Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/alplPzD69rwqCHkbVoJ2jw64Tp8.roa
File:                     alplPzD69rwqCHkbVoJ2jw64Tp8.roa (raw, json)
Hash identifier:          R7iU0tbEXo3A9DZuo0ZbSt837CTNHAhfb5UrU34T/h0=
Subject key identifier:   6A:5A:65:3F:30:FA:F6:BC:2A:08:79:1B:56:82:76:8F:0E:B8:4E:9F
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0111
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/alplPzD69rwqCHkbVoJ2jw64Tp8.roa
Signing time:             Thu 01 May 2025 01:32:17 +0000
ROA not before:           Thu 01 May 2025 01:32:17 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May  1 01:32:17 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=6A5A653F30FAF6BC2A08791B5682768F0EB84E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:70:c3:f9:af:2d:a9:50:ad:3f:67:e1:1d:
                    5e:78:cb:7a:7d:42:12:3e:de:2a:06:b7:f9:01:4f:
                    5a:1c:d1:bf:47:64:cc:31:0a:a2:f2:6d:60:52:a3:
                    d0:e3:2e:ac:b1:a1:78:d2:b3:2b:df:47:0d:a5:16:
                    83:ad:f7:52:30:11:0c:c4:e9:e7:57:b7:b6:a6:c7:
                    d9:0f:e2:fa:de:47:5f:5f:4b:32:b1:32:5a:96:c1:
                    be:ce:c2:f2:46:ad:08:a9:78:6e:14:50:c1:4b:48:
                    27:01:d4:ee:00:f5:1c:6c:af:60:9f:a4:95:02:95:
                    8c:12:c4:30:53:a6:3d:cb:2e:ef:62:00:7c:5c:41:
                    31:90:ad:6d:f0:bb:a6:05:04:2b:ac:15:c7:98:98:
                    d1:a2:05:24:45:14:46:12:36:62:24:ff:e3:07:31:
                    c0:1f:cf:37:a7:50:e3:ff:53:ab:09:37:16:80:df:
                    89:7d:87:98:3d:d0:b1:50:ca:49:a2:ee:87:ad:e7:
                    8d:ec:7a:40:34:7a:14:39:4e:e7:19:09:ad:95:c0:
                    65:6c:94:d4:25:9a:0e:bd:b8:d3:3c:e2:c8:42:1c:
                    3d:bc:3b:7e:5e:42:6b:b9:2d:43:d9:e8:c0:8f:51:
                    64:f6:bd:fe:bb:dc:7d:ed:40:e4:d6:6c:4a:ba:48:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5A:65:3F:30:FA:F6:BC:2A:08:79:1B:56:82:76:8F:0E:B8:4E:9F
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/alplPzD69rwqCHkbVoJ2jw64Tp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:5f:92:de:6b:a5:ca:b1:5c:ab:10:2a:a8:de:fb:55:af:
         4d:2c:23:6b:ce:f6:0f:ae:99:a2:e4:5a:2f:5b:08:9f:a5:8d:
         e7:c4:3e:a3:08:2b:61:dd:30:7e:23:3d:a7:3e:c0:9e:da:fd:
         d2:44:88:91:1a:8e:1e:34:ec:42:5a:3e:18:ab:84:b9:e0:d6:
         c4:6c:d3:28:89:17:1b:2c:b1:69:9c:a9:97:07:c6:cc:b3:b7:
         92:93:44:04:bb:96:b8:fc:ec:c4:25:81:da:89:bc:cd:4c:c6:
         1a:93:9d:70:e1:c3:04:42:2b:0f:bc:34:1e:3f:1f:51:11:ff:
         74:e1:8f:96:9e:46:8f:30:36:47:ff:d5:8c:ae:c7:7d:82:5f:
         43:da:d9:f7:21:1b:fe:77:79:f6:58:66:6e:53:c7:0e:e2:92:
         73:75:8f:77:12:a0:a0:b7:0e:79:c8:5f:5a:93:aa:9a:80:a6:
         16:d8:03:84:cb:d4:e8:86:ed:1b:05:dd:c9:c7:66:a6:32:36:
         d3:b4:1f:d5:40:37:22:2a:ca:dd:04:6e:be:0a:55:65:c1:2b:
         2c:9b:b0:20:6e:62:4e:32:3a:54:29:8a:1d:70:a8:e1:a9:9f:
         07:62:1b:52:ef:b7:e7:1b:98:43:7f:92:78:61:22:13:b9:c1:
         ac:1f:2d:0e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNTA1MDEw
MTMyMTdaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZBNUE2NTNGMzBGQUY2
QkMyQTA4NzkxQjU2ODI3NjhGMEVCODRFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8InDD+a8tqVCtP2fhHV54y3p9QhI+3ioGt/kBT1oc0b9HZMwx
CqLybWBSo9DjLqyxoXjSsyvfRw2lFoOt91IwEQzE6edXt7amx9kP4vreR19fSzKx
MlqWwb7OwvJGrQipeG4UUMFLSCcB1O4A9Rxsr2CfpJUClYwSxDBTpj3LLu9iAHxc
QTGQrW3wu6YFBCusFceYmNGiBSRFFEYSNmIk/+MHMcAfzzenUOP/U6sJNxaA34l9
h5g90LFQykmi7oet543sekA0ehQ5TucZCa2VwGVslNQlmg69uNM84shCHD28O35e
Qmu5LUPZ6MCPUWT2vf673H3tQOTWbEq6SC5BAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUalplPzD69rwqCHkbVoJ2jw64Tp8wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L2FscGxQekQ2OXJ3cUNIa2JWb0oyanc2NFRwOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAc7agAwDQYJKoZIhvcNAQELBQADggEBAHmMX5Lea6XKsVyrECqo3vtVr00s
I2vO9g+umaLkWi9bCJ+ljefEPqMIK2HdMH4jPac+wJ7a/dJEiJEajh407EJaPhir
hLng1sRs0yiJFxsssWmcqZcHxsyzt5KTRAS7lrj87MQlgdqJvM1MxhqTnXDhwwRC
Kw+8NB4/H1ER/3Thj5aeRo8wNkf/1Yyux32CX0Pa2fchG/53efZYZm5Txw7iknN1
j3cSoKC3DnnIX1qTqpqAphbYA4TL1OiG7RsF3cnHZqYyNtO0H9VANyIqyt0Ebr4K
VWXBKyybsCBuYk4yOlQpih1wqOGpnwdiG1Lvt+cbmEN/knhhIhO5wawfLQ4=
-----END CERTIFICATE-----
Generated at Sat May 17 18:20:31 2025 by rpki-client