Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/zE44N5aUCXyU7Hqw5e8IMIs6YU8.roa
File:                     zE44N5aUCXyU7Hqw5e8IMIs6YU8.roa (raw, json)
Hash identifier:          GSUZ/d8F+Z/Itp2EvhfMyYxMp34eL91Q9mdKHhu9U0M=
Subject key identifier:   CC:4E:38:37:96:94:09:7C:94:EC:7A:B0:E5:EF:08:30:8B:3A:61:4F
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       4B
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/zE44N5aUCXyU7Hqw5e8IMIs6YU8.roa
Signing time:             Fri 31 Jan 2025 01:33:39 +0000
ROA not before:           Fri 31 Jan 2025 01:33:39 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        210.191.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:39 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=CC4E38379694097C94EC7AB0E5EF08308B3A614F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:f0:79:bb:7d:25:32:bf:c5:6c:c7:dc:de:
                    d6:8b:3a:63:b0:1e:26:db:98:6e:87:d9:cc:19:fd:
                    a4:2e:2d:ad:42:89:27:bc:7f:e8:19:26:3e:2a:1a:
                    64:d7:1c:c2:54:b7:1d:3a:aa:93:8b:e3:96:37:ac:
                    42:d9:f1:ed:18:cf:60:a4:79:4d:65:63:7e:4a:d4:
                    c4:f1:ae:ad:19:ae:62:7a:c6:7e:a0:7d:dc:59:e5:
                    a2:9d:7f:9d:55:0b:57:b3:33:24:4f:b2:d9:0b:da:
                    a2:25:bd:f9:df:97:8f:0b:18:d7:d1:ac:df:82:39:
                    6b:ac:8a:88:e9:bd:b9:24:ca:80:17:70:0e:02:17:
                    51:78:13:ef:9f:64:cc:ff:ff:db:03:6d:bc:35:65:
                    94:0c:fa:2f:db:7e:f4:87:f1:96:67:67:ee:0a:04:
                    52:94:6b:21:92:4b:a4:7f:40:d7:3b:01:52:50:e2:
                    cc:df:d9:9c:33:f6:d3:7b:6b:69:85:7b:72:30:c1:
                    ec:7d:c3:a0:b2:88:21:e0:f8:3f:b6:16:84:1e:b9:
                    ed:e8:b6:ce:1a:10:1b:2d:66:a9:e1:ad:ef:df:f3:
                    8a:a9:fc:ae:6b:55:72:86:78:dc:75:3c:06:f3:29:
                    a3:bb:9a:e8:70:26:db:3f:eb:26:fe:9b:2d:b2:81:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4E:38:37:96:94:09:7C:94:EC:7A:B0:E5:EF:08:30:8B:3A:61:4F
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/zE44N5aUCXyU7Hqw5e8IMIs6YU8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.191.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:fe:91:77:9d:13:32:0c:e9:0f:66:80:82:cc:b4:68:bb:f9:
         35:46:89:a2:19:cd:ab:35:aa:26:d6:db:10:31:c0:35:cb:8a:
         f2:2a:76:09:b6:7d:e2:5b:3c:d7:16:b5:a1:d8:ca:96:b7:94:
         ce:f7:87:1c:c9:be:90:3a:65:ef:3a:13:60:f5:10:ed:22:fd:
         c2:fd:8b:24:98:ec:75:10:28:a5:b0:69:ba:33:3a:ec:27:f6:
         98:ff:c0:ce:04:44:b9:dd:0f:7a:cf:62:fa:69:33:97:ec:e4:
         47:ba:5f:36:7f:0f:8a:45:c6:11:f1:0f:4b:d5:86:7f:0c:93:
         0f:7a:6c:f2:5b:cd:18:ad:06:a8:09:3d:4e:89:06:d0:6e:9d:
         94:d2:a9:fa:6d:08:ef:fa:3b:bd:85:36:db:7f:2a:b8:a0:db:
         e3:7c:ae:4a:34:e8:fb:c8:69:32:d1:1b:5b:16:d4:bb:8f:f6:
         96:5a:45:88:df:19:61:45:c2:b7:9f:4c:ed:03:5f:a9:fb:2c:
         6a:f2:e6:16:4b:3b:40:ed:5c:24:1d:bb:33:3f:6d:f1:df:85:
         50:0d:b5:46:6b:67:5f:70:9e:f8:7c:9f:f8:9e:57:4b:c2:93:
         1f:87:f8:08:76:a0:43:4d:c0:ec:c5:87:0e:ca:19:50:f6:65:
         6f:f6:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:48 2025 by rpki-client