Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/zYPzZRT5gwlnIXcgdx6cGTZK3xs.roa
File:                     zYPzZRT5gwlnIXcgdx6cGTZK3xs.roa (raw, json)
Hash identifier:          0JcO9ZPVZEXIYcSfr9vto7dgwufOypcBwGi+zpSpJtA=
Subject key identifier:   CD:83:F3:65:14:F9:83:09:67:21:77:20:77:1E:9C:19:36:4A:DF:1B
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       D7
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/zYPzZRT5gwlnIXcgdx6cGTZK3xs.roa
Signing time:             Fri 31 May 2024 01:31:20 +0000
ROA not before:           Fri 31 May 2024 01:31:20 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:20 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CD83F36514F9830967217720771E9C19364ADF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:4d:42:29:c1:81:39:f1:7c:4c:6e:14:db:
                    98:a8:9e:a1:60:b5:f6:ee:e5:6e:4b:35:84:da:a7:
                    68:2a:c3:98:d7:41:76:b1:a9:97:65:70:24:6b:6d:
                    db:c0:35:07:5e:48:45:45:5b:dc:e1:60:f8:ff:39:
                    da:6d:44:9a:6a:f4:d2:a8:08:3c:12:ce:6c:f0:50:
                    19:3f:be:80:0a:c6:0f:71:46:39:8b:22:66:30:eb:
                    82:f5:c0:a4:12:85:69:03:ee:9a:21:0d:4f:a8:9f:
                    aa:ea:2a:4f:2a:b9:8b:85:e4:c9:5b:72:ca:8d:3c:
                    8b:7f:23:a5:b9:8f:a4:e7:95:67:05:4d:23:77:21:
                    37:06:7a:57:48:fd:f4:9d:98:ce:c3:6b:a2:a0:4d:
                    93:4b:f5:cd:d3:ce:53:b0:6b:61:a3:99:b3:72:ed:
                    33:d1:30:25:83:0c:1e:df:b5:9d:57:6f:79:76:9f:
                    fe:09:4d:57:3f:04:56:d9:da:b3:cc:1e:82:cb:3e:
                    19:4a:29:a5:25:0d:bf:89:56:7c:9d:64:0c:77:ad:
                    99:61:17:fd:47:a2:71:4a:35:30:37:9d:f5:1c:24:
                    a8:49:ba:79:fd:af:65:c2:6e:e6:4e:46:d3:30:fe:
                    10:f9:c3:d1:81:8c:a9:b1:81:a7:ce:7e:25:4a:55:
                    b3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:83:F3:65:14:F9:83:09:67:21:77:20:77:1E:9C:19:36:4A:DF:1B
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/zYPzZRT5gwlnIXcgdx6cGTZK3xs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:ca:a9:f9:7b:7b:47:ab:ad:f7:3f:e9:d0:8c:f6:3d:bb:87:
         7f:38:d5:12:a4:1e:ad:ae:55:9f:9a:43:ef:01:98:46:06:90:
         8d:83:8f:52:6f:77:87:a1:2c:d5:97:60:57:0d:0d:ec:13:43:
         84:87:41:ac:f5:a1:42:46:71:19:6e:1a:7a:c5:9e:cd:a8:1b:
         87:1f:6a:01:a4:07:fe:d7:7f:23:ed:bf:03:9e:47:7c:2b:96:
         a6:5a:90:8d:98:c4:ac:30:30:be:0b:a7:61:02:f3:ec:23:b7:
         d8:dc:50:ee:0d:39:4d:4d:d8:f8:31:57:eb:a3:f3:61:08:aa:
         91:3b:6d:db:a6:61:8b:98:ef:a4:4d:c7:01:14:50:ba:f2:51:
         88:80:58:77:58:e5:ff:3b:ba:04:a8:e7:a3:d1:41:7e:ad:2d:
         d7:70:40:6b:ac:e0:c9:92:46:b6:12:69:a1:eb:98:fd:3b:de:
         6b:f2:93:20:03:e5:80:11:5b:9f:20:cb:80:b5:ca:04:1f:76:
         75:66:0a:b9:f2:af:03:44:b4:e8:7b:03:5f:65:8d:77:d7:e3:
         59:47:0e:1d:7c:53:5b:3a:5b:87:40:b9:87:c9:8c:65:ef:c7:
         72:c2:fb:46:b5:4f:35:88:db:ae:29:4a:fb:40:27:11:f5:4d:
         12:ee:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:40 2025 by rpki-client