Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Jnd13Qfm0gKlJOKMQG6BNgA1nFI.roa
File:                     Jnd13Qfm0gKlJOKMQG6BNgA1nFI.roa (raw, json)
Hash identifier:          FeKNTgWMs5Ws2qIZYN0QilvO5Iuz2HMiSCLGO2dVT/A=
Subject key identifier:   26:77:75:DD:07:E6:D2:02:A5:24:E2:8C:40:6E:81:36:00:35:9C:52
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0147
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Jnd13Qfm0gKlJOKMQG6BNgA1nFI.roa
Signing time:             Fri 01 Aug 2025 01:34:01 +0000
ROA not before:           Fri 01 Aug 2025 01:34:01 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     8220
IP address blocks:        110.50.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug  1 01:34:01 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=267775DD07E6D202A524E28C406E813600359C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:d6:17:cf:38:75:37:5e:67:8e:4c:9c:62:
                    10:03:25:a5:40:29:c9:eb:f0:c3:3f:85:05:28:4e:
                    ff:26:56:30:99:00:39:78:7b:ab:b5:8a:02:a4:e6:
                    1c:b5:55:cd:4a:69:6e:ee:df:c8:ea:59:f1:17:c1:
                    8b:e7:85:f4:35:d1:3c:a6:9e:db:82:ae:dc:92:3f:
                    93:7b:2b:d2:57:6d:02:d3:9a:49:b9:90:30:a2:ec:
                    2f:df:fd:b9:c7:bf:20:d7:81:31:39:38:7e:26:00:
                    cf:a9:e0:5a:ed:49:6f:05:3f:80:bb:4b:90:a8:f7:
                    6f:82:92:00:d1:72:96:46:c2:a3:50:11:3e:b7:e0:
                    ca:e1:05:b5:83:96:b2:7e:8b:49:81:3d:be:5a:46:
                    a7:5b:14:d7:1a:99:31:9b:31:96:bc:6d:d9:b2:19:
                    f4:68:ae:c6:7e:64:83:ea:c0:04:41:78:5b:af:e1:
                    17:41:08:c5:52:8b:dc:95:80:df:78:9d:96:93:85:
                    a6:f1:34:f0:5a:29:4e:6a:71:53:b9:59:5e:a4:14:
                    44:bd:bd:73:a5:e5:ec:9f:60:35:9e:1f:46:43:03:
                    35:2d:9f:11:8b:91:a8:45:f6:a5:47:32:e7:6d:db:
                    8d:cc:eb:f3:25:9f:30:d8:8c:b7:af:8a:d3:93:ba:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:77:75:DD:07:E6:D2:02:A5:24:E2:8C:40:6E:81:36:00:35:9C:52
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Jnd13Qfm0gKlJOKMQG6BNgA1nFI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:22:29:73:08:2d:e5:e8:0d:a2:ea:24:b1:f8:38:02:c5:bc:
         86:52:2f:61:20:9d:a8:8c:a6:3a:d1:b8:83:da:f6:a1:96:7d:
         57:4f:fc:d2:29:06:26:de:45:67:a8:be:c9:72:19:11:bb:03:
         6f:96:43:8f:8b:4a:1f:2b:dc:50:a7:a9:5f:bf:24:60:a9:72:
         09:6c:a4:b8:50:9c:49:48:48:c1:46:99:71:bc:7e:8f:4f:03:
         85:29:bb:3e:1c:50:7f:b9:14:9e:78:e1:9b:03:0e:c2:fd:87:
         57:80:03:92:80:b8:20:e9:ed:4e:11:8e:18:b1:0e:ec:28:e8:
         33:e6:80:4e:bb:d6:6b:c0:9a:37:39:4f:71:5f:de:08:0d:40:
         56:bc:96:d7:dd:8a:32:d4:9f:96:98:bc:94:a1:fb:19:e1:f8:
         a9:fa:f6:08:22:bb:3f:06:18:e3:c2:f1:9b:16:cb:e7:eb:7c:
         b1:3a:bf:81:e6:44:a9:40:96:37:d0:b8:84:3c:2c:01:6d:f4:
         1a:e5:b5:fa:19:6b:fb:d6:42:46:2c:a4:e9:38:d8:8e:fb:5a:
         21:c0:51:f5:62:49:4a:02:28:b1:9d:fb:ca:41:cb:26:5d:b4:
         65:7c:48:78:ce:90:55:57:94:53:5b:a4:4e:43:fd:be:57:c6:
         1d:ac:7a:1c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTA4MDEw
MTM0MDFaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDI2Nzc3NUREMDdFNkQy
MDJBNTI0RTI4QzQwNkU4MTM2MDAzNTlDNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2ztYXzzh1N15njkycYhADJaVAKcnr8MM/hQUoTv8mVjCZADl4
e6u1igKk5hy1Vc1KaW7u38jqWfEXwYvnhfQ10TymntuCrtySP5N7K9JXbQLTmkm5
kDCi7C/f/bnHvyDXgTE5OH4mAM+p4FrtSW8FP4C7S5Co92+CkgDRcpZGwqNQET63
4MrhBbWDlrJ+i0mBPb5aRqdbFNcamTGbMZa8bdmyGfRorsZ+ZIPqwARBeFuv4RdB
CMVSi9yVgN94nZaThabxNPBaKU5qcVO5WV6kFES9vXOl5eyfYDWeH0ZDAzUtnxGL
kahF9qVHMudt243M6/MlnzDYjLevitOTuvX7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJnd13Qfm0gKlJOKMQG6BNgA1nFIwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L0puZDEzUWZtMGdLbEpPS01RRzZCTmdBMW5GSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuMkAwDQYJKoZIhvcNAQELBQADggEBAJciKXMILeXoDaLqJLH4OALFvIZS
L2EgnaiMpjrRuIPa9qGWfVdP/NIpBibeRWeovslyGRG7A2+WQ4+LSh8r3FCnqV+/
JGCpcglspLhQnElISMFGmXG8fo9PA4Upuz4cUH+5FJ544ZsDDsL9h1eAA5KAuCDp
7U4RjhixDuwo6DPmgE671mvAmjc5T3Ff3ggNQFa8ltfdijLUn5aYvJSh+xnh+Kn6
9ggiuz8GGOPC8ZsWy+frfLE6v4HmRKlAljfQuIQ8LAFt9BrltfoZa/vWQkYspOk4
2I77WiHAUfViSUoCKLGd+8pByyZdtGV8SHjOkFVXlFNbpE5D/b5Xxh2sehw=
-----END CERTIFICATE-----
Generated at Mon Aug 11 02:26:24 2025 by rpki-client