0:c7:28:2f:03:a2:dd:f3:
                    3f:d0:38:f2:40:1a:b7:84:ef:97:b5:00:7b:c4:3d:
                    37:49:19:d8:cd:ce:90:ba:ea:9b:b5:c9:9f:13:07:
                    fe:ef:39:7a:42:18:0b:43:6a:b3:c5:86:18:64:db:
                    0c:3c:b5:fa:89:ea:4b:47:e9:bf:4f:d8:bc:43:61:
                    55:d1:fe:2e:ed:7b:d0:3b:1e:fc:0b:58:2d:6e:b9:
                    02:7f:5a:e1:f4:24:6b:c2:45:05:df:6c:b2:d9:82:
                    d0:66:f4:39:b0:72:63:49:70:59:10:db:b9:c1:3b:
                    3f:61:9b:80:d8:9f:2f:f8:de:e4:0e:f6:ee:f7:70:
                    58:b4:85:a8:81:b0:7f:ec:aa:b3:e2:2d:c0:f5:12:
                    d3:9c:cb:15:76:50:38:a6:bb:dc:d1:5e:f2:c5:45:
                    b1:2e:9a:7f:09:e6:8d:a7:59:cb:48:ae:27:f6:ea:
                    a8:1b:d1:32:2d:68:1f:3e:54:49:0a:bf:6e:e1:1c:
                    29:55:15:9d:41:37:41:13:4d:93:31:a2:7f:60:70:
                    8c:35:45:0f:72:e1:2f:53:0e:53:df:56:fc:d8:85:
                    59:8c:e1:a4:48:e5:60:da:89:97:2d:68:43:87:4a:
                    17:51:8b:e8:ff:d2:46:67:c2:4d:a3:e6:7f:b4:b2:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A8:95:77:1E:14:7D:C1:58:00:B2:69:4C:9A:21:EE:E6:61:FF:75
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/R6iVdx4UfcFYALJpTJoh7uZh_3U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:eb:cc:74:d3:b1:0e:78:68:d2:cc:c6:31:1a:5c:13:4a:
         92:fd:ed:64:b6:e2:ac:d0:d0:44:2d:47:a0:89:59:83:b4:21:
         2a:5b:8f:eb:17:91:c2:f8:0a:6d:28:d6:54:35:6f:e4:cb:ac:
         8d:09:89:ee:e7:52:ce:f6:e4:b7:63:84:7e:b6:f8:2d:79:63:
         2a:12:ff:8e:2e:45:00:b5:89:ff:2b:65:75:88:9f:8e:6c:1d:
         5a:3c:dd:3c:af:45:72:e4:69:6b:65:0c:82:f8:32:c1:cf:f7:
         ce:cd:95:08:82:59:94:84:1a:67:9c:5c:7e:85:32:71:c1:45:
         f4:be:77:84:54:a6:b6:d0:ae:e6:dc:26:be:ee:be:b7:ef:9b:
         db:60:03:26:fd:6b:e7:4c:74:35:13:11:a8:cd:af:c3:46:a8:
         db:d5:e5:db:8e:22:0f:81:2f:7e:41:ef:0b:95:a3:2e:8e:27:
         d1:b0:d4:0b:13:3e:45:19:89:42:b1:17:4a:bd:f6:36:15:6c:
         36:a8:e9:91:e8:ac:88:e0:39:b3:d2:74:dd:97:85:a7:e8:75:
         93:30:43:06:c2:b9:23:bd:23:b3:c6:ac:4d:f1:5d:ab:e3:09:
         8f:ad:f0:77:41:ac:94:a3:43:00:50:f2:5f:43:62:a0:e1:90:
         b7:c9:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:05:11 2025 by rpki-client