Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/jUqd29sxPYV0tMl9qxaxE-zgh04.roa
File:                     jUqd29sxPYV0tMl9qxaxE-zgh04.roa (raw, json)
Hash identifier:          f4LE8tqWivrsnyVPUjLzM/6zXbiX45gJaCvbF4jiNy4=
Subject key identifier:   8D:4A:9D:DB:DB:31:3D:85:74:B4:C9:7D:AB:16:B1:13:EC:E0:87:4E
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       014D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/jUqd29sxPYV0tMl9qxaxE-zgh04.roa
Signing time:             Fri 01 Aug 2025 01:34:04 +0000
ROA not before:           Fri 01 Aug 2025 01:34:04 +0000
ROA not after:            Thu 30 Jul 2026 06:29:08 +0000
asID:                     10021
IP address blocks:        110.50.76.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug  1 01:34:04 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=8D4A9DDBDB313D8574B4C97DAB16B113ECE0874E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:92:58:ae:11:9b:cb:c0:ee:a0:68:3a:a5:
                    07:30:2f:aa:7e:59:d9:f3:d1:be:a9:94:7c:aa:10:
                    ab:16:49:48:08:da:52:cb:41:14:70:79:46:49:a0:
                    2c:1e:aa:ea:19:c0:c9:f7:4a:d6:87:15:a6:50:16:
                    81:e5:9b:0b:46:c2:86:40:29:ff:6e:b6:c8:9f:b9:
                    b5:7d:70:e3:82:9a:1c:05:78:63:48:6d:a0:98:88:
                    d1:88:06:e2:0b:f1:f0:8e:3d:ef:cc:0e:e6:77:af:
                    d3:fb:c2:7c:4f:a4:60:ce:74:b2:3c:29:c5:9a:da:
                    dd:03:a7:32:43:2e:1d:72:73:8f:d6:6c:5c:37:6b:
                    d1:0e:b0:78:12:a2:0b:93:45:bb:b9:f8:d2:b3:16:
                    c2:25:cf:9f:fc:93:12:8e:a7:c5:37:52:05:48:7d:
                    88:b3:0a:7e:bd:50:1c:0a:1e:8d:4a:32:bb:16:21:
                    97:07:b8:7e:bb:39:66:5e:95:9d:76:b4:e6:6e:8e:
                    d6:6d:83:b3:cc:71:88:88:af:53:a2:46:49:20:e4:
                    03:ba:1b:05:ee:e6:bd:fa:43:e1:6e:ed:b3:18:39:
                    9d:08:71:9c:3e:9e:03:54:70:9a:67:39:1c:e5:81:
                    1e:1e:85:84:df:91:ee:9c:41:c6:86:29:9b:ef:14:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4A:9D:DB:DB:31:3D:85:74:B4:C9:7D:AB:16:B1:13:EC:E0:87:4E
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/jUqd29sxPYV0tMl9qxaxE-zgh04.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:f9:a9:b4:7b:df:24:75:82:f0:19:37:b7:34:f3:25:4f:74:
         39:24:d4:f3:0a:8d:d4:3f:a8:d2:de:58:a4:90:f8:e0:e1:6e:
         39:e0:c1:00:52:6f:1f:f2:84:89:8d:38:3f:f3:07:18:5d:10:
         26:07:03:b3:24:79:8b:6e:a6:c9:4c:06:13:9e:21:fe:ee:ea:
         c4:2c:d3:6d:05:bb:bf:34:14:8f:12:10:7c:52:ad:51:bd:db:
         35:66:85:e2:96:d8:3a:dc:f3:6b:c4:8e:62:85:8b:c0:e6:dd:
         30:50:11:3e:4b:45:4c:f0:2d:cf:c6:80:ad:91:f1:86:ab:dd:
         65:f8:69:78:a8:aa:19:0e:90:82:22:87:a5:a0:a2:bc:59:ba:
         52:b7:70:dc:31:e9:cf:25:ec:42:dd:38:18:ce:8f:9e:ee:6f:
         c1:1d:7e:a9:dd:51:e9:09:34:51:df:98:e7:55:46:ec:31:39:
         64:cc:e0:83:78:73:07:63:b7:b2:6e:3e:e9:83:fb:09:a0:08:
         0c:33:1e:22:dc:74:f8:0f:85:4d:92:bf:95:e1:13:16:85:2a:
         ef:ec:1c:a3:eb:4c:c8:4c:c4:5f:a2:49:fc:e4:3a:b5:05:b9:
         62:9f:09:15:40:cb:46:37:d8:9f:41:46:af:3e:de:7a:7a:0c:
         69:23:57:fb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTA4MDEw
MTM0MDRaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDhENEE5RERCREIzMTNE
ODU3NEI0Qzk3REFCMTZCMTEzRUNFMDg3NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCet5JYrhGby8DuoGg6pQcwL6p+Wdnz0b6plHyqEKsWSUgI2lLL
QRRweUZJoCwequoZwMn3StaHFaZQFoHlmwtGwoZAKf9utsifubV9cOOCmhwFeGNI
baCYiNGIBuIL8fCOPe/MDuZ3r9P7wnxPpGDOdLI8KcWa2t0DpzJDLh1yc4/WbFw3
a9EOsHgSoguTRbu5+NKzFsIlz5/8kxKOp8U3UgVIfYizCn69UBwKHo1KMrsWIZcH
uH67OWZelZ12tOZujtZtg7PMcYiIr1OiRkkg5AO6GwXu5r36Q+Fu7bMYOZ0IcZw+
ngNUcJpnORzlgR4ehYTfke6cQcaGKZvvFAGjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUjUqd29sxPYV0tMl9qxaxE+zgh04wHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L2pVcWQyOXN4UFlWMHRNbDlxeGF4RS16Z2gwNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFuMkwwDQYJKoZIhvcNAQELBQADggEBAGL5qbR73yR1gvAZN7c08yVPdDkk
1PMKjdQ/qNLeWKSQ+ODhbjngwQBSbx/yhImNOD/zBxhdECYHA7MkeYtupslMBhOe
If7u6sQs020Fu780FI8SEHxSrVG92zVmheKW2Drc82vEjmKFi8Dm3TBQET5LRUzw
Lc/GgK2R8Yar3WX4aXioqhkOkIIih6WgorxZulK3cNwx6c8l7ELdOBjOj57ub8Ed
fqndUekJNFHfmOdVRuwxOWTM4IN4cwdjt7JuPumD+wmgCAwzHiLcdPgPhU2Sv5Xh
ExaFKu/sHKPrTMhMxF+iSfzkOrUFuWKfCRVAy0Y32J9BRq8+3np6DGkjV/s=
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:56:49 2025 by rpki-client