Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/uWu4zaXNt_AL1lCccpu1mlo9H6U.roa
File:                     uWu4zaXNt_AL1lCccpu1mlo9H6U.roa (raw, json)
Hash identifier:          qhjCGql5zUaMSfBMmCSKhlid7FpCGSBsdzMcVZrk64Q=
Subject key identifier:   B9:6B:B8:CD:A5:CD:B7:F0:0B:D6:50:9C:72:9B:B5:9A:5A:3D:1F:A5
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       1A
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/uWu4zaXNt_AL1lCccpu1mlo9H6U.roa
Signing time:             Mon 20 May 2024 00:40:19 +0000
ROA not before:           Mon 20 May 2024 00:40:19 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7668
IP address blocks:        210.166.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: May 20 00:40:19 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=B96BB8CDA5CDB7F00BD6509C729BB59A5A3D1FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:71:58:a0:bf:df:ac:90:09:ae:dc:44:68:
                    ff:16:61:4b:b0:c3:8a:bc:79:8c:33:6b:f4:f2:68:
                    ac:d8:77:d5:48:4a:bc:8f:9d:08:26:c5:66:87:c5:
                    33:3b:7b:a8:e6:d6:86:15:fc:ea:ad:7e:42:97:2a:
                    40:99:15:07:06:bd:3b:4d:ed:fd:8c:2d:bc:3b:55:
                    98:5d:d3:21:2f:bf:f6:87:f3:8f:de:84:94:a4:2e:
                    f9:88:dc:9b:4a:5f:73:89:51:ea:f6:6b:1b:b6:b7:
                    7c:6e:32:3d:09:94:46:29:84:96:11:26:99:8b:17:
                    2f:f8:56:b8:88:ba:2b:0e:11:e0:0c:9a:4a:27:02:
                    54:f9:a0:b3:08:9c:de:63:51:e2:c0:b6:bc:0e:8f:
                    bc:8a:7a:29:fb:b2:6f:e0:0f:69:97:cc:e0:3b:34:
                    2f:30:c7:c7:cb:55:b3:23:3b:51:5d:65:c7:65:a9:
                    fc:79:66:7d:04:81:fd:e1:69:45:b6:80:43:ab:3e:
                    24:3c:2d:fc:39:75:9d:b8:75:78:f2:4c:86:5e:b8:
                    cc:72:40:18:ca:5a:4a:1b:db:29:bd:a6:45:a7:85:
                    67:67:4f:b2:5b:c7:56:5e:09:50:1c:a7:d0:0c:21:
                    ae:e1:f7:1b:c3:ca:8a:66:f9:bc:0a:3a:28:29:a3:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6B:B8:CD:A5:CD:B7:F0:0B:D6:50:9C:72:9B:B5:9A:5A:3D:1F:A5
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/uWu4zaXNt_AL1lCccpu1mlo9H6U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1b:0e:61:6d:52:79:22:fa:ff:d3:75:11:8b:1a:53:f0:02:
         d7:ca:a4:bf:de:c2:1d:0b:11:d2:dd:f8:ad:81:8a:b4:44:8b:
         9d:1d:fa:a2:de:f4:aa:84:c7:5f:e0:14:79:c4:4f:2e:e6:07:
         5f:e9:e0:c8:80:24:f6:76:ab:d8:73:d5:64:3e:a8:bb:a8:f0:
         ce:31:1d:91:1e:a6:55:08:3f:29:58:ce:ff:54:0b:10:49:b4:
         79:20:ad:6d:f2:f6:e8:89:40:3c:d9:40:d5:ff:40:8f:b7:1b:
         23:8a:78:9b:ea:33:bd:7b:17:2e:97:52:bf:6c:22:7d:e0:93:
         da:75:4a:b5:51:1d:be:fd:e2:81:96:5a:d6:d5:15:69:07:7d:
         25:31:ad:20:dd:fa:dc:48:46:d4:f7:52:d5:16:d3:54:8d:12:
         82:c5:ca:cf:c4:94:35:99:20:31:fc:a0:15:3e:44:6c:21:d8:
         19:e5:be:43:10:4c:ad:a5:94:07:09:f8:f2:d2:3a:79:8c:be:
         d0:c9:86:1c:c1:0a:cf:59:11:9b:6d:16:87:06:ee:c9:1b:f9:
         5f:5c:2d:0a:d7:37:79:bb:f4:0b:02:bd:14:ce:37:9a:23:73:
         24:66:1f:9b:38:fc:62:f8:c5:72:9b:57:96:51:32:f9:90:d8:
         e6:ef:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:17:43 2025 by rpki-client