Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/-WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa
File:                     -WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa (raw, json)
Hash identifier:          k/8mcdzaASO9MFiTnYNOnKaVIuWuSncevQCraoLqD8E=
Subject key identifier:   F9:66:25:85:82:EB:34:B0:69:5A:58:2C:24:C4:11:E8:3C:4B:3D:74
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       2F
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/-WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa
Signing time:             Sat 01 Mar 2025 01:29:29 +0000
ROA not before:           Sat 01 Mar 2025 01:29:29 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     18071
IP address blocks:        157.8.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Mar  1 01:29:29 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=F966258582EB34B0695A582C24C411E83C4B3D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:05:67:ed:53:b5:57:86:bd:78:90:f0:ae:
                    32:e3:2b:d6:57:ca:03:92:e0:cd:84:1a:38:e3:97:
                    1f:20:23:2e:79:b1:3a:f7:44:e9:0c:d5:65:84:27:
                    b5:32:57:9c:91:5c:de:ca:24:46:20:10:52:e2:39:
                    5f:44:2a:38:b7:cb:52:d8:1c:c3:14:52:9d:22:2a:
                    a5:27:57:82:39:53:b3:63:37:6d:34:7d:4c:a6:a2:
                    c1:24:a6:41:cb:58:19:6c:3e:d0:4b:90:0d:b2:5f:
                    63:e0:1b:a4:d1:a2:9d:f3:b8:f7:0d:62:38:41:d8:
                    d2:74:c1:85:c7:d4:26:38:25:db:c6:f9:ac:ed:1d:
                    d2:a1:5c:d3:ae:bb:a9:58:8b:cc:d5:54:b3:00:2c:
                    8d:45:d5:1f:b0:f3:92:25:4f:f9:52:af:82:43:b8:
                    6b:3a:28:ea:0f:78:53:ab:86:ff:95:27:c1:23:cc:
                    59:a7:35:b9:e6:d9:43:99:8c:37:54:f4:29:18:aa:
                    48:11:ec:33:ea:db:8c:cf:dc:49:05:81:40:9e:96:
                    fd:38:92:bd:7e:6f:6b:36:ad:dd:05:3c:71:98:fe:
                    62:b5:b4:24:18:c5:39:be:94:7e:ea:19:34:45:1f:
                    ed:b9:2a:00:1c:d7:a5:e5:08:a5:52:1c:9a:f8:5a:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:25:85:82:EB:34:B0:69:5A:58:2C:24:C4:11:E8:3C:4B:3D:74
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/-WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:1e:dc:d6:d2:09:36:df:a8:d1:13:7e:44:2d:ed:cc:0e:17:
         34:7c:92:c9:5b:17:e0:91:a9:d1:cf:34:fe:79:a6:01:1f:ea:
         ca:38:4d:9d:5e:e8:78:e0:8d:0b:29:45:24:9f:64:eb:a1:4d:
         ee:66:b0:b8:02:73:f3:ce:17:76:7f:3f:47:05:f2:a3:7b:78:
         44:21:38:ba:e7:b1:75:3f:4a:36:7d:59:85:79:a0:81:8f:bb:
         72:82:85:29:7b:5c:40:72:b2:09:04:d4:ce:5b:8e:5f:86:4d:
         6c:49:06:79:d2:60:c6:a4:3c:5c:ed:99:ef:e1:4d:6e:d3:90:
         7c:09:2f:00:8c:04:de:7d:f3:59:ad:38:a4:29:b3:bb:62:0e:
         b9:5e:d2:a8:28:07:dc:6d:d3:ec:d6:a7:5b:19:88:81:53:9e:
         1f:26:87:e7:35:82:17:61:4d:c6:d0:80:10:a2:0c:b9:ff:14:
         ed:ed:2b:f6:67:62:41:9a:0d:8a:ae:72:4e:db:37:c9:f4:4f:
         4e:01:ef:2d:96:17:2e:06:0e:c0:ef:a7:2a:8d:a1:64:6f:fd:
         30:76:a2:3b:28:95:95:fe:34:2b:c0:cc:7b:9d:0e:30:4e:44:
         3b:c2:96:77:72:35:c4:01:cb:60:46:70:6b:65:43:67:6f:a0:
         28:fd:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:38 2025 by rpki-client