Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/3TxssdKxZeDk6DxleOMiS-ZmSHc.roa
File:                     3TxssdKxZeDk6DxleOMiS-ZmSHc.roa (raw, json)
Hash identifier:          zmdhDQNgP5Fidzh8IlRrUALhFy0VK1oaNqSMjqNkxGs=
Subject key identifier:   DD:3C:6C:B1:D2:B1:65:E0:E4:E8:3C:65:78:E3:22:4B:E6:66:48:77
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       0A
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/3TxssdKxZeDk6DxleOMiS-ZmSHc.roa
Signing time:             Tue 29 Aug 2023 05:20:45 +0000
ROA not before:           Tue 29 Aug 2023 05:20:45 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        103.90.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Aug 29 05:20:45 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=DD3C6CB1D2B165E0E4E83C6578E3224BE6664877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:37:64:9b:0b:72:99:a0:a9:21:bb:0b:a4:
                    0d:9b:cc:91:e6:44:24:40:35:fa:aa:5d:d9:96:2d:
                    68:db:68:d9:55:fe:58:6d:5d:86:13:8d:5b:a7:b6:
                    31:4f:a9:40:5e:e6:82:b3:96:9a:3c:15:bb:79:5d:
                    c2:c2:ec:6c:53:14:e9:d1:01:16:97:87:de:37:42:
                    75:0e:d9:c7:a0:1d:36:c8:49:f9:7f:8c:30:a6:63:
                    df:77:ea:a2:41:71:fc:53:af:4c:56:26:6e:a4:3f:
                    67:e3:bb:da:7e:a6:28:a1:61:5c:bb:f0:61:15:ab:
                    0b:dc:eb:35:cd:1b:48:9d:4a:56:fe:ea:5d:b7:08:
                    7c:7e:2b:86:e0:3a:76:a1:8a:0c:13:39:81:25:6f:
                    2d:41:c3:2a:93:3f:8b:7e:12:fc:45:86:97:a9:a8:
                    26:dc:39:1b:24:a7:e3:cc:62:85:f1:5c:91:ec:70:
                    46:4a:c6:13:6d:76:0c:9c:f0:f4:83:58:13:b4:bd:
                    c8:ac:0c:2a:f8:12:ec:af:59:fe:28:ec:30:62:f2:
                    e5:e4:c0:4e:0b:ae:30:81:e1:9c:b5:29:16:60:e7:
                    e3:00:d2:6b:05:23:65:5d:fa:e1:6d:ad:8c:7e:88:
                    35:30:db:83:62:1d:99:ee:7b:6d:de:74:87:5e:f7:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3C:6C:B1:D2:B1:65:E0:E4:E8:3C:65:78:E3:22:4B:E6:66:48:77
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/3TxssdKxZeDk6DxleOMiS-ZmSHc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:de:83:32:c0:b8:35:6c:13:85:b9:07:f3:35:d7:24:64:64:
         30:51:dd:95:19:02:df:f3:a2:60:4c:36:a0:4f:b1:78:dc:d9:
         f9:25:ef:ec:5b:c2:ff:8f:9b:29:3b:28:5c:85:8e:95:08:c6:
         db:f0:98:84:64:74:54:69:2e:7a:2b:70:2d:86:02:70:8b:7b:
         6d:67:39:b2:a4:ab:05:a5:b3:7e:67:cd:98:d8:54:e9:de:2b:
         f4:d2:e3:a0:fa:3b:99:d0:ec:29:b2:2d:87:35:a7:15:9b:9e:
         c4:bf:eb:8b:5c:9d:bb:a9:38:9c:84:71:f0:aa:de:8b:fd:6d:
         20:d4:62:c8:f5:f1:d2:f9:e6:b7:11:8a:ab:c4:99:9f:8f:a8:
         53:4e:e6:03:2c:10:41:ff:a4:59:50:ed:b1:46:7d:ee:7f:ef:
         1e:bf:75:6d:cf:fe:7b:51:74:b5:f5:70:2b:f9:29:db:72:70:
         e5:97:51:f8:ec:0a:c4:51:d7:3b:d8:51:33:fa:89:80:d7:66:
         9c:ae:52:5b:f8:13:c6:e0:8f:c0:2a:8b:70:80:2f:d0:8f:b9:
         c1:55:80:97:21:b1:39:19:8e:9e:1f:b9:af:16:91:a6:6b:83:
         d6:d8:18:0f:d0:10:cc:37:e1:b6:c4:5b:08:d7:cf:6c:2f:a3:
         5c:41:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org