Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/NV3WTTZuXKWokSoJ2HPMMabDKLg.roa
File:                     NV3WTTZuXKWokSoJ2HPMMabDKLg.roa (raw, json)
Hash identifier:          MOXNfJT0RrhYOFjtswLnFatr2AQM/NRqSr0qTP1YAjU=
Subject key identifier:   35:5D:D6:4D:36:6E:5C:A5:A8:91:2A:09:D8:73:CC:31:A6:C3:28:B8
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       DA
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NV3WTTZuXKWokSoJ2HPMMabDKLg.roa
Signing time:             Fri 31 May 2024 01:31:21 +0000
ROA not before:           Fri 31 May 2024 01:31:21 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:21 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=355DD64D366E5CA5A8912A09D873CC31A6C328B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:ad:ac:0c:51:21:fb:03:73:00:74:8c:30:
                    b8:c7:8d:1a:27:fe:31:1a:95:89:42:a5:ad:77:82:
                    25:28:41:99:c9:ab:7e:a5:1a:62:3f:32:b6:d5:4e:
                    c6:85:d9:ab:60:18:0f:66:db:92:a3:8f:ee:b3:a2:
                    a9:35:12:e0:f7:5e:5e:b8:fc:23:1b:ed:58:60:70:
                    d4:bd:d3:04:05:e7:a3:7e:8d:a7:62:d6:3b:cc:f3:
                    1c:ac:3f:68:f3:0a:67:b2:d9:28:fa:2c:b1:ce:59:
                    b2:a9:3e:8e:42:ba:4f:c0:9a:c6:b8:6d:5d:1a:63:
                    6c:a1:c3:45:6b:b8:d3:32:cf:70:a0:c6:b8:7e:34:
                    83:8a:75:1d:fb:9f:4c:a3:2c:87:d9:00:73:84:dd:
                    6c:87:8c:82:61:e9:86:c8:90:6d:e6:c4:06:cb:c2:
                    db:40:72:ad:9f:b1:3a:6d:64:43:62:3c:8b:c2:65:
                    39:f2:ed:d9:61:82:a5:22:74:0d:0a:b9:d1:2c:b5:
                    6a:5e:0d:7c:ed:04:58:88:b2:4a:85:72:ff:2d:1a:
                    84:80:7c:c7:62:c8:7e:2c:e0:f8:72:63:47:6a:83:
                    a9:2a:ee:2f:8b:38:34:fb:26:2f:5f:5d:8b:40:20:
                    6c:5d:12:88:f7:55:4a:37:64:7a:43:e5:92:bb:f0:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5D:D6:4D:36:6E:5C:A5:A8:91:2A:09:D8:73:CC:31:A6:C3:28:B8
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/NV3WTTZuXKWokSoJ2HPMMabDKLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:e7:58:1e:f3:7c:d8:1b:22:fd:b2:11:a5:89:63:45:d0:74:
         87:08:ce:95:a0:28:7b:e9:22:17:ff:fb:2f:3b:f3:5b:0b:0d:
         ba:9f:38:f2:c9:07:05:54:bc:5d:e1:92:17:f2:06:c6:58:86:
         e6:7a:c7:1f:02:5d:ba:2d:cc:39:49:96:b5:23:df:17:c5:7b:
         f1:ce:5f:ee:a9:f7:63:ee:f7:a0:76:2f:a7:ae:1c:b5:06:fa:
         fa:96:d0:35:00:c1:38:07:da:ee:ae:8d:1a:a9:de:f1:31:31:
         9e:69:b0:1e:f4:30:ab:75:64:a6:3d:ef:7d:f1:54:5a:84:37:
         38:38:52:b5:9e:33:8d:e4:06:a0:29:4d:f9:a4:54:07:1c:75:
         ce:10:53:12:c5:53:ba:6f:f7:bb:25:8f:e6:e7:3b:b4:8c:81:
         c9:dd:e2:bb:dd:e7:fc:4d:13:40:fb:1c:08:4a:50:ba:71:df:
         90:2a:21:0c:5d:57:3e:9a:69:7f:37:2d:4d:8d:fe:c0:ad:5b:
         8f:00:fe:bb:25:e8:c7:4d:cb:82:6f:b3:9e:42:7d:21:76:c4:
         2b:b2:70:5e:34:a5:e2:7b:ac:00:ea:c7:f2:1c:aa:71:ba:05:
         bc:07:5c:a0:93:ab:ac:89:7f:30:f9:cc:92:d9:3a:aa:56:0f:
         c7:0f:b5:24
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw
MTMxMjFaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDM1NURENjREMzY2RTVD
QTVBODkxMkEwOUQ4NzNDQzMxQTZDMzI4QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Lq2sDFEh+wNzAHSMMLjHjRon/jEalYlCpa13giUoQZnJq36l
GmI/MrbVTsaF2atgGA9m25Kjj+6zoqk1EuD3Xl64/CMb7VhgcNS90wQF56N+jadi
1jvM8xysP2jzCmey2Sj6LLHOWbKpPo5Cuk/Amsa4bV0aY2yhw0VruNMyz3Cgxrh+
NIOKdR37n0yjLIfZAHOE3WyHjIJh6YbIkG3mxAbLwttAcq2fsTptZENiPIvCZTny
7dlhgqUidA0KudEstWpeDXztBFiIskqFcv8tGoSAfMdiyH4s4PhyY0dqg6kq7i+L
ODT7Ji9fXYtAIGxdEoj3VUo3ZHpD5ZK78DUNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUNV3WTTZuXKWokSoJ2HPMMabDKLgwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L05WM1dUVFp1WEtXb2tTb0oySFBNTWFiREtMZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU7asAwDQYJKoZIhvcNAQELBQADggEBAELnWB7zfNgbIv2yEaWJY0XQdIcI
zpWgKHvpIhf/+y8781sLDbqfOPLJBwVUvF3hkhfyBsZYhuZ6xx8CXbotzDlJlrUj
3xfFe/HOX+6p92Pu96B2L6euHLUG+vqW0DUAwTgH2u6ujRqp3vExMZ5psB70MKt1
ZKY9733xVFqENzg4UrWeM43kBqApTfmkVAccdc4QUxLFU7pv97slj+bnO7SMgcnd
4rvd5/xNE0D7HAhKULpx35AqIQxdVz6aaX83LU2N/sCtW48A/rsl6MdNy4Jvs55C
fSF2xCuycF40peJ7rADqx/IcqnG6BbwHXKCTq6yJfzD5zJLZOqpWD8cPtSQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:25 2025 by rpki-client