Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/tHV2-1DwpO4cblLAgCh0ai0tI6M.roa
File:                     tHV2-1DwpO4cblLAgCh0ai0tI6M.roa (raw, json)
Hash identifier:          Co3q1qmI4aVaOe0LN6sB+LmYSMn6DpnapBwB6ny1K8Y=
Subject key identifier:   B4:75:76:FB:50:F0:A4:EE:1C:6E:52:C0:80:28:74:6A:2D:2D:23:A3
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       4F
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/tHV2-1DwpO4cblLAgCh0ai0tI6M.roa
Signing time:             Fri 31 Jan 2025 01:33:41 +0000
ROA not before:           Fri 31 Jan 2025 01:33:41 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        210.252.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:41 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=B47576FB50F0A4EE1C6E52C08028746A2D2D23A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:17:5d:9b:c4:87:45:6f:60:85:39:dc:ea:
                    27:fc:7e:c0:36:1c:0d:34:62:ed:01:11:96:c9:ee:
                    2e:de:3a:c5:c5:40:b9:74:c5:be:cb:e6:a0:d5:f9:
                    c4:ea:4f:83:bd:80:92:75:8a:1d:c3:56:f4:bb:6a:
                    9a:0b:e0:fa:3a:cb:3a:1d:5f:be:41:87:1b:87:c0:
                    fd:92:52:a8:f4:8e:67:2e:6d:4c:f0:ab:62:91:68:
                    a0:57:c8:c8:69:7e:9f:55:bd:7a:af:cc:c5:62:a6:
                    f7:50:99:22:05:c9:cd:a5:26:f1:de:d9:02:e9:06:
                    79:78:ce:aa:1f:4e:48:91:3f:14:37:48:02:49:80:
                    fc:39:84:f2:21:d6:ac:e7:91:b3:6d:4d:20:ed:5f:
                    5d:4f:79:71:59:ef:a8:1a:12:d3:22:85:23:ba:f7:
                    a2:2a:00:32:59:24:0c:98:ba:ce:41:31:65:5d:02:
                    1b:9e:e6:4d:b9:16:7c:26:6d:ee:89:be:4c:b7:a9:
                    5f:94:43:f5:ea:74:9a:07:69:1d:53:6e:d6:91:92:
                    8c:87:4a:4f:da:b9:af:e8:01:5b:77:51:fe:34:e4:
                    d8:ec:8e:14:af:8b:76:2b:1f:ee:d8:ce:06:aa:eb:
                    46:a4:2e:44:6a:a1:9a:f6:46:7e:aa:85:c8:95:f3:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:76:FB:50:F0:A4:EE:1C:6E:52:C0:80:28:74:6A:2D:2D:23:A3
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/tHV2-1DwpO4cblLAgCh0ai0tI6M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cf:af:40:d2:9e:25:97:2d:76:80:b7:bb:83:90:a6:15:e7:95:
         a7:6e:93:9f:7c:ab:1d:38:d1:be:c0:e8:e2:04:03:8c:39:b5:
         4a:4b:9d:bb:e8:88:7a:ae:5b:5b:d3:d1:c6:9a:bf:6c:ec:35:
         11:7f:90:49:bc:b2:19:7c:a4:ca:ca:1c:4e:c0:46:d3:38:62:
         9e:f7:37:e5:63:84:1e:ac:cf:b6:9c:8a:8b:c2:9a:82:d5:aa:
         23:70:f7:31:79:66:19:25:4e:ad:13:88:f9:a0:f7:0a:14:b4:
         d3:ad:37:b5:02:e6:0e:91:1e:7c:6a:c1:dc:87:d3:b8:af:f5:
         19:a1:95:65:59:8a:87:8f:a8:74:81:cb:2b:32:6c:4f:0c:65:
         ce:a3:19:05:72:11:49:f9:81:af:ef:a7:86:8e:90:12:2d:da:
         72:e9:58:cf:48:1c:c1:e2:bf:4c:f9:b9:b0:a8:3a:b3:ea:8f:
         72:3b:a2:b0:bd:c0:28:a9:a3:9c:ab:54:a7:92:75:fa:0e:b5:
         99:1b:54:fd:c1:90:3e:f7:3d:48:ef:f5:4e:65:be:b9:04:ce:
         2a:7e:40:8c:d0:f7:19:37:4b:80:b0:36:bf:de:fe:9b:3a:c7:
         54:3d:34:72:4b:3e:53:09:6d:45:52:c8:55:3e:a2:7d:12:20:
         96:5b:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:53 2025 by rpki-client