Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/99il52BSOusR1UGrjXwfMeNfHk4.roa
File:                     99il52BSOusR1UGrjXwfMeNfHk4.roa (raw, json)
Hash identifier:          /M+M1LMb/n8b+KXswaNogDOxfu3oIdPjAvgGUiKc2bI=
Subject key identifier:   F7:D8:A5:E7:60:52:3A:EB:11:D5:41:AB:8D:7C:1F:31:E3:5F:1E:4E
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       E7
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/99il52BSOusR1UGrjXwfMeNfHk4.roa
Signing time:             Fri 31 May 2024 01:31:27 +0000
ROA not before:           Fri 31 May 2024 01:31:27 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:27 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=F7D8A5E760523AEB11D541AB8D7C1F31E35F1E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:51:ed:3f:08:3b:66:68:4c:08:14:70:c7:
                    8f:ec:47:71:91:10:56:b7:e8:3c:7d:c9:7f:ac:f9:
                    72:ec:c4:60:5a:c1:e3:ce:95:bb:b4:cd:d5:59:27:
                    a7:fe:79:a5:b1:46:cc:e3:ea:b6:aa:ce:fd:5a:72:
                    72:8a:dc:ec:45:23:49:be:60:e2:f6:91:84:1f:b4:
                    26:a8:7f:89:54:ba:35:a0:b0:cb:c5:4c:08:b7:24:
                    71:8c:47:67:ae:ea:4d:1f:dd:fd:08:be:32:29:5a:
                    d5:1b:83:f3:21:18:f4:4a:fd:76:bc:1f:4b:f3:89:
                    19:37:32:c9:87:fd:cc:9c:7f:2b:d9:7e:5f:de:29:
                    21:1c:95:46:fa:87:94:64:c4:fd:30:57:e6:e2:6e:
                    8c:42:c6:f9:f6:a6:65:91:f2:df:c8:80:89:4b:30:
                    61:55:54:e7:09:3e:d7:49:be:37:d4:bf:f5:e7:8d:
                    aa:cb:b8:5f:0c:7d:68:25:24:22:44:4a:5d:41:1d:
                    38:1c:8b:85:10:d7:b3:e3:b8:aa:a0:b5:4c:5d:cd:
                    37:10:06:9e:9d:78:5e:dd:50:d9:c6:cc:59:65:31:
                    8f:18:e0:66:bb:d3:62:b5:56:8d:02:f2:60:71:d6:
                    38:e6:b6:d4:c8:66:54:b9:fa:b1:03:36:a2:65:18:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:A5:E7:60:52:3A:EB:11:D5:41:AB:8D:7C:1F:31:E3:5F:1E:4E
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/99il52BSOusR1UGrjXwfMeNfHk4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:4c:e1:1f:ab:b9:9c:4d:13:69:4b:2b:61:57:97:0f:d5:
         11:12:06:8d:9a:9c:77:2b:ca:b7:31:9a:39:7c:f4:9d:4d:be:
         95:9e:53:96:c8:1f:97:df:5a:86:f6:b7:06:d7:c1:9b:e1:b4:
         48:0c:c1:9d:e0:2e:44:cb:9b:c2:fe:59:ed:f7:16:03:f2:38:
         e2:65:72:9c:86:1d:fc:cf:cb:fe:f4:f8:3a:79:1c:6b:df:33:
         b2:bb:e4:f8:ea:c0:88:0f:ac:9d:db:f4:2d:68:73:85:78:29:
         40:b8:93:8b:33:e2:23:ef:a8:4f:33:95:14:0e:ee:b6:ec:84:
         69:b8:05:8d:78:b8:ac:44:08:eb:e9:33:9a:cc:b0:78:d9:3c:
         a5:71:85:f6:e9:87:83:0a:95:70:9c:da:99:86:2c:8a:7b:4f:
         67:54:01:78:dd:c6:07:f2:5d:41:0f:fb:2c:0a:e3:cf:ae:2b:
         82:75:19:9f:41:ab:48:5f:06:94:0e:2f:2e:30:3f:cf:ee:48:
         bd:a5:96:5c:b7:ef:49:85:eb:7b:8e:a7:9d:e6:bf:18:3a:b1:
         22:be:55:45:24:83:c2:c6:e2:d1:e8:6b:0b:58:0d:ae:4b:70:
         73:21:d1:c1:8c:51:01:35:c6:9c:e8:13:8d:c0:47:f4:d8:a3:
         1b:31:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org