Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/GxvjRLJtz0bj-R8mtitY4y5PcBs.roa
File:                     GxvjRLJtz0bj-R8mtitY4y5PcBs.roa (raw, json)
Hash identifier:          yb4lINOg/uD6Kp9b6f4bFLCl/K40Ivot0oNg+W+8n44=
Subject key identifier:   1B:1B:E3:44:B2:6D:CF:46:E3:F9:1F:26:B6:2B:58:E3:2E:4F:70:1B
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       014C
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/GxvjRLJtz0bj-R8mtitY4y5PcBs.roa
Signing time:             Fri 01 Aug 2025 01:34:03 +0000
ROA not before:           Fri 01 Aug 2025 01:34:03 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10021
IP address blocks:        110.50.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug  1 01:34:03 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=1B1BE344B26DCF46E3F91F26B62B58E32E4F701B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d7:06:3b:6d:8f:c3:66:13:7f:c5:2f:59:e3:
                    bc:c1:7d:8f:ad:f3:af:4e:2a:a5:7a:8b:f1:c5:13:
                    90:44:63:85:e9:7b:00:d7:3b:8d:12:3e:ee:51:b9:
                    93:fd:2f:4d:b5:c7:30:52:f4:31:6f:a6:8d:e4:7c:
                    33:a2:b0:0e:cb:59:50:60:3d:af:72:36:08:69:73:
                    60:b7:19:fa:3e:8e:da:12:4b:34:98:7d:30:d9:8c:
                    6b:de:a3:82:66:8c:08:8a:82:c9:9e:79:3d:5a:84:
                    5a:32:58:58:27:98:08:54:62:df:81:ef:c2:61:51:
                    39:0f:13:d3:be:58:19:70:f8:68:98:f6:ed:5f:25:
                    51:e4:10:c3:be:d8:be:16:71:22:90:63:c0:ef:cc:
                    15:40:a8:b1:74:87:8c:d1:11:96:85:82:89:eb:ea:
                    44:d0:25:0e:c4:77:b9:ea:ee:bf:7d:47:e5:1c:aa:
                    b0:e6:32:1c:6d:31:ab:5c:71:2c:94:70:30:c0:7b:
                    53:4c:69:87:dd:ba:99:e8:a5:cb:b5:cb:41:eb:a9:
                    f7:6e:2b:17:79:49:c4:6c:ae:ab:4b:31:26:b9:c9:
                    bc:34:44:9f:11:e0:1f:0a:6e:f8:ba:1b:ef:63:3a:
                    fb:cb:7b:37:b5:fb:ee:a4:62:7e:90:e2:56:4c:f0:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:E3:44:B2:6D:CF:46:E3:F9:1F:26:B6:2B:58:E3:2E:4F:70:1B
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/GxvjRLJtz0bj-R8mtitY4y5PcBs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:9a:22:a9:40:a3:13:32:09:bd:1a:44:93:5f:dc:06:6b:
         c4:e8:17:f3:4a:68:da:59:ed:0f:d9:c9:16:ef:ee:de:00:ae:
         64:18:a4:8e:da:c7:87:2a:46:44:6c:7d:8e:ba:3e:2c:cd:8b:
         e9:42:a3:21:cc:0d:4e:2c:24:f2:94:31:51:36:c7:c6:80:76:
         93:89:27:af:ec:59:83:31:a9:34:5b:7b:99:60:11:72:6e:d7:
         85:d4:45:a6:aa:a2:42:0c:60:4a:97:b2:ee:59:5d:71:09:e1:
         80:07:68:80:ab:a1:e6:93:00:d4:f3:39:23:2e:56:15:39:45:
         43:d4:01:59:3e:b2:04:5e:87:4f:7c:fa:8b:15:00:65:c6:9e:
         5c:21:22:34:0b:17:1d:e3:9d:66:09:47:2a:14:1a:66:c8:5d:
         33:80:26:06:e4:bf:c7:c0:5d:d5:e4:4f:90:b7:3d:a7:9f:b3:
         f8:2d:1d:59:14:ad:46:0b:c8:cb:55:4d:0d:18:7a:c8:b7:3b:
         b4:4a:33:39:59:b8:51:0e:87:c4:5f:2d:e7:4c:a4:2a:22:3a:
         d3:64:99:fd:6f:e3:1e:27:b4:3d:ab:ba:5f:4e:a0:96:06:f1:
         88:86:30:d6:40:fd:35:37:44:9d:00:62:b4:4f:c0:69:53:32:
         c3:38:c8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:56:54 2025 by rpki-client