Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/3f14twWWWxetKvHTjQ6LXUyQWLk.roa
File:                     3f14twWWWxetKvHTjQ6LXUyQWLk.roa (raw, json)
Hash identifier:          jcGSxE5Oi/74GpDihbon7JdJvornLwK7ASXSPw4COyo=
Subject key identifier:   DD:FD:78:B7:05:96:5B:17:AD:2A:F1:D3:8D:0E:8B:5D:4C:90:58:B9
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       014B
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/3f14twWWWxetKvHTjQ6LXUyQWLk.roa
Signing time:             Fri 01 Aug 2025 01:34:03 +0000
ROA not before:           Fri 01 Aug 2025 01:34:03 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10021
IP address blocks:        27.110.63.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug  1 01:34:03 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=DDFD78B705965B17AD2AF1D38D0E8B5D4C9058B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:0c:f2:fd:53:9d:fa:b8:f7:ea:41:3f:6c:
                    a2:f5:66:bf:64:d8:bb:ff:ed:e0:f1:4d:b6:e2:cb:
                    35:88:fe:a4:85:6f:c8:f6:96:2d:0f:21:2a:35:00:
                    00:1e:49:b1:1b:b9:c3:30:40:53:91:99:99:d6:af:
                    2f:8b:cd:64:8c:ae:0b:ea:75:b6:8c:0a:95:ef:23:
                    ae:38:63:9c:a0:29:70:0a:7c:8f:bc:6a:2c:bf:d8:
                    df:c5:41:e6:f1:b2:7d:39:d2:9d:53:36:d5:85:0a:
                    af:fa:18:d2:9f:91:bf:ef:50:46:6b:21:e4:27:72:
                    34:03:3b:fa:ef:dc:eb:60:8a:ef:53:46:e7:87:78:
                    7b:42:09:9c:9e:6c:9d:93:c4:df:7f:9b:38:33:e4:
                    8f:5c:2d:88:af:8c:b0:0b:be:a8:0b:6d:6c:37:3e:
                    bc:3d:fd:57:8b:3d:14:e6:9f:b8:33:df:2f:20:d8:
                    4b:76:d4:98:eb:69:03:a7:4a:ae:20:4a:37:69:be:
                    7f:51:1e:d1:50:32:20:8e:92:3d:70:d5:80:63:e3:
                    15:16:fc:dc:fe:bd:9b:9f:b2:d4:ef:58:ca:95:d0:
                    40:ec:9f:9f:53:35:55:7b:6d:6f:e8:b3:c7:35:de:
                    ff:f7:42:5b:76:73:29:b9:53:30:1e:8d:d8:82:4a:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FD:78:B7:05:96:5B:17:AD:2A:F1:D3:8D:0E:8B:5D:4C:90:58:B9
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/3f14twWWWxetKvHTjQ6LXUyQWLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:51:f7:1d:ca:28:96:ff:29:59:f9:40:59:4b:74:04:f1:0b:
         be:7b:06:e6:fc:53:68:ec:a0:ab:1d:bf:3b:12:18:13:9f:d7:
         c0:a2:cd:23:e8:f1:24:61:c7:67:7b:57:17:7a:d0:91:64:bb:
         d7:66:ba:54:da:3b:7f:14:4f:4e:3f:7b:41:e5:c8:71:e2:bc:
         18:d7:0c:4e:99:21:da:9c:cc:70:3a:79:db:10:b3:42:00:0f:
         72:b9:24:38:fd:b4:74:f8:66:48:06:c1:96:0f:58:fd:ad:43:
         a2:a5:79:70:1a:4c:66:50:67:39:62:ea:43:0f:1e:98:9a:81:
         53:95:3f:5a:83:40:51:41:00:55:00:9a:49:49:12:54:29:cb:
         9b:a0:3f:c9:5c:46:51:8e:95:55:af:8e:a0:8d:fc:f5:27:d1:
         1c:c0:0d:07:0c:6d:ea:51:07:bd:67:7d:2b:a7:3b:64:21:25:
         5d:dd:b3:82:d5:69:37:00:dc:ef:74:22:66:dd:c8:a2:d8:bf:
         7c:c8:78:15:d6:f0:33:16:b7:0c:b4:2f:6d:58:6d:6e:ee:7a:
         fa:de:4f:75:20:ff:72:8d:ba:8c:f0:6f:b9:1b:81:6e:ec:ea:
         98:a6:54:04:b1:d4:6a:f3:85:2f:8f:e6:27:d6:9d:61:74:4f:
         79:d7:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:12 2025 by rpki-client