Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Xgu46FrGS0VypObGNkExMVESpZk.roa
File:                     Xgu46FrGS0VypObGNkExMVESpZk.roa (raw, json)
Hash identifier:          AHJyOLHkBdugR4ujnZtYi91nGqsBV+fO3S2FrEDtI9s=
Subject key identifier:   5E:0B:B8:E8:5A:C6:4B:45:72:A4:E6:C6:36:41:31:31:51:12:A5:99
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       1E
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Xgu46FrGS0VypObGNkExMVESpZk.roa
Signing time:             Wed 28 Feb 2024 04:59:55 +0000
ROA not before:           Wed 28 Feb 2024 04:59:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        210.238.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:59:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=5E0BB8E85AC64B4572A4E6C6364131315112A599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:f2:09:ae:a4:4f:23:ed:6c:8c:50:eb:8d:
                    d9:75:be:41:05:f5:7c:1c:bb:b7:18:eb:b3:3b:1c:
                    87:32:a9:f6:ee:4e:11:fc:90:55:c8:b9:1c:ee:87:
                    e3:41:24:ec:83:89:94:b5:62:4d:3f:31:24:26:c9:
                    75:80:19:8c:b8:eb:d9:b1:17:c9:07:b6:b2:ec:3b:
                    55:3c:a2:cb:de:ea:62:5d:8b:7e:31:4e:f1:74:fb:
                    5d:a4:66:08:d9:4b:99:16:6a:ac:36:b8:be:34:dd:
                    eb:45:71:84:be:9d:5b:af:42:e3:73:c5:5f:cd:ce:
                    36:f2:22:73:c6:59:4f:10:c7:6e:e9:69:cc:7c:7c:
                    f9:58:44:48:63:ad:6f:e7:aa:d0:e1:bb:c9:f7:70:
                    f1:a4:75:8e:4e:a9:ae:2d:d5:55:a0:24:29:4b:78:
                    6a:55:5b:d6:80:8b:64:f0:39:e2:7b:be:11:7a:c6:
                    90:49:a8:34:d3:d7:f6:a5:c0:0a:d6:28:c6:2d:61:
                    f5:bb:ae:9b:8c:a4:88:37:51:62:7d:17:b9:73:7e:
                    c1:20:f2:29:1e:d7:a2:0d:b1:d9:12:e0:af:c1:2f:
                    ff:87:8c:3d:7a:61:88:fb:9f:b0:05:ca:5d:c0:39:
                    de:9d:32:61:84:85:1c:c4:9d:98:7d:41:b9:45:e7:
                    af:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0B:B8:E8:5A:C6:4B:45:72:A4:E6:C6:36:41:31:31:51:12:A5:99
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Xgu46FrGS0VypObGNkExMVESpZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:41:36:17:9d:18:f5:8e:13:8e:c0:4c:9f:33:ec:82:3b:a3:
         2a:cb:78:37:3b:34:21:7f:5f:be:47:e2:2b:2b:45:51:0c:57:
         f0:d7:ac:6d:67:d4:57:0d:a7:78:e2:be:e5:48:2e:ca:26:d2:
         43:56:05:52:b7:90:7a:7e:bd:82:a1:00:7b:35:c2:be:a8:5c:
         65:97:e0:96:06:57:f7:3f:f7:70:7c:86:9d:09:70:03:63:8f:
         dc:85:b4:f8:b4:c1:8b:94:dd:be:bd:7e:46:61:1e:88:53:e6:
         f5:42:c2:ee:ee:6b:d3:d0:c7:3d:77:c3:ef:13:51:76:84:f7:
         e1:69:fc:42:ad:c1:62:3a:ff:17:f5:50:b2:96:b4:9c:1c:76:
         1c:94:88:f6:a7:c2:73:cb:f1:2b:24:56:56:f1:c9:5b:a0:ff:
         45:de:41:ed:6a:0c:cf:2f:58:20:9a:2d:20:f1:6c:95:87:98:
         c7:bd:5a:8d:be:ce:9c:ef:70:cc:09:23:d8:de:5b:3e:d4:09:
         27:84:95:79:2e:4f:16:41:43:40:c7:ee:e7:d9:30:91:7f:7b:
         0c:ac:96:2d:0e:cb:71:23:09:f2:6a:12:0b:43:4b:db:5c:15:
         b8:79:31:a3:e6:6d:23:6a:99:ac:a3:59:d9:16:8a:00:41:cc:
         28:c8:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:35 2025 by rpki-client