Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/h90nd_fDpkxCcHOSeoxVnUIVdGk.roa
File:                     h90nd_fDpkxCcHOSeoxVnUIVdGk.roa (raw, json)
Hash identifier:          RjGQMU4fPGkIEsXy/07JM22Layt3RCSn/bzMp134aWA=
Subject key identifier:   87:DD:27:77:F7:C3:A6:4C:42:70:73:92:7A:8C:55:9D:42:15:74:69
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       0E
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/h90nd_fDpkxCcHOSeoxVnUIVdGk.roa
Signing time:             Mon 22 May 2023 08:25:20 +0000
ROA not before:           Mon 22 May 2023 08:25:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     63801
IP address blocks:        103.37.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: May 22 08:25:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=87DD2777F7C3A64C427073927A8C559D42157469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:1c:68:35:1d:55:58:e9:dc:44:f7:4d:1c:
                    cf:43:2a:28:56:43:3a:d9:a9:a5:f7:42:58:54:b3:
                    24:3e:fe:3d:01:83:0a:1b:70:bc:18:da:f8:35:9d:
                    c5:3f:a9:63:76:18:25:e8:42:3b:52:ed:87:2e:ff:
                    de:71:bc:ac:14:d5:e2:7e:62:da:ff:f4:a0:d8:23:
                    cc:0e:42:03:8d:cc:2f:79:19:b4:a2:34:81:4b:bc:
                    e0:b8:db:24:f8:f8:3a:9f:37:a0:a5:ab:de:59:e2:
                    ef:e4:23:2c:5d:e7:f0:69:c3:3f:cb:f2:cf:c1:31:
                    84:e9:97:d5:f9:4c:7c:79:2e:02:d6:86:50:a4:b8:
                    4a:b1:2f:54:d1:01:20:60:70:89:97:e4:df:43:9d:
                    c6:70:07:82:c8:83:ed:83:f6:0d:50:22:a9:fd:76:
                    bd:95:ce:b1:0a:79:40:0f:d0:0a:ba:cf:a7:73:0d:
                    b4:4b:de:f0:92:7a:14:39:e0:b3:3b:cc:7e:f7:2f:
                    39:58:c5:33:0f:05:b5:f2:c7:b3:1c:db:3e:70:6b:
                    4c:5e:34:cf:2d:5b:c2:44:1d:2b:80:20:87:1d:11:
                    fc:a8:75:25:71:2f:a6:f5:5a:11:58:ae:5b:1a:aa:
                    74:f9:32:e4:13:34:a4:2a:01:77:a8:c9:16:4b:ec:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DD:27:77:F7:C3:A6:4C:42:70:73:92:7A:8C:55:9D:42:15:74:69
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/h90nd_fDpkxCcHOSeoxVnUIVdGk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:f9:e2:f6:dd:88:ef:ae:3e:b8:8e:9e:e3:f8:ad:e7:34:8a:
         48:b6:e2:8c:12:dc:d6:e2:56:b4:8c:ce:1e:99:f8:09:d1:cf:
         cd:ba:24:91:75:c2:72:df:67:4f:92:c6:a1:c2:11:77:9a:07:
         d5:d4:d6:d9:79:b0:03:1c:de:c6:00:ea:e8:48:c9:75:20:5a:
         10:3a:85:63:e7:7b:8e:14:f6:5e:01:30:1c:50:40:62:5c:26:
         b7:ea:d2:62:de:70:96:fa:3e:9d:49:56:e2:f2:81:ad:06:00:
         cf:2e:6d:6f:5c:e8:19:28:3a:d1:e5:ff:dc:f8:40:f3:93:38:
         05:f0:78:6a:fd:9f:bd:34:ea:70:2b:51:02:f6:0c:b3:59:8b:
         4b:ee:68:3b:f3:0f:f5:09:08:2f:17:d4:a2:2e:c6:b7:e8:7b:
         cb:e5:23:fd:6d:28:70:b8:7f:65:d6:ef:5d:99:21:5e:63:1d:
         9a:54:b9:f0:af:c3:ba:00:8d:b8:fc:3c:d7:52:3e:c6:e0:68:
         90:d0:cd:eb:88:af:f5:69:ee:c7:1a:b4:56:8d:be:d2:38:06:
         85:9d:c6:2a:76:a8:64:83:21:e9:ff:52:c7:8c:44:52:77:f8:
         55:a4:30:d4:26:36:a1:9d:55:d5:ba:0c:b0:df:12:5f:48:06:
         df:f6:db:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:51 2024 by rpki-client on console-ams.rpki-client.org