Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/7u0gsopXAmoXHFSqFLn1j8lE0i0.roa
File:                     7u0gsopXAmoXHFSqFLn1j8lE0i0.roa (raw, json)
Hash identifier:          M51AQzFUkpsKY8DbuUEgIaPOa2fYlJFXUADGNAoaX8o=
Subject key identifier:   EE:ED:20:B2:8A:57:02:6A:17:1C:54:AA:14:B9:F5:8F:C9:44:D2:2D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0216
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7u0gsopXAmoXHFSqFLn1j8lE0i0.roa
Signing time:             Tue 11 Mar 2025 05:06:15 +0000
ROA not before:           Tue 11 Mar 2025 05:06:15 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        27.132.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 11 05:06:15 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=EEED20B28A57026A171C54AA14B9F58FC944D22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:b2:b0:2b:29:ad:f4:02:86:f3:ee:16:ea:
                    d1:ea:f4:89:7d:3d:97:36:21:2a:b0:46:9f:9d:73:
                    fe:b2:61:c1:fa:8c:6f:58:20:63:cb:2e:b9:db:e0:
                    22:f7:e4:bd:01:1e:b7:66:df:64:cd:cc:1e:14:f7:
                    08:89:60:84:aa:35:c8:13:db:75:55:b3:b1:85:19:
                    73:1c:26:80:ab:b4:0c:03:fe:dd:18:ca:9e:99:6b:
                    9c:5d:fb:cd:38:88:8a:ad:f6:4f:11:e5:e8:a7:20:
                    e1:22:81:7c:79:1d:60:a0:96:bd:47:de:46:8a:b3:
                    c6:2f:c2:d2:1a:63:d7:b2:aa:fa:c0:6f:f8:a8:30:
                    e0:af:6f:81:a6:97:0e:90:e1:80:53:e2:cf:10:01:
                    cd:9e:70:23:ff:8e:34:4e:04:a7:d3:55:a1:ea:78:
                    e6:9d:04:64:b3:6f:09:b2:20:21:a9:83:a1:25:30:
                    e3:38:19:80:db:9d:a9:9f:40:69:9c:df:8b:92:53:
                    b1:5d:a1:2f:61:2e:09:bd:bd:91:59:6e:98:05:85:
                    64:0a:61:1e:38:7b:6e:50:b9:20:03:bc:49:58:1d:
                    48:c8:db:38:11:16:21:9b:f0:06:67:bf:4c:54:7e:
                    b5:c9:a5:c5:02:ac:e4:ad:9e:b3:95:7e:73:ed:4f:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:ED:20:B2:8A:57:02:6A:17:1C:54:AA:14:B9:F5:8F:C9:44:D2:2D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/7u0gsopXAmoXHFSqFLn1j8lE0i0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:78:91:1f:5d:23:a5:bf:59:e1:25:10:6e:29:f7:45:d8:06:
         11:53:1f:6d:5e:3e:3e:6c:a5:79:5a:c0:f2:46:3f:ed:23:82:
         18:80:3f:a7:2d:90:52:55:40:91:30:63:ae:05:8d:fd:fb:97:
         f6:65:ea:35:3c:6f:ff:ff:b0:fa:f0:cc:f9:c9:bb:5b:98:0f:
         11:07:c8:2f:ef:92:ee:c4:49:fd:08:a9:77:ad:46:a3:c7:8f:
         a5:e8:6c:e3:7b:04:0c:a0:e2:e4:0b:d2:46:bd:c2:79:fe:2b:
         af:f6:ce:41:ec:71:cb:ac:20:ac:37:c4:04:5f:ac:26:73:da:
         0c:fa:63:45:64:a9:4c:88:6a:9e:18:6c:ad:24:9b:9d:18:04:
         12:79:84:c0:77:8b:45:e0:a7:d8:e9:97:53:15:18:31:da:c6:
         63:a3:83:25:8d:f3:96:dc:c0:5b:4b:5c:ba:4f:da:2e:55:38:
         b1:f0:31:3d:74:af:21:40:9e:5e:a0:b0:ba:10:a1:48:b2:38:
         18:3f:ec:4a:0c:b4:6a:fd:d3:c8:14:78:c5:a7:3e:b1:9d:2a:
         05:51:7a:ef:d8:bb:36:55:5f:3b:66:ea:da:42:a2:8a:3e:1e:
         84:88:ae:39:68:2f:a8:f4:5b:f1:f0:39:6c:24:50:b7:94:bd:
         0c:4b:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:00 2025 by rpki-client