Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/wiwHOZ3uSHS10PAtXnLYR_JvF8A.roa
File:                     wiwHOZ3uSHS10PAtXnLYR_JvF8A.roa (raw, json)
Hash identifier:          TqDRF5YOl8fwtamc/UL9pQbznE3KQeN4GEsg4f+Pi8s=
Subject key identifier:   C2:2C:07:39:9D:EE:48:74:B5:D0:F0:2D:5E:72:D8:47:F2:6F:17:C0
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       4A
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/wiwHOZ3uSHS10PAtXnLYR_JvF8A.roa
Signing time:             Fri 31 Jan 2025 01:33:38 +0000
ROA not before:           Fri 31 Jan 2025 01:33:38 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        203.179.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:38 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=C22C07399DEE4874B5D0F02D5E72D847F26F17C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:14:d6:f8:ef:ae:44:88:f9:1e:19:92:d1:
                    9c:54:a1:6e:a6:02:df:60:c4:eb:13:41:85:63:60:
                    0b:6a:e9:66:f4:c1:98:ba:8f:07:db:1f:3d:ca:d9:
                    26:aa:11:7e:28:b4:2f:8b:4b:24:a1:a8:2d:10:26:
                    fd:4c:4f:a2:34:b2:03:d7:10:1d:86:11:a7:3d:75:
                    ec:09:a6:cf:d2:7d:4a:1b:39:af:14:37:6a:9b:00:
                    24:f2:c3:e2:e9:4b:23:fa:75:e6:95:d2:a7:6d:73:
                    4d:95:18:9c:9f:2f:b4:0b:d3:9e:30:7c:8b:9c:1e:
                    a3:e0:f0:bb:dd:a2:c3:a5:34:23:34:99:3d:1b:de:
                    97:fb:49:a1:b7:c0:fa:e3:0f:d4:33:55:eb:11:d2:
                    15:0e:d3:96:a5:91:46:54:85:b3:99:ed:92:ce:02:
                    4d:3d:3e:75:fe:12:94:8c:9a:9a:b2:c6:59:e7:d4:
                    95:6a:8f:9c:6b:9e:32:c4:d0:14:02:aa:5a:98:94:
                    22:bc:78:52:3a:d7:fa:7a:8c:a5:18:8f:35:9c:1f:
                    82:ce:6f:f0:90:88:24:be:da:5a:08:da:10:b9:dc:
                    05:3a:d6:3f:80:99:7f:87:9a:fe:23:e5:a7:21:e6:
                    4a:fe:31:ae:e0:de:3c:9c:8b:61:91:32:f2:4d:eb:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2C:07:39:9D:EE:48:74:B5:D0:F0:2D:5E:72:D8:47:F2:6F:17:C0
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/wiwHOZ3uSHS10PAtXnLYR_JvF8A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:b2:b2:9b:c6:8e:48:7c:a0:71:0b:fa:5e:0a:a0:ba:72:
         ce:f5:9c:06:6d:8a:6f:69:5e:0c:91:2a:18:3e:e9:5b:76:05:
         0b:73:5a:25:c1:a3:a5:95:41:da:49:5e:fc:90:50:58:41:b0:
         01:e5:cc:fc:69:ba:33:95:85:7b:22:b1:1f:31:90:e4:32:56:
         d6:67:24:a9:44:9e:cc:7d:c5:22:9a:92:b2:cb:e6:45:13:2a:
         d1:15:17:62:09:ab:5e:ca:69:9f:4e:06:8e:49:50:19:95:7f:
         65:11:16:5a:4f:94:fc:05:88:c2:18:7f:69:ea:4a:6d:64:60:
         34:08:99:d8:8c:50:29:e3:e3:32:1c:33:a7:ff:3e:e4:6e:1f:
         a1:76:2c:fe:d8:ec:42:58:29:f6:dc:9a:76:31:a5:d3:35:b7:
         a3:99:6f:c4:a5:9c:cf:db:b8:85:38:3b:92:08:46:0b:3b:6a:
         d8:f6:0a:89:b2:82:9a:c7:00:4f:c9:62:55:fb:00:df:b6:81:
         85:6e:2f:9b:cf:c4:20:7f:8d:85:e6:83:a8:52:f2:25:0d:0d:
         a0:76:69:ba:9a:9b:fd:d9:fc:04:82:d6:11:cd:b4:f0:a3:cd:
         05:5e:9b:59:b6:43:0d:d0:ac:1e:97:d8:af:d8:4a:80:10:8d:
         25:72:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:51 2025 by rpki-client