Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/nqy9PwyNhqspe1Vq_3rzzrzAxog.roa
File:                     nqy9PwyNhqspe1Vq_3rzzrzAxog.roa (raw, json)
Hash identifier:          s4LjG/bozQ0CoOnm4EzQgmGD8BAO54eyNM7UXyB7HYg=
Subject key identifier:   9E:AC:BD:3F:0C:8D:86:AB:29:7B:55:6A:FF:7A:F3:CE:BC:C0:C6:88
Certificate issuer:       /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial:       1C
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/nqy9PwyNhqspe1Vq_3rzzrzAxog.roa
Signing time:             Fri 31 Jan 2025 01:33:25 +0000
ROA not before:           Fri 31 Jan 2025 01:33:25 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     151374
IP address blocks:        210.158.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Validity
            Not Before: Jan 31 01:33:25 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=9EACBD3F0C8D86AB297B556AFF7AF3CEBCC0C688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:d0:89:88:9e:6e:ec:82:fa:c3:35:27:1f:
                    a3:1f:cc:91:fd:80:59:4b:95:29:9e:32:0c:0a:24:
                    25:16:05:b4:07:00:ef:de:d4:52:3c:91:c5:fa:a8:
                    02:32:54:f5:c3:8f:dd:f8:30:e6:89:ed:0d:7a:6b:
                    95:76:6c:a0:13:16:c8:40:fc:47:50:77:fc:2b:7a:
                    25:97:8b:7d:d6:36:39:74:7e:6b:e0:30:2c:ae:2a:
                    f8:05:40:42:80:a9:e2:5f:a0:1c:39:b8:dd:9a:33:
                    9f:17:78:35:39:18:65:47:0c:9c:c0:83:1f:d0:22:
                    fd:f5:b5:e9:3c:5a:4b:e3:48:0a:0a:87:d4:0b:0c:
                    6b:a4:6f:68:19:12:3f:14:93:4c:9c:0e:9c:0d:64:
                    af:d9:0e:45:c0:dd:37:6e:57:9a:c1:dc:f5:19:0f:
                    13:b4:c2:78:f3:6d:58:c2:6f:fb:e4:b3:ba:d1:aa:
                    2d:8a:2f:16:26:89:9b:5d:91:89:15:f3:aa:be:56:
                    be:17:21:55:9a:3f:49:50:5b:ad:b3:7e:f9:28:22:
                    b4:4f:38:0e:41:d8:9a:84:04:84:34:b3:ce:4d:94:
                    14:0e:63:4f:14:83:ec:5a:e7:1b:f6:d4:3b:0e:1d:
                    1c:9b:ad:60:3c:67:3a:86:77:13:3c:93:ed:eb:29:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:BD:3F:0C:8D:86:AB:29:7B:55:6A:FF:7A:F3:CE:BC:C0:C6:88
            X509v3 Authority Key Identifier:
                keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/nqy9PwyNhqspe1Vq_3rzzrzAxog.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:e7:90:13:5e:a3:ab:e1:33:5c:c5:b9:bf:22:c6:43:d5:
         30:9f:fc:2d:ff:22:53:52:b4:db:e9:d3:9d:e1:a4:69:40:2d:
         27:89:40:3d:a0:f7:ff:ea:e9:b0:5a:9f:ad:af:dd:00:06:6e:
         70:62:42:04:ec:c0:3e:1d:bf:15:15:94:79:b5:a8:02:3e:3c:
         c7:64:b9:7e:01:29:7c:a8:c0:bf:d1:14:cb:37:a9:ad:05:d7:
         42:99:4c:22:94:80:6c:87:5e:d2:94:5f:aa:7c:29:0d:85:74:
         e5:fd:8e:9f:80:ae:87:e6:aa:42:70:1e:a4:69:49:ce:27:9a:
         c5:07:eb:04:39:b8:9b:05:e0:8a:44:3a:57:dc:3f:55:54:78:
         fb:07:58:e2:88:e8:25:3d:1b:d2:e7:73:3b:a1:8d:ff:cb:3c:
         b1:aa:ec:d8:53:00:bc:04:e8:4a:76:98:1c:96:e9:a9:c1:27:
         05:ca:db:2b:57:e4:4d:b5:1e:c3:aa:b5:62:c8:96:ee:5d:a8:
         bf:43:74:a3:20:65:b1:d6:66:3b:08:13:61:2a:5f:8d:08:94:
         30:4b:c9:9e:f2:ae:ad:c9:b1:42:b5:81:4a:7f:48:04:63:17:
         cc:4f:65:c2:9d:3e:51:b6:bf:5d:31:94:a7:5d:7b:24:b3:d1:
         7e:e7:70:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:49:04 2025 by rpki-client