Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vUxks6K8sasi5UoO08UiSyy2Xt4.roa
File:                     vUxks6K8sasi5UoO08UiSyy2Xt4.roa (raw, json)
Hash identifier:          /Q9hXQLEaI1Eb4HVv9nvMO4BAzTfvITJSQIDNSSbuF8=
Subject key identifier:   BD:4C:64:B3:A2:BC:B1:AB:22:E5:4A:0E:D3:C5:22:4B:2C:B6:5E:DE
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       022C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vUxks6K8sasi5UoO08UiSyy2Xt4.roa
Signing time:             Mon 30 Sep 2024 01:33:48 +0000
ROA not before:           Mon 30 Sep 2024 01:33:48 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        210.224.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:48 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=BD4C64B3A2BCB1AB22E54A0ED3C5224B2CB65EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:5b:e7:ba:23:e5:ee:80:cc:66:38:87:47:
                    67:41:7d:78:08:bc:c4:7d:9d:32:18:72:14:25:c5:
                    7b:2d:98:40:9a:1c:24:7d:64:78:1e:73:d0:9a:46:
                    d7:63:24:a8:34:76:8b:0f:a4:5c:a2:8a:59:5d:5e:
                    65:c3:3b:a1:9b:23:c5:2d:a2:45:51:e1:b2:38:5a:
                    89:e8:92:7f:fc:2a:88:fa:a4:c9:ad:51:e3:83:19:
                    a6:34:43:be:07:57:e8:3a:d0:14:4d:8e:f0:bf:4e:
                    ab:ae:7c:a0:40:38:f0:aa:36:cd:88:23:b6:a0:a8:
                    97:0d:a5:01:e5:0f:9f:f1:14:1f:1c:f8:b2:f0:74:
                    61:a2:39:26:d8:31:67:98:ca:af:ac:56:13:65:77:
                    55:ac:1d:62:f7:9b:2a:ed:da:da:ae:75:02:64:b2:
                    1d:fb:ad:13:7e:07:ad:e4:04:12:53:44:24:f5:4f:
                    48:0e:82:47:11:b5:15:a2:37:8b:df:2e:68:ed:03:
                    ac:b2:88:7f:d6:ef:e5:18:b6:c9:db:16:f8:f4:8d:
                    4f:80:49:31:6a:7f:10:68:48:8e:72:0f:b1:b3:5c:
                    d1:cf:e7:fc:f0:8e:74:c0:a6:47:ca:38:a5:92:9c:
                    5a:29:81:e3:d4:03:c0:ae:9a:20:c5:5c:40:e3:73:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4C:64:B3:A2:BC:B1:AB:22:E5:4A:0E:D3:C5:22:4B:2C:B6:5E:DE
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/vUxks6K8sasi5UoO08UiSyy2Xt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ce:5d:9d:d8:c3:49:56:2f:f2:4b:0b:41:16:3e:b5:19:ed:bb:
         05:8c:1b:7e:46:7b:92:85:f3:b8:47:35:ec:53:93:f5:2d:0f:
         fb:cf:46:24:2f:0b:28:c6:6f:41:bb:53:c3:4f:7a:2a:f9:7e:
         d0:44:8c:bd:e5:1d:e5:d9:50:e5:f5:ee:e5:10:27:cc:cf:12:
         25:49:3c:dc:5e:0a:52:2c:79:2c:eb:2d:da:bd:16:d9:95:be:
         98:74:2a:ec:a7:5f:37:7f:f7:10:70:31:2c:19:e6:1a:5f:8f:
         bb:6e:74:f4:a5:bb:ae:4d:af:a3:27:2a:e7:f6:70:c3:47:21:
         0c:80:79:c9:fe:66:f1:93:7c:c6:f9:71:33:7c:33:44:52:ad:
         8b:01:a0:1c:c8:48:14:b0:20:f2:f2:59:bd:10:26:13:46:e1:
         79:37:9e:4b:b2:01:c6:f2:a1:c2:79:d4:a4:9d:f7:71:f3:e0:
         dc:88:7b:71:30:53:74:df:66:5d:e4:30:5c:ff:b5:f2:b0:9b:
         d6:fd:bd:2a:24:a7:13:84:5b:17:56:de:c0:35:3d:b6:7d:44:
         83:11:fd:bf:24:c9:1c:37:58:a0:09:13:03:24:85:be:b9:96:
         72:d4:a1:be:6e:be:3e:bb:47:87:b5:43:a9:ca:0c:1f:92:09:
         77:f8:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:01 2025 by rpki-client