Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/Dj73QDamaSz4nFweKzI-yGSvVyk.roa
File:                     Dj73QDamaSz4nFweKzI-yGSvVyk.roa (raw, json)
Hash identifier:          NclVFqqN/3rBnWAhEDC5Gz/cgSzdN+CSYJo4sDnRJW0=
Subject key identifier:   0E:3E:F7:40:36:A6:69:2C:F8:9C:5C:1E:2B:32:3E:C8:64:AF:57:29
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0168
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Dj73QDamaSz4nFweKzI-yGSvVyk.roa
Signing time:             Wed 01 Oct 2025 01:30:03 +0000
ROA not before:           Wed 01 Oct 2025 01:30:03 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     10021
IP address blocks:        117.55.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 13:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:30:03 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=0E3EF74036A6692CF89C5C1E2B323EC864AF5729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:45:7c:26:2e:68:d3:53:42:a1:83:71:cf:
                    02:57:96:98:d2:29:9a:25:68:44:8b:55:89:f1:ca:
                    05:5c:5d:b0:f2:39:e7:d3:4c:19:ba:1e:d2:cd:5a:
                    b4:06:7d:2e:d1:03:52:ac:de:26:56:85:c1:22:8c:
                    97:f2:a7:17:34:f6:c3:40:ef:8f:a2:58:1e:b9:80:
                    3c:07:94:6f:da:9c:e0:65:d1:f5:0a:83:7f:b7:52:
                    9e:95:fd:07:4e:81:cc:44:e2:e6:7d:47:34:47:23:
                    5f:98:1c:1b:2e:c9:f8:10:fe:a9:b0:18:b8:99:b4:
                    9d:0f:21:ad:10:90:48:4b:07:5d:3e:ce:62:eb:96:
                    d2:f2:bc:3b:e7:ae:06:34:7f:6f:18:48:21:9c:9a:
                    e0:cd:6c:4a:04:3b:a5:0c:a7:36:9c:b6:b8:27:e4:
                    c5:25:2b:82:38:c6:6a:ab:07:dc:d5:09:cb:98:b9:
                    93:60:5f:74:42:a2:7f:da:c7:a7:5b:8e:38:8a:ba:
                    3d:8c:78:05:c0:90:b7:ac:73:6a:0e:fe:57:23:fa:
                    ed:e9:1b:4b:e5:ac:27:45:3a:f3:f9:e8:f6:0d:3c:
                    45:e9:df:1e:20:79:28:e4:21:01:bc:d0:c2:aa:b0:
                    fa:df:bc:ee:d0:c4:6a:c6:88:42:2a:74:fe:7d:bf:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3E:F7:40:36:A6:69:2C:F8:9C:5C:1E:2B:32:3E:C8:64:AF:57:29
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/Dj73QDamaSz4nFweKzI-yGSvVyk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.55.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:4f:30:91:53:41:04:70:4b:07:b9:79:df:c3:cd:02:fa:42:
         43:71:04:f3:c9:3b:41:84:0e:66:04:01:fe:d7:44:d1:f7:3a:
         10:51:b4:4a:3e:9f:d0:b6:29:8e:21:c8:80:ac:6a:ce:82:00:
         80:1b:5d:21:a4:d5:01:84:a9:c1:ec:9a:cd:f6:3f:b7:7d:9a:
         32:3f:de:4f:39:2f:bd:09:e4:01:0c:2a:ac:c4:7e:45:69:7c:
         6a:9f:b1:d1:b5:94:0d:92:2a:c6:fd:50:db:49:87:8a:0a:c9:
         5d:32:a9:c9:7a:1a:c3:c4:1c:ef:5d:e7:95:75:ec:2e:d8:b2:
         c1:dc:44:58:24:03:7b:85:62:81:ab:b7:e1:81:ea:2c:0e:dc:
         23:0b:ff:2b:85:4e:ae:a6:a2:e7:2c:3a:7a:12:14:1a:33:4c:
         94:16:80:c1:7d:89:7f:5e:16:7d:06:b3:13:f1:c8:25:db:8c:
         d2:84:78:fe:85:06:a7:2f:62:85:9c:57:65:48:4e:be:cc:b2:
         6c:bc:bb:7b:d0:cf:ff:fc:53:ec:40:71:8a:9a:05:39:8e:b6:
         28:b4:2f:24:7a:8c:3e:4b:dd:3f:47:a2:f4:c7:76:02:bf:8e:
         bd:2a:7e:43:20:52:eb:3e:3f:22:4a:57:99:94:bc:35:9b:db:
         56:5a:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:25 2025 by rpki-client