Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/i7KOzPY14W0qtisEhgbLuz0-7z8.roa
File:                     i7KOzPY14W0qtisEhgbLuz0-7z8.roa (raw, json)
Hash identifier:          /DDz3D9FHpSYWPSk4PsztUPAtX3KHXs7zv0470vfIL4=
Subject key identifier:   8B:B2:8E:CC:F6:35:E1:6D:2A:B6:2B:04:86:06:CB:BB:3D:3E:EF:3F
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       30
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/i7KOzPY14W0qtisEhgbLuz0-7z8.roa
Signing time:             Fri 31 Jan 2025 01:33:49 +0000
ROA not before:           Fri 31 Jan 2025 01:33:49 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     17698
IP address blocks:        218.40.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Jan 31 01:33:49 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=8BB28ECCF635E16D2AB62B048606CBBB3D3EEF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:85:ba:db:85:a4:fa:4c:2f:31:45:bb:fd:
                    1a:2d:ec:a0:ec:74:b3:0f:cb:62:11:da:02:a1:20:
                    d4:fe:55:8f:91:57:d5:f6:58:d1:10:0a:1f:58:52:
                    50:86:63:fd:c4:76:8b:d5:9f:8f:35:fd:5f:5f:01:
                    37:c4:19:99:4b:3f:af:44:d9:37:89:55:c5:6f:7a:
                    ad:3f:49:0b:d8:41:b4:89:1a:8b:ff:ff:9f:15:e5:
                    ce:9a:c2:ac:2e:0a:53:08:ea:06:94:34:43:6a:9b:
                    ec:9b:39:05:ac:ef:ce:f3:63:21:b6:0e:27:8b:f2:
                    84:69:4d:36:53:b4:7d:97:6f:49:a1:14:0b:17:93:
                    b7:99:20:be:78:34:65:5b:46:89:d4:66:e9:d6:50:
                    92:77:74:c7:4e:15:1b:e1:fe:45:c0:c2:07:be:1c:
                    32:64:65:55:1d:5f:07:56:78:8c:4a:65:ab:92:2d:
                    90:66:a3:39:77:1d:46:cd:d7:72:b6:48:f5:c6:38:
                    ff:3f:ba:68:6f:0f:4d:df:28:24:db:f6:30:37:f7:
                    a4:5b:2b:ab:2d:a5:44:b2:50:2d:dd:f7:1a:7d:2e:
                    2b:6b:71:18:87:56:3f:24:37:d2:95:17:41:3d:7b:
                    ea:c2:a0:f2:7e:2e:3f:34:d7:0c:c3:c9:66:8b:66:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:8E:CC:F6:35:E1:6D:2A:B6:2B:04:86:06:CB:BB:3D:3E:EF:3F
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/i7KOzPY14W0qtisEhgbLuz0-7z8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:9e:92:e5:cf:2f:9c:d3:e4:85:72:2a:cd:18:f1:8d:0e:
         b7:c9:09:e4:14:85:20:a1:93:4c:97:09:65:b5:55:31:ee:97:
         6d:d6:4d:27:7e:88:a2:c2:37:4a:d7:c8:49:2b:d4:09:24:d7:
         18:ce:b5:86:d4:4d:7c:10:a5:33:6c:23:23:44:ca:9b:ef:08:
         bf:54:9f:ac:89:dc:1d:a1:c1:ea:96:b1:f3:a1:3c:c3:d5:61:
         28:f4:ab:16:d6:c9:7c:88:ad:a0:26:5a:b3:72:b1:fa:72:8d:
         a4:8d:c9:a1:8b:21:0f:a9:10:c7:6f:74:18:8f:ff:9d:9f:82:
         31:e4:9c:b4:09:cf:4f:54:cb:a1:9b:37:bc:ed:10:80:d8:ca:
         8e:22:05:e6:ae:61:4b:41:81:9a:27:94:2b:30:6d:4b:02:9e:
         fb:81:09:db:08:79:d3:7e:3e:e9:b8:33:72:28:1b:96:5e:d8:
         25:d6:e6:f6:94:f7:30:52:d8:ce:0c:ea:79:43:9b:8e:cc:31:
         4c:ed:bc:1c:12:cb:22:50:c6:55:d8:71:e8:ba:e2:30:7d:44:
         17:b5:1b:b0:b1:bd:5b:63:25:38:53:19:fa:4d:dd:08:06:f9:
         e1:51:73:ec:e0:8b:08:63:49:b4:db:5d:9e:8f:95:42:8c:a6:
         6d:c1:64:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:26 2025 by rpki-client