Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/GVc1h0S5OOgnry1EfXv9aaEA4vg.roa
File:                     GVc1h0S5OOgnry1EfXv9aaEA4vg.roa (raw, json)
Hash identifier:          wEq/CgOo3FUAjSBGTKBO7x1IKwlvr6n8039Ie0d3z8I=
Subject key identifier:   19:57:35:87:44:B9:38:E8:27:AF:2D:44:7D:7B:FD:69:A1:00:E2:F8
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       015D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/GVc1h0S5OOgnry1EfXv9aaEA4vg.roa
Signing time:             Mon 01 Sep 2025 01:29:39 +0000
ROA not before:           Mon 01 Sep 2025 01:29:39 +0000
ROA not after:            Sat 15 Aug 2026 01:30:02 +0000
asID:                     10021
IP address blocks:        27.110.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Sep  1 01:29:39 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=1957358744B938E827AF2D447D7BFD69A100E2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:8d:76:2b:7f:e0:b4:91:3f:39:5b:c8:d9:
                    4e:2d:c5:62:58:30:3b:c3:25:1a:0f:2a:d9:a6:00:
                    d7:f9:76:a9:2b:3f:12:66:6b:b3:67:c9:91:e1:89:
                    43:e9:c0:94:9d:8c:d0:99:c1:ba:6d:c4:9e:1c:ae:
                    60:63:02:f6:c4:d9:b1:fd:22:ba:68:f2:66:85:2d:
                    c9:ea:76:19:4f:5d:9d:e8:a8:55:f5:c4:e4:03:71:
                    4c:72:44:9c:83:1e:26:b9:ea:29:91:02:45:0a:38:
                    7a:8b:65:df:71:34:0d:56:70:f7:95:e8:0a:09:ca:
                    33:f0:a9:29:6d:e2:f7:8b:15:c7:ca:9d:24:27:fb:
                    62:e8:fe:bd:43:6b:6e:3e:50:14:08:f5:d8:33:9e:
                    76:85:c5:09:f3:82:55:3f:65:7b:59:3e:9e:e0:62:
                    4d:85:fd:19:90:aa:95:75:58:36:4a:55:be:37:db:
                    de:90:e0:92:92:cd:86:eb:c1:88:61:c0:04:df:06:
                    68:03:25:64:f9:4f:fd:e6:7d:65:70:3b:12:61:b9:
                    4d:15:e2:3b:95:77:ed:57:ad:71:bc:a0:6e:68:2e:
                    c0:c5:db:9c:90:b1:f3:86:92:4d:5a:1e:66:ea:cf:
                    a3:fe:19:3e:f5:27:cc:b3:67:d0:d2:13:f6:3d:e4:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:35:87:44:B9:38:E8:27:AF:2D:44:7D:7B:FD:69:A1:00:E2:F8
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/GVc1h0S5OOgnry1EfXv9aaEA4vg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.110.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c8:3a:12:97:20:5b:a9:9a:34:16:4c:cd:d4:29:ae:ee:38:c1:
         0e:9e:35:71:55:4c:ca:ce:7a:4a:ff:4b:55:6f:aa:b6:0b:28:
         f2:db:26:2a:4b:bd:2c:c7:1e:63:54:c9:75:62:54:f3:74:9b:
         46:89:e3:73:56:a2:ef:0c:2a:37:e8:01:45:d2:53:c9:a8:1e:
         3b:16:91:03:74:2a:a5:0d:92:c8:0f:7a:01:f5:32:05:26:79:
         99:1e:21:59:34:75:07:ec:19:89:d2:4d:ec:f8:00:bc:38:15:
         c5:4d:6d:71:9a:70:37:a2:25:f7:05:e3:be:f3:a5:eb:02:7e:
         93:7a:6f:27:0f:ca:20:27:46:43:d7:e5:a4:68:66:e9:39:22:
         b1:cf:50:de:68:c4:3e:6a:44:01:3b:2d:60:17:93:55:ce:d9:
         6a:7b:e9:0c:86:ff:1f:3a:46:11:b1:65:36:18:9f:4d:14:44:
         17:18:84:96:fa:18:cb:7b:5e:30:ad:33:f2:9c:bb:cd:25:eb:
         2b:e9:ab:e1:cf:52:31:55:59:a8:bf:44:51:61:04:61:a7:e4:
         17:a1:a0:ad:fa:0c:58:e8:67:97:94:35:a1:1f:fd:ea:06:04:
         ec:1a:9e:1f:9e:78:e7:cc:aa:a2:75:ee:b3:71:51:e4:66:55:
         a9:1f:be:d2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNTA5MDEw
MTI5MzlaFw0yNjA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE5NTczNTg3NDRCOTM4
RTgyN0FGMkQ0NDdEN0JGRDY5QTEwMEUyRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+c412K3/gtJE/OVvI2U4txWJYMDvDJRoPKtmmANf5dqkrPxJm
a7NnyZHhiUPpwJSdjNCZwbptxJ4crmBjAvbE2bH9Irpo8maFLcnqdhlPXZ3oqFX1
xOQDcUxyRJyDHia56imRAkUKOHqLZd9xNA1WcPeV6AoJyjPwqSlt4veLFcfKnSQn
+2Lo/r1Da24+UBQI9dgznnaFxQnzglU/ZXtZPp7gYk2F/RmQqpV1WDZKVb43296Q
4JKSzYbrwYhhwATfBmgDJWT5T/3mfWVwOxJhuU0V4juVd+1XrXG8oG5oLsDF25yQ
sfOGkk1aHmbqz6P+GT71J8yzZ9DSE/Y95AmvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGVc1h0S5OOgnry1EfXv9aaEA4vgwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L0dWYzFoMFM1T09nbnJ5MUVmWHY5YWFFQTR2Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUbbiAwDQYJKoZIhvcNAQELBQADggEBAMg6EpcgW6maNBZMzdQpru44wQ6e
NXFVTMrOekr/S1VvqrYLKPLbJipLvSzHHmNUyXViVPN0m0aJ43NWou8MKjfoAUXS
U8moHjsWkQN0KqUNksgPegH1MgUmeZkeIVk0dQfsGYnSTez4ALw4FcVNbXGacDei
JfcF477zpesCfpN6bycPyiAnRkPX5aRoZuk5IrHPUN5oxD5qRAE7LWAXk1XO2Wp7
6QyG/x86RhGxZTYYn00URBcYhJb6GMt7XjCtM/Kcu80l6yvpq+HPUjFVWai/RFFh
BGGn5BehoK36DFjoZ5eUNaEf/eoGBOwanh+eeOfMqqJ17rNxUeRmVakfvtI=
-----END CERTIFICATE-----
Generated at Sat Sep 6 08:14:49 2025 by rpki-client