Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/CoG805L5C41jVCyenNVjCgb3A-Q.roa
File:                     CoG805L5C41jVCyenNVjCgb3A-Q.roa (raw, json)
Hash identifier:          PvzL8avkfoMzRJlpSUwtP5EwtgciRg3JI588OKejLEo=
Subject key identifier:   0A:81:BC:D3:92:F9:0B:8D:63:54:2C:9E:9C:D5:63:0A:06:F7:03:E4
Certificate issuer:       /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Certificate serial:       27
Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/CoG805L5C41jVCyenNVjCgb3A-Q.roa
Signing time:             Sat 01 Nov 2025 01:33:10 +0000
ROA not before:           Sat 01 Nov 2025 01:33:10 +0000
ROA not after:            Thu 15 Oct 2026 01:30:02 +0000
asID:                     7511
IP address blocks:        202.79.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 18:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
        Validity
            Not Before: Nov  1 01:33:10 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=0A81BCD392F90B8D63542C9E9CD5630A06F703E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:a7:65:0b:85:c0:5a:b1:ee:67:c4:cb:e7:
                    49:c2:fb:19:d3:51:d3:31:a8:85:8f:a5:76:1d:75:
                    7c:33:ed:53:f6:14:25:49:37:5e:0b:6e:8d:98:b1:
                    0b:29:1a:08:20:6f:5b:39:0d:99:21:bb:81:9c:91:
                    1c:ae:b1:53:b1:67:19:f7:da:2d:07:f8:8d:a4:1f:
                    cb:4e:8e:5a:55:09:1e:8a:3d:9a:1a:fa:34:eb:ea:
                    e3:65:53:b1:17:5c:06:a8:1b:43:1e:be:2c:03:cf:
                    f1:ce:ff:68:98:43:a8:c9:8d:61:bb:b5:50:3c:68:
                    06:b0:b3:7a:7d:73:65:5d:b6:c3:07:73:c6:58:3b:
                    a4:5a:9d:87:a0:61:15:4c:9f:79:fb:f6:1f:af:84:
                    d0:58:9c:b3:16:2c:60:0b:12:1c:07:7e:9d:30:10:
                    ee:1e:8a:80:8b:53:bc:c6:c6:60:c1:09:8a:1f:95:
                    c4:81:6e:cb:d8:47:9a:6b:06:0a:7d:95:f8:51:26:
                    ce:2f:e1:9d:da:f1:cd:cd:7f:58:bf:92:6a:34:8a:
                    54:cd:0e:2f:42:47:66:e7:20:10:1d:f4:3a:ca:fa:
                    c9:ba:35:d6:b2:09:4f:58:d7:f1:83:30:f5:c5:a0:
                    22:3d:34:3a:d5:a4:a9:88:f8:b9:c0:a3:32:72:e7:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:BC:D3:92:F9:0B:8D:63:54:2C:9E:9C:D5:63:0A:06:F7:03:E4
            X509v3 Authority Key Identifier:
                keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/CoG805L5C41jVCyenNVjCgb3A-Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:bc:9f:cd:1a:9f:49:03:2a:d9:5e:21:5b:aa:b2:12:8b:
         73:8b:fb:72:0b:38:40:18:49:94:18:ad:9d:f9:09:48:25:1a:
         2d:56:77:69:73:f8:e6:0a:ca:8d:c9:84:2a:41:7e:ea:b0:ac:
         ff:ff:33:f3:7f:40:2c:4d:db:b8:02:b8:f8:74:7a:87:5b:a6:
         9c:b2:35:44:47:f9:83:11:0b:be:18:76:d4:06:0d:47:10:8c:
         4b:66:f5:b7:63:7b:19:29:8d:43:95:70:1d:1e:61:85:94:c8:
         2f:29:a1:a3:80:35:94:83:e8:af:12:86:c9:a6:6e:0a:90:ec:
         d3:df:c3:0c:ca:6d:e3:ba:20:00:b7:3b:28:c5:c9:85:16:0b:
         2a:08:4e:5d:fd:7e:13:43:ae:d3:8f:30:9a:78:d4:db:8c:7b:
         bc:3f:90:c1:5e:fa:ca:7f:71:98:d1:fc:74:89:42:b0:08:84:
         7d:eb:1e:54:11:18:60:c2:9f:8e:c2:d7:e7:33:d1:61:35:f3:
         2a:97:e8:89:46:05:9b:47:c6:f9:62:de:49:3c:6b:a3:60:52:
         05:e5:47:6a:a0:61:95:92:ad:f5:0d:80:cf:24:52:34:a9:55:
         29:d6:81:c2:f4:7d:11:15:b0:3a:5b:07:c4:e8:c5:be:92:ed:
         45:e5:8b:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyREQz
RkQ2OEJENzc0Q0Y5QzJCOTlENjcwQURBOUNBRDlGOTYzQTVEMB4XDTI1MTEwMTAx
MzMxMFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMEE4MUJDRDM5MkY5MEI4
RDYzNTQyQzlFOUNENTYzMEEwNkY3MDNFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJuTp2ULhcBase5nxMvnScL7GdNR0zGohY+ldh11fDPtU/YUJUk3
XgtujZixCykaCCBvWzkNmSG7gZyRHK6xU7FnGffaLQf4jaQfy06OWlUJHoo9mhr6
NOvq42VTsRdcBqgbQx6+LAPP8c7/aJhDqMmNYbu1UDxoBrCzen1zZV22wwdzxlg7
pFqdh6BhFUyfefv2H6+E0FicsxYsYAsSHAd+nTAQ7h6KgItTvMbGYMEJih+VxIFu
y9hHmmsGCn2V+FEmzi/hndrxzc1/WL+SajSKVM0OL0JHZucgEB30Osr6ybo11rIJ
T1jX8YMw9cWgIj00OtWkqYj4ucCjMnLn8PkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQKgbzTkvkLjWNULJ6c1WMKBvcD5DAfBgNVHSMEGDAWgBQt0/1ovXdM+cK5nWcK
2pytn5Y6XTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjk0L0xkUDlhTDEzVFBuQ3VaMW5DdHFjclotV09sMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0xkUDlhTDEzVFBuQ3VaMW5DdHFjclot
V09sMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82OTQvQ29HODA1TDVDNDFqVkN5ZW5OVmpDZ2IzQS1RLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8pPCDANBgkqhkiG9w0BAQsFAAOCAQEAFtC8n80an0kDKtleIVuqshKLc4v7
cgs4QBhJlBitnfkJSCUaLVZ3aXP45grKjcmEKkF+6rCs//8z839ALE3buAK4+HR6
h1umnLI1REf5gxELvhh21AYNRxCMS2b1t2N7GSmNQ5VwHR5hhZTILymho4A1lIPo
rxKGyaZuCpDs09/DDMpt47ogALc7KMXJhRYLKghOXf1+E0Ou048wmnjU24x7vD+Q
wV76yn9xmNH8dIlCsAiEfeseVBEYYMKfjsLX5zPRYTXzKpfoiUYFm0fG+WLeSTxr
o2BSBeVHaqBhlZKt9Q2AzyRSNKlVKdaBwvR9ERWwOlsHxOjFvpLtReWLJg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:58:24 2025 by rpki-client