Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa
File:                     pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa (raw, json)
Hash identifier:          iFw35uTbq7FkqOf44/VRS8oi7idiiwS4oRODoDjRvoU=
Subject key identifier:   A5:D5:E9:31:14:33:9B:31:CA:A5:B7:79:58:DD:7E:7C:7B:ED:C5:7E
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       23
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa
Signing time:             Wed 31 Jul 2024 01:32:20 +0000
ROA not before:           Wed 31 Jul 2024 01:32:20 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        103.90.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Jul 31 01:32:20 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=A5D5E93114339B31CAA5B77958DD7E7C7BEDC57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:6f:32:6c:cc:1a:5c:76:b9:9e:bd:f0:48:
                    77:7d:e2:b5:4c:45:f0:0d:69:58:a0:a8:b9:f8:bd:
                    2e:7f:c3:2c:10:ab:5f:be:ba:b1:33:b4:60:38:a9:
                    da:30:8f:aa:03:6f:e0:f7:75:5f:cd:34:4c:12:11:
                    76:1e:16:80:b0:cc:48:b4:dd:77:e0:ae:07:ec:5c:
                    7b:80:ac:b3:3c:ae:12:31:a1:57:db:c5:5f:61:b3:
                    a4:e3:4b:45:e7:45:93:a2:58:11:d3:74:4c:c6:c8:
                    f6:d0:02:1a:fe:00:91:4a:5c:b5:cb:81:b8:d4:4d:
                    93:21:0f:fa:88:98:24:8f:dd:db:89:3d:55:cb:0e:
                    4d:ec:c3:38:db:6b:60:aa:d8:8e:9f:cf:90:80:ac:
                    db:5b:75:96:30:23:40:9e:c7:19:d7:1d:49:da:ec:
                    96:8d:95:e0:18:7c:db:13:ba:89:1c:bf:fa:34:d0:
                    bc:0c:a5:d8:ad:b3:20:15:d0:11:80:58:14:4e:74:
                    77:06:5a:cc:6d:2b:bb:c9:70:99:34:1a:ec:8d:9c:
                    85:29:f8:04:11:63:7f:63:14:5a:d3:58:da:5b:d1:
                    95:b6:52:94:1f:83:bd:f6:9c:73:11:58:db:7a:65:
                    59:fb:00:49:22:cf:7c:1b:9c:a8:8d:91:32:db:36:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D5:E9:31:14:33:9B:31:CA:A5:B7:79:58:DD:7E:7C:7B:ED:C5:7E
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:20:30:52:ff:86:1b:cc:d0:b1:20:ed:ea:e6:78:ac:14:90:
         2a:76:21:8b:c8:dd:01:15:e6:af:7c:16:fc:ac:99:ea:47:af:
         13:f2:59:02:14:f1:c8:a9:40:06:ff:43:45:c0:b2:14:ba:47:
         6b:70:0b:88:bc:c4:ed:b6:85:f6:8e:03:44:76:16:d2:05:31:
         ff:0d:bb:48:b1:f2:aa:bb:7c:61:ab:4a:76:9c:ac:50:78:98:
         d4:c1:40:fc:93:8d:d8:fd:fc:be:43:23:5a:29:d0:53:ae:d8:
         98:79:7f:f9:d8:f0:cc:df:e4:e8:ac:0d:13:fb:6f:b3:4d:f8:
         60:e9:4f:af:9c:0b:41:34:3b:8e:19:c0:8b:96:1a:95:f4:db:
         44:90:b5:3a:64:5b:0c:77:42:c0:1e:55:70:01:bd:e5:6e:9a:
         3e:77:8f:5b:45:50:98:40:e0:f4:1b:fc:c6:25:16:64:fb:0c:
         d9:a7:14:95:b8:32:6f:0b:88:29:78:7f:27:3b:12:4f:f4:4d:
         11:dc:c9:03:6d:5d:c8:df:a9:1c:b1:e5:8a:1c:44:bf:7d:d5:
         9e:04:cd:e6:9a:46:5a:54:bf:0b:3c:c7:39:7d:32:d1:63:30:
         90:01:d4:62:17:16:a6:81:fa:d2:3a:6d:4b:1a:fa:3d:33:0e:
         63:4f:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org