Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/wg1rVXead58AojC8kHhb9UIwh_k.roa
File:                     wg1rVXead58AojC8kHhb9UIwh_k.roa (raw, json)
Hash identifier:          A1rbH+Q6c3MVRw2lq3TxfMw+GlbehtrEW/KcKP+zEwk=
Subject key identifier:   C2:0D:6B:55:77:9A:77:9F:00:A2:30:BC:90:78:5B:F5:42:30:87:F9
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       33
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/wg1rVXead58AojC8kHhb9UIwh_k.roa
Signing time:             Fri 31 Jan 2025 01:33:28 +0000
ROA not before:           Fri 31 Jan 2025 01:33:28 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        210.143.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:28 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=C20D6B55779A779F00A230BC90785BF5423087F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:2d:2e:6d:68:b6:b4:4f:34:66:dd:66:ce:
                    f9:4b:17:51:fe:e4:93:76:91:30:84:0f:f1:eb:38:
                    c6:1c:0d:6e:f2:de:6a:d5:a8:ad:d9:0f:fc:ee:14:
                    ec:5e:c7:42:b1:b4:8d:73:c1:2c:67:8a:38:e0:af:
                    09:1d:a3:8d:12:0b:c4:91:1e:93:ff:7c:99:1e:9b:
                    25:b5:db:d4:7c:43:e7:0d:23:f0:56:26:da:75:03:
                    e9:62:44:d8:ed:9c:04:32:e9:32:a6:e4:46:48:85:
                    8a:80:75:d7:28:1d:48:a1:0c:0a:a3:a8:4c:ed:3b:
                    81:32:e7:95:6b:09:3f:64:6c:36:e8:98:13:dc:05:
                    b9:37:c2:69:ec:94:c4:2c:fb:b3:22:e7:72:3e:9a:
                    7e:9c:73:ca:9b:b6:8b:c7:05:2a:f1:e8:ae:21:59:
                    80:2d:45:b3:11:7e:38:11:12:e2:2e:c2:0b:da:85:
                    37:f2:47:0c:96:52:08:2e:b0:ee:b2:e1:bd:b2:83:
                    3b:5b:fb:8e:a7:3a:92:39:99:ec:24:77:7f:d8:7e:
                    a5:4a:27:f0:f3:7a:37:86:a4:5d:5c:98:67:83:c1:
                    dd:c6:5f:f7:7d:90:5d:55:fe:a3:71:e9:84:9d:ac:
                    b5:a8:94:1f:d1:d2:37:f4:e8:ce:ff:b7:eb:80:d0:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0D:6B:55:77:9A:77:9F:00:A2:30:BC:90:78:5B:F5:42:30:87:F9
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/wg1rVXead58AojC8kHhb9UIwh_k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:1b:ec:9a:8a:85:b1:34:99:e0:83:f7:b2:0a:52:fb:ef:25:
         e5:63:a4:52:68:9e:5b:67:ce:a3:2a:f0:45:09:64:60:af:48:
         77:fd:9e:6e:23:10:23:ed:c0:d3:63:be:72:9b:d3:f7:99:2a:
         0c:a2:b2:67:f0:1b:0c:e3:d6:3f:a5:17:44:07:57:97:74:1d:
         da:a7:df:c9:85:24:c2:cd:9b:e4:19:c3:10:76:7d:bf:8e:13:
         cc:0d:d6:60:a1:55:0a:5c:2c:6e:34:76:e5:87:67:70:8c:8c:
         a3:49:fe:6d:d7:97:1b:69:a8:0b:95:ed:5f:e9:a3:fd:5d:43:
         7a:e8:cd:99:f0:4f:64:d7:ca:52:4d:8d:d8:a7:32:29:11:f4:
         37:d4:45:d7:11:ff:8a:cf:80:a6:d8:41:86:91:5d:f9:a8:ac:
         f7:ef:10:0c:54:90:29:65:ec:30:3d:1a:99:5b:83:b0:3b:a6:
         59:97:32:c9:dd:12:f8:a2:f3:1b:7f:9d:46:d1:78:e0:aa:3f:
         36:94:23:6f:35:77:ff:92:7a:10:3b:6a:66:41:4a:01:ac:a6:
         1d:27:91:7e:43:a8:df:5b:95:a2:c7:15:77:81:68:01:75:f8:
         56:f1:f4:68:7f:0e:77:45:75:07:7f:92:d7:dc:12:ec:c0:9c:
         a7:32:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:35 2025 by rpki-client