Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/V6O1l3FbD455ywNsyI-V1MKvn_c.roa
File:                     V6O1l3FbD455ywNsyI-V1MKvn_c.roa (raw, json)
Hash identifier:          zdQsTW3BB2gT/tQXcZvK9T+WLKKN1a/XCWS6sbR8AGQ=
Subject key identifier:   57:A3:B5:97:71:5B:0F:8E:79:CB:03:6C:C8:8F:95:D4:C2:AF:9F:F7
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       4B
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/V6O1l3FbD455ywNsyI-V1MKvn_c.roa
Signing time:             Sat 01 Mar 2025 01:29:47 +0000
ROA not before:           Sat 01 Mar 2025 01:29:47 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     17698
IP address blocks:        220.213.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar  1 01:29:47 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=57A3B597715B0F8E79CB036CC88F95D4C2AF9FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:5f:10:e7:71:49:6e:54:f4:ff:1b:0f:f6:
                    db:10:e0:c8:bc:ee:c4:a2:09:16:9c:9c:35:07:be:
                    b7:a3:80:a9:00:21:35:79:35:0d:39:9a:61:a3:bd:
                    67:89:13:f7:85:14:87:84:b9:4d:4d:5d:9e:1b:4a:
                    65:b8:47:59:7b:58:e0:42:aa:cb:64:f8:15:15:9b:
                    4d:90:f8:36:3c:e5:cd:3e:76:5b:29:e8:11:8e:e4:
                    63:0b:d0:e8:dd:f6:a7:b1:15:d0:a9:39:ee:74:4d:
                    5a:85:93:7d:37:38:cb:a7:20:10:83:0d:a7:b7:a8:
                    8b:37:16:05:5c:e5:ad:1e:1e:39:18:b3:7c:51:36:
                    ad:38:3f:85:81:84:aa:e9:1c:71:fe:25:59:0e:22:
                    99:0d:90:71:95:1b:f4:c3:69:38:e4:55:99:18:05:
                    ad:a2:55:a4:ca:c6:25:d8:90:cb:11:f8:1d:c5:f5:
                    28:48:7b:d3:2e:63:38:3f:db:ee:6f:fd:b3:48:24:
                    40:41:cf:06:14:dd:cb:61:ff:2d:1b:12:06:44:a0:
                    b0:9d:72:33:4b:b7:1e:93:e4:7b:fa:32:61:1d:cf:
                    b9:8b:a1:57:6d:aa:35:7b:53:d5:a3:3e:ff:6a:3b:
                    a4:d3:a1:15:d1:7e:df:ee:f9:a9:e9:78:9b:77:46:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:B5:97:71:5B:0F:8E:79:CB:03:6C:C8:8F:95:D4:C2:AF:9F:F7
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/V6O1l3FbD455ywNsyI-V1MKvn_c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.213.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d7:9e:1d:01:9f:0f:81:07:63:42:b7:55:d9:f6:10:4b:dc:19:
         84:51:13:fd:48:20:0f:4f:37:32:b3:f5:2c:06:9e:6c:a3:9b:
         f6:c6:95:3f:fd:2e:54:52:19:97:6f:a6:fa:8e:08:e3:68:ba:
         a7:3e:24:f8:9e:e8:53:9a:36:3c:fb:d3:13:90:cb:b5:bc:9f:
         e9:8d:c5:d6:e1:6f:0c:d3:6a:73:06:02:01:6c:4e:77:9c:89:
         72:38:e7:92:f2:2e:7c:04:63:47:c2:cb:dc:f2:ee:ad:21:35:
         c0:df:9a:6d:c3:4b:6e:2a:0b:9f:e8:4f:66:e3:5c:cf:27:e1:
         8a:da:da:7e:72:0b:94:61:7e:99:0e:36:e8:34:b2:46:89:56:
         68:bc:8a:3a:c5:be:e8:5f:be:a3:d9:59:a9:09:9c:5b:a0:62:
         1e:9f:74:e2:98:5b:76:df:c1:ab:73:dc:c5:b0:dc:83:da:70:
         d7:2c:dd:91:dc:59:45:40:42:ee:be:e8:f7:4b:db:a0:97:f1:
         b9:dc:84:59:b9:10:99:47:2f:b2:01:1c:f7:23:d0:4e:f7:43:
         3c:c1:a2:b0:e8:80:0e:14:98:98:73:ef:7b:d1:65:b9:56:4a:
         10:08:a8:5b:4f:bc:d8:1e:1d:91:b2:3e:94:af:2f:93:b5:f9:
         e0:f6:04:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:23 2025 by rpki-client