Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/T_COIc0ePBPeEQv1OXiFVp5zwMk.roa
File:                     T_COIc0ePBPeEQv1OXiFVp5zwMk.roa (raw, json)
Hash identifier:          GDnLblHPcHwAy18Nv2w9XurkQ6H5OYSqBxjPw3pe5EM=
Subject key identifier:   4F:F0:8E:21:CD:1E:3C:13:DE:11:0B:F5:39:78:85:56:9E:73:C0:C9
Certificate issuer:       /CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
Certificate serial:       10
Authority key identifier: 8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/T_COIc0ePBPeEQv1OXiFVp5zwMk.roa
Signing time:             Sat 01 Jun 2024 06:45:15 +0000
ROA not before:           Sat 01 Jun 2024 06:45:15 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        157.112.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E36DE76AE1B259D12F54EEB9C6BFCF0DE453C04
        Validity
            Not Before: Jun  1 06:45:15 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4FF08E21CD1E3C13DE110BF5397885569E73C0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:b0:22:b4:17:7c:06:b3:64:a7:6a:59:f9:
                    3b:2b:20:15:8c:25:4b:42:27:0b:a5:50:ea:bd:8e:
                    3e:23:b9:75:41:93:53:c9:92:b7:1a:98:bd:71:15:
                    4b:72:03:c4:22:9d:d5:14:e2:b0:d8:35:57:10:8d:
                    f4:57:a8:3c:1d:44:24:09:98:54:b3:fb:93:5d:7b:
                    a0:cc:f7:cd:bf:90:4e:59:80:c3:dd:a3:ea:54:80:
                    26:cd:f0:91:70:ec:a9:34:74:6d:b4:4f:66:b3:ce:
                    32:48:59:18:34:89:bb:29:1a:b9:f6:34:a6:4f:6d:
                    38:64:17:6b:20:33:02:2b:61:1b:3a:30:aa:ff:a1:
                    f4:ce:98:e0:4b:67:0e:d8:4b:39:0d:d5:24:6d:11:
                    37:bb:ab:92:5a:75:af:43:20:8b:91:27:d9:e2:da:
                    27:44:19:58:7e:95:c4:bf:7d:b2:08:75:c6:b2:4f:
                    78:f1:8c:7a:ad:1b:b3:65:2a:87:cf:5c:1b:9a:b4:
                    24:1c:d0:d3:59:39:2a:53:a9:22:ad:c5:3f:b3:7b:
                    cf:c2:c1:d4:09:49:03:33:5a:15:1e:50:78:49:81:
                    ff:1f:bc:02:cf:d0:54:1d:b4:9b:c9:ae:bb:a3:09:
                    f3:e4:bc:b5:19:3f:f1:fa:d7:89:c7:ba:fa:43:d2:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F0:8E:21:CD:1E:3C:13:DE:11:0B:F5:39:78:85:56:9E:73:C0:C9
            X509v3 Authority Key Identifier:
                keyid:8E:36:DE:76:AE:1B:25:9D:12:F5:4E:EB:9C:6B:FC:F0:DE:45:3C:04

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/jjbedq4bJZ0S9U7rnGv88N5FPAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jjbedq4bJZ0S9U7rnGv88N5FPAQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/T_COIc0ePBPeEQv1OXiFVp5zwMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:0c:1d:e0:11:3c:4a:a8:f1:6c:b4:58:3e:15:49:1d:5d:
         54:8a:4c:ad:4e:38:4e:c3:75:00:ab:70:ab:a1:92:b2:e7:2f:
         b3:e0:b6:11:25:0b:0d:49:4b:9f:cc:12:2e:56:b9:97:43:f7:
         1e:a9:c2:eb:10:47:46:60:84:f2:7e:26:d3:c8:07:12:f4:ac:
         21:aa:7f:13:7f:c3:1a:48:33:da:12:8c:f1:af:c7:e1:b3:92:
         41:19:d3:f9:57:f1:4e:b7:dc:d3:9d:b2:2d:d8:79:ad:c6:77:
         0a:59:13:d5:97:de:c6:20:9a:0c:dd:f2:aa:5a:8c:f9:1d:d1:
         39:6e:d8:27:7c:6e:8b:4d:44:04:5d:30:5d:ca:7f:8b:f7:9a:
         a0:cb:78:39:c4:71:8a:e6:fd:53:9e:aa:0a:d1:c4:5a:31:5f:
         02:61:c9:41:ed:88:31:35:27:fb:2f:00:25:f2:72:e4:41:0f:
         1f:03:45:94:56:fc:a7:4a:4d:24:c9:5e:dd:88:8c:11:18:4a:
         51:71:d2:b3:ed:31:26:1c:4e:82:a6:47:41:ad:4f:b1:7f:0e:
         77:3a:f2:1c:22:93:05:a3:61:ab:59:50:fa:18:5c:a1:0d:11:
         af:69:7f:b3:c1:24:b2:b8:9c:c0:81:04:b0:b7:07:ae:27:47:
         69:8a:1b:4c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTM2
REU3NkFFMUIyNTlEMTJGNTRFRUI5QzZCRkNGMERFNDUzQzA0MB4XDTI0MDYwMTA2
NDUxNVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNEZGMDhFMjFDRDFFM0Mx
M0RFMTEwQkY1Mzk3ODg1NTY5RTczQzBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOGZsCK0F3wGs2Snaln5OysgFYwlS0InC6VQ6r2OPiO5dUGTU8mS
txqYvXEVS3IDxCKd1RTisNg1VxCN9FeoPB1EJAmYVLP7k117oMz3zb+QTlmAw92j
6lSAJs3wkXDsqTR0bbRPZrPOMkhZGDSJuykaufY0pk9tOGQXayAzAithGzowqv+h
9M6Y4EtnDthLOQ3VJG0RN7urklp1r0Mgi5En2eLaJ0QZWH6VxL99sgh1xrJPePGM
eq0bs2Uqh89cG5q0JBzQ01k5KlOpIq3FP7N7z8LB1AlJAzNaFR5QeEmB/x+8As/Q
VB20m8muu6MJ8+S8tRk/8frXice6+kPSskECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRP8I4hzR48E94RC/U5eIVWnnPAyTAfBgNVHSMEGDAWgBSONt52rhslnRL1Tuuc
a/zw3kU8BDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTkwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41RlBBUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pqYmVkcTRiSlowUzlVN3JuR3Y4OE41
RlBBUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85OTAvVF9DT0ljMGVQQlBlRVF2MU9YaUZWcDV6d01rLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBJ1wkDANBgkqhkiG9w0BAQsFAAOCAQEADBgMHeARPEqo8Wy0WD4VSR1dVIpM
rU44TsN1AKtwq6GSsucvs+C2ESULDUlLn8wSLla5l0P3HqnC6xBHRmCE8n4m08gH
EvSsIap/E3/DGkgz2hKM8a/H4bOSQRnT+VfxTrfc052yLdh5rcZ3ClkT1ZfexiCa
DN3yqlqM+R3ROW7YJ3xui01EBF0wXcp/i/eaoMt4OcRxiub9U56qCtHEWjFfAmHJ
Qe2IMTUn+y8AJfJy5EEPHwNFlFb8p0pNJMle3YiMERhKUXHSs+0xJhxOgqZHQa1P
sX8OdzryHCKTBaNhq1lQ+hhcoQ0Rr2l/s8EksricwIEEsLcHridHaYobTA==
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:49 2024 by rpki-client on console-fra.rpki-client.org