Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/ScCc6QjTkdl0woH4DMwgM211Cdc.roa
File:                     ScCc6QjTkdl0woH4DMwgM211Cdc.roa (raw, json)
Hash identifier:          0+z/Ef4Q22fTkMKqYorohz7p0JqR2uzuzHV6lAX8zyc=
Subject key identifier:   49:C0:9C:E9:08:D3:91:D9:74:C2:81:F8:0C:CC:20:33:6D:75:09:D7
Certificate issuer:       /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
Certificate serial:       11
Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/ScCc6QjTkdl0woH4DMwgM211Cdc.roa
Signing time:             Sat 01 Jun 2024 06:45:15 +0000
ROA not before:           Sat 01 Jun 2024 06:45:15 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        157.112.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
        Validity
            Not Before: Jun  1 06:45:15 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=49C09CE908D391D974C281F80CCC20336D7509D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a2:1e:88:78:01:57:55:74:ea:82:2e:35:ec:
                    b0:49:15:65:08:dd:81:b2:eb:49:b9:6b:1f:d6:f4:
                    78:18:77:5a:ac:c5:c6:a3:3f:10:a8:f5:d1:8d:12:
                    8d:1e:3d:f6:59:ac:ce:e9:ed:96:25:f8:44:51:6f:
                    c1:1b:2b:d6:f0:43:cd:b3:f5:48:a6:26:b4:96:e4:
                    25:39:22:58:3c:1a:36:2c:8c:d4:60:c6:d9:6a:0a:
                    13:7e:35:40:7a:72:7f:8c:79:f6:ec:8b:ec:b6:7b:
                    6a:4a:a1:f2:96:2f:cb:56:a5:0b:ca:fd:28:cf:3a:
                    ce:1d:cc:14:ce:4b:ab:10:80:1a:f1:05:8d:23:33:
                    cd:12:96:98:4c:70:01:b7:ab:88:68:00:21:7f:1e:
                    a3:d2:31:c8:3f:3c:72:26:64:1d:fa:ab:66:07:27:
                    fa:1f:ba:4f:7a:06:76:50:15:8d:0c:5b:07:b2:43:
                    f4:e2:81:8d:56:a8:38:4b:26:cf:8a:6a:33:da:b0:
                    f9:b2:01:1d:b1:0f:e0:d4:df:d4:83:bf:74:64:09:
                    7c:fa:3b:7e:64:e4:10:53:15:79:44:81:12:9d:1f:
                    bd:d8:2f:68:5b:46:05:96:7a:ce:c3:73:98:67:87:
                    2b:c0:22:52:5d:fb:e6:3f:f8:d1:f7:ac:f7:b2:87:
                    bb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:9C:E9:08:D3:91:D9:74:C2:81:F8:0C:CC:20:33:6D:75:09:D7
            X509v3 Authority Key Identifier:
                keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/ScCc6QjTkdl0woH4DMwgM211Cdc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:c4:63:70:80:56:3a:41:d2:b6:29:a6:36:4b:70:29:d5:
         18:e1:0a:11:2b:2a:13:a0:d0:49:a5:3a:b4:b6:90:25:85:86:
         a4:47:93:d9:db:ee:49:64:ce:d6:66:d3:c3:8e:3f:b5:0d:d7:
         3a:a1:82:4e:1a:33:b7:4e:6c:a8:b3:f5:c7:62:af:ca:07:6d:
         54:e5:b1:57:e7:78:4e:f9:71:8a:10:d9:2b:cb:72:97:82:09:
         c7:be:da:f4:e2:b7:60:01:06:05:a2:cb:8a:90:e4:a9:be:fe:
         d5:69:2a:ab:21:8f:73:8f:f6:bb:f3:cb:bd:a0:ed:22:ca:57:
         c2:ca:56:f7:3b:e3:ed:e0:b9:84:83:d2:21:b9:dd:08:1e:a0:
         31:05:56:3d:ab:4f:b7:73:f6:1a:40:50:e9:a6:b4:50:99:77:
         d0:fd:39:f8:c7:73:47:1f:4f:9c:56:61:7a:cb:98:48:aa:f2:
         9d:1e:97:e5:01:f3:f9:0a:6e:ac:b7:64:62:81:cd:39:6f:ef:
         ff:ea:00:db:e7:a6:b3:47:8e:38:86:96:8a:c3:33:42:dc:57:
         1f:b0:af:e1:69:b0:5e:2b:7f:d9:15:0c:15:4a:87:30:af:3f:
         01:c1:37:22:6d:a3:08:7e:a8:27:51:7a:5f:6a:b1:0b:03:36:
         3e:b1:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:49 2024 by rpki-client on console-fra.rpki-client.org