Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/NshUzSXUe-i8aeB6ZksI5d3Wu7o.roa
File:                     NshUzSXUe-i8aeB6ZksI5d3Wu7o.roa (raw, json)
Hash identifier:          R33AlbauY35qRbn3QoYDaUDNUEcafUddi5rIeIv0aG4=
Subject key identifier:   36:C8:54:CD:25:D4:7B:E8:BC:69:E0:7A:66:4B:08:E5:DD:D6:BB:BA
Certificate issuer:       /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Certificate serial:       5F
Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/NshUzSXUe-i8aeB6ZksI5d3Wu7o.roa
Signing time:             Fri 31 Jan 2025 01:30:41 +0000
ROA not before:           Fri 31 Jan 2025 01:30:41 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     55391
IP address blocks:        14.0.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
        Validity
            Not Before: Jan 31 01:30:41 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=36C854CD25D47BE8BC69E07A664B08E5DDD6BBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:88:fa:5a:d8:44:55:bd:23:db:66:b7:33:
                    3a:be:d0:06:97:29:b2:ac:23:21:40:b1:00:72:8d:
                    f3:7e:f2:79:39:7a:9a:d0:fd:2c:43:b1:28:db:7f:
                    ed:fe:fe:7d:e1:b6:67:70:e2:9b:4c:9c:67:20:f3:
                    61:4b:87:f4:b3:54:c5:03:0c:1d:b7:24:db:46:21:
                    ab:cf:de:53:4f:ee:a8:cf:d5:59:05:fb:c4:20:9e:
                    49:8b:9b:8e:51:30:b7:fc:e2:86:6c:d9:13:82:a6:
                    22:f2:1a:bc:dc:e6:0c:de:2d:dc:f7:35:30:1f:e3:
                    fa:3e:68:a5:b5:5a:28:fb:09:89:09:89:c3:92:3b:
                    77:71:65:4c:27:d6:48:54:02:3f:9c:70:0a:45:f5:
                    c7:84:22:98:5f:5d:ba:57:c9:8c:de:08:e4:97:42:
                    4a:d4:67:e4:a1:93:7c:72:50:82:b7:3b:2f:da:a3:
                    a0:72:c8:62:b0:76:01:b7:dc:cb:5c:02:05:c0:fe:
                    ed:f4:1b:25:a2:18:b0:0e:a5:3c:ea:0e:ea:ee:5b:
                    9e:d0:80:8e:49:d4:c3:da:59:e8:6f:52:27:7a:83:
                    f3:74:2d:8f:d0:56:6d:fd:04:85:87:31:dc:2c:0c:
                    3d:08:9c:29:20:95:f6:bf:ea:7e:65:d5:1e:18:50:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C8:54:CD:25:D4:7B:E8:BC:69:E0:7A:66:4B:08:E5:DD:D6:BB:BA
            X509v3 Authority Key Identifier:
                keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/NshUzSXUe-i8aeB6ZksI5d3Wu7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:1e:5a:d4:d6:f0:fb:04:12:1a:b7:d5:8b:d2:05:e6:d6:
         b0:c4:42:d6:3c:4c:e0:6c:e5:a5:e5:2e:89:7e:30:9e:6b:70:
         58:74:9f:4f:86:fa:b0:3b:e3:c5:2f:26:f9:2f:4e:44:d7:c0:
         13:ee:46:b0:3e:ad:69:80:8c:7e:5e:a4:ff:3f:cf:fc:5d:ca:
         3f:c3:84:92:ff:03:6f:d4:3c:d2:4e:d7:0b:da:1f:a9:86:3a:
         37:db:f8:6d:4f:61:1a:bf:a2:5b:8b:42:c7:86:17:81:ff:8d:
         23:cf:94:80:65:00:f6:6d:c3:0f:46:55:32:32:10:2c:70:a6:
         0f:c2:07:0a:30:6e:14:b7:10:6e:0a:10:77:ab:e9:d0:8d:97:
         14:e2:ac:6d:cf:18:d3:d6:ff:08:97:f1:74:08:8f:2b:18:01:
         95:50:41:19:04:e6:db:40:5e:71:a4:7a:0c:50:33:35:ef:3b:
         d7:b5:fe:96:0b:47:ae:04:4c:95:be:c0:b6:4a:7a:54:1b:e5:
         16:92:9c:cf:ff:98:0c:80:c2:95:58:34:62:e9:5d:a1:21:e7:
         32:25:41:6a:c7:93:70:ff:26:6b:a8:be:dc:7e:e8:70:bf:c1:
         1a:48:6d:63:fa:7f:71:d9:e8:fb:8a:40:de:40:90:58:ee:1c:
         d2:43:73:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:22 2025 by rpki-client