Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/7NWJnS8oPxaAw6Dh9y89xbttV2w.roa
File:                     7NWJnS8oPxaAw6Dh9y89xbttV2w.roa (raw, json)
Hash identifier:          /YVrSb9gppTGswU7lY9yInFeGyG7NqUf4+mpY/8IJDI=
Subject key identifier:   EC:D5:89:9D:2F:28:3F:16:80:C3:A0:E1:F7:2F:3D:C5:BB:6D:57:6C
Certificate issuer:       /CN=C0EDE8C3879081138F9495306BE79EF7340A9451
Certificate serial:       56
Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/7NWJnS8oPxaAw6Dh9y89xbttV2w.roa
Signing time:             Fri 31 Jan 2025 01:30:37 +0000
ROA not before:           Fri 31 Jan 2025 01:30:37 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7667
IP address blocks:        192.26.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451
        Validity
            Not Before: Jan 31 01:30:37 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=ECD5899D2F283F1680C3A0E1F72F3DC5BB6D576C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:db:49:0c:3e:58:c6:74:2e:21:34:03:e3:
                    76:e6:91:b5:b6:f3:04:1e:4d:f0:58:3f:8b:04:8f:
                    75:e2:a9:cd:2f:91:7e:e0:26:60:f8:26:04:30:fd:
                    33:a7:16:5f:5a:45:56:51:a2:61:42:87:be:20:92:
                    1d:ed:cb:f0:72:40:41:bd:cd:4a:c7:42:3b:2d:7c:
                    34:b8:9a:31:ce:65:e7:2a:d6:43:8d:9f:f8:2e:61:
                    1e:7f:cb:fd:50:a8:5f:79:29:e6:c5:12:70:73:63:
                    50:59:93:a0:7e:da:5f:74:97:77:55:10:bc:b4:b4:
                    32:59:02:9d:60:54:78:bc:f0:1a:3b:ae:44:49:2f:
                    93:21:e8:dc:a5:1b:63:89:b6:b1:33:7d:d7:54:ea:
                    b3:ca:86:ac:b6:24:33:af:22:f8:ce:cf:11:35:65:
                    32:67:80:ef:5f:aa:f7:11:c8:b7:7d:59:4d:1d:2d:
                    3a:82:b2:34:66:d6:08:9d:9d:36:36:3d:5b:0d:33:
                    10:0d:67:60:38:95:bb:13:3c:36:67:a0:9a:59:a2:
                    ca:85:90:0a:11:eb:1d:02:59:62:51:42:0b:09:fb:
                    fa:98:cf:ed:00:85:ba:8f:ce:dc:58:f6:8d:5a:40:
                    56:7c:09:3a:dd:31:fd:fc:96:5f:33:1b:0d:82:71:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D5:89:9D:2F:28:3F:16:80:C3:A0:E1:F7:2F:3D:C5:BB:6D:57:6C
            X509v3 Authority Key Identifier:
                keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/7NWJnS8oPxaAw6Dh9y89xbttV2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:06:15:1f:f2:9d:6a:af:ad:ea:ac:d6:b4:b8:93:d5:e9:30:
         39:83:7c:84:8e:8b:eb:10:2a:8e:0d:51:67:81:17:22:a4:5c:
         52:32:3c:c8:d2:51:08:96:04:02:0b:58:50:7b:78:0f:64:7c:
         58:6d:2b:5d:51:9b:ff:a0:47:a3:a4:f0:4c:bd:43:f7:f2:20:
         b8:0f:37:ee:de:7b:a6:aa:93:02:44:a0:6d:fd:12:b2:6c:55:
         65:e6:40:84:dd:26:ba:1a:64:e9:b4:49:33:f9:6e:9c:7d:5f:
         21:d8:19:db:7e:a1:6a:4e:ac:76:79:ab:04:f8:d6:fe:7d:e0:
         cf:ea:ad:51:7a:67:c7:4e:e0:f5:ec:4a:71:1f:55:b5:4f:99:
         88:0e:16:5a:de:be:3f:31:db:84:78:99:94:1e:88:29:8e:46:
         1d:32:26:d5:39:81:d7:fa:d0:52:81:b9:f3:64:6d:d6:37:fe:
         8a:e2:f8:61:92:a6:87:69:f5:86:f6:7c:67:7c:09:f4:8e:67:
         1f:9f:7d:cb:fe:3c:57:71:c0:3e:bd:3d:f9:9d:86:6a:50:cb:
         91:ba:7f:72:85:0a:07:1f:8e:13:d6:85:c5:aa:7f:2d:ce:a0:
         27:51:33:63:96:48:93:32:75:dc:a6:f3:dc:da:f4:38:43:df:
         e6:d0:72:e6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMEVE
RThDMzg3OTA4MTEzOEY5NDk1MzA2QkU3OUVGNzM0MEE5NDUxMB4XDTI1MDEzMTAx
MzAzN1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRUNENTg5OUQyRjI4M0Yx
NjgwQzNBMEUxRjcyRjNEQzVCQjZENTc2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKef20kMPljGdC4hNAPjduaRtbbzBB5N8Fg/iwSPdeKpzS+RfuAm
YPgmBDD9M6cWX1pFVlGiYUKHviCSHe3L8HJAQb3NSsdCOy18NLiaMc5l5yrWQ42f
+C5hHn/L/VCoX3kp5sUScHNjUFmToH7aX3SXd1UQvLS0MlkCnWBUeLzwGjuuREkv
kyHo3KUbY4m2sTN911Tqs8qGrLYkM68i+M7PETVlMmeA71+q9xHIt31ZTR0tOoKy
NGbWCJ2dNjY9Ww0zEA1nYDiVuxM8NmegmlmiyoWQChHrHQJZYlFCCwn7+pjP7QCF
uo/O3Fj2jVpAVnwJOt0x/fyWXzMbDYJxffkCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBTs1YmdLyg/FoDDoOH3Lz3Fu21XbDAfBgNVHSMEGDAWgBTA7ejDh5CBE4+UlTBr
5573NAqUUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYzOS93TzNvdzRlUWdST1BsSlV3YS1lZTl6UUtsRkUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC93TzNvdzRlUWdST1BsSlV3YS1lZTl6
UUtsRkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYzOS83TldKblM4b1B4YUF3NkRoOXk4OXhidHRWMncucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAwBpbMA0GCSqGSIb3DQEBCwUAA4IBAQCZBhUf8p1qr63qrNa0uJPV6TA5
g3yEjovrECqODVFngRcipFxSMjzI0lEIlgQCC1hQe3gPZHxYbStdUZv/oEejpPBM
vUP38iC4Dzfu3numqpMCRKBt/RKybFVl5kCE3Sa6GmTptEkz+W6cfV8h2BnbfqFq
Tqx2easE+Nb+feDP6q1RemfHTuD17EpxH1W1T5mIDhZa3r4/MduEeJmUHogpjkYd
MibVOYHX+tBSgbnzZG3WN/6K4vhhkqaHafWG9nxnfAn0jmcfn33L/jxXccA+vT35
nYZqUMuRun9yhQoHH44T1oXFqn8tzqAnUTNjlkiTMnXcpvPc2vQ4Q9/m0HLm
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:13 2025 by rpki-client