Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/7V6nO1pv52oYqrMAWqNLhNz2kuk.roa
File:                     7V6nO1pv52oYqrMAWqNLhNz2kuk.roa (raw, json)
Hash identifier:          NJM0jVa2aKR2zF9V/01dLCS2ZoM6ZS94bHjjVbGf6h0=
Subject key identifier:   ED:5E:A7:3B:5A:6F:E7:6A:18:AA:B3:00:5A:A3:4B:84:DC:F6:92:E9
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0160
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7V6nO1pv52oYqrMAWqNLhNz2kuk.roa
Signing time:             Wed 01 Oct 2025 01:29:57 +0000
ROA not before:           Wed 01 Oct 2025 01:29:57 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 13:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:29:57 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=ED5EA73B5A6FE76A18AAB3005AA34B84DCF692E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:02:1a:46:a5:0a:13:80:3d:d0:6a:ca:a4:
                    a2:cd:1f:62:2a:27:c0:9d:df:8f:36:c6:b9:74:36:
                    c0:49:61:bb:b2:8f:52:13:9d:ad:62:d5:f0:91:17:
                    09:f9:00:31:f3:6d:12:db:12:ce:6a:db:81:11:f6:
                    56:9d:c7:a2:70:c9:cb:cb:8b:c5:e8:86:4e:f7:e8:
                    d8:f2:b1:cf:cd:ac:6a:25:8e:ec:8e:41:17:f1:1a:
                    51:b1:49:90:1b:62:69:6e:47:ca:ad:2c:66:6d:2f:
                    a5:92:d7:20:ec:fb:9d:f8:2d:2a:63:37:1a:21:21:
                    41:d6:de:d0:48:bb:7a:d3:c6:cc:04:42:f4:0b:c9:
                    cd:c4:77:e0:47:74:21:b3:ac:cc:a4:81:f3:be:28:
                    4f:08:27:ae:d4:48:fa:79:ad:33:23:86:30:56:f9:
                    1c:62:64:84:71:9f:f9:08:d9:0e:28:8b:56:10:6c:
                    7f:08:7a:61:d3:17:38:86:39:f6:0f:a2:61:a4:33:
                    a8:63:6d:51:47:78:a5:ca:84:a8:b7:3d:be:a8:aa:
                    53:71:f0:17:1b:29:6b:75:1b:18:98:ea:3b:52:96:
                    8f:a4:55:03:93:a5:df:ca:7f:70:6b:77:fc:de:57:
                    18:5e:44:2b:91:7c:0d:86:39:6a:19:4f:6a:7b:d7:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:A7:3B:5A:6F:E7:6A:18:AA:B3:00:5A:A3:4B:84:DC:F6:92:E9
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7V6nO1pv52oYqrMAWqNLhNz2kuk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:45:d8:7f:6d:bd:36:57:01:fc:27:66:53:48:dd:99:67:61:
         39:ba:22:a2:d5:bb:ca:dd:63:f6:28:bd:f7:dd:6e:fc:f8:7e:
         6c:27:a8:e9:04:b0:86:90:b2:f8:ff:b5:f9:9b:e6:30:a8:11:
         80:47:e1:75:78:50:f1:25:bb:72:72:8f:d4:7b:45:ea:a4:96:
         7f:d3:d9:1d:40:67:62:5d:1d:35:0c:d4:c5:be:67:39:34:1c:
         b2:5a:36:c5:29:40:1e:99:92:8f:e7:50:50:55:c1:b5:1d:49:
         b7:7b:79:8c:2d:31:03:6f:74:9a:10:bc:fb:fe:73:50:c7:6a:
         6b:99:ad:5f:95:4f:54:9c:75:42:5e:83:64:0b:c2:17:e7:fb:
         27:ca:bb:d0:a1:ce:bf:29:d5:50:b1:8d:a6:40:ab:ef:75:aa:
         3e:0d:83:ae:0d:0a:6f:f9:b3:07:13:3f:41:77:35:f8:38:59:
         f3:9c:15:13:1a:54:0d:fc:28:38:f2:8c:30:83:aa:62:7a:6e:
         a0:0b:97:e1:e7:b5:26:7c:e1:b1:08:c6:7a:85:39:94:88:4c:
         9c:ae:41:73:4e:7b:31:f6:12:76:ef:97:46:d6:8c:5b:a8:df:
         bc:68:77:94:b8:f4:31:83:68:c9:16:13:e8:d1:05:30:c7:2a:
         e6:37:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:25 2025 by rpki-client