Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/zH0WF1UTgVR95wOD1ky0v0zosVI.roa
File:                     zH0WF1UTgVR95wOD1ky0v0zosVI.roa (raw, json)
Hash identifier:          +MPQBb0efvcVmkVsT46VppbJYEZ3itNHajBCbfQ8d/k=
Subject key identifier:   CC:7D:16:17:55:13:81:54:7D:E7:03:83:D6:4C:B4:BF:4C:E8:B1:52
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       3A
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/zH0WF1UTgVR95wOD1ky0v0zosVI.roa
Signing time:             Fri 31 Jan 2025 01:33:32 +0000
ROA not before:           Fri 31 Jan 2025 01:33:32 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7679
IP address blocks:        110.54.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Jan 31 01:33:32 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=CC7D1617551381547DE70383D64CB4BF4CE8B152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:11:33:09:76:a2:a0:39:b1:8b:29:e2:6a:
                    1a:55:92:c5:42:32:46:67:b2:38:7a:b6:e7:fd:dd:
                    28:4c:c7:ec:7f:46:9b:70:b3:8a:be:2d:00:59:e1:
                    bc:a8:74:5c:f0:c9:7b:3c:49:5a:7d:0c:7f:bd:55:
                    e5:4b:97:1f:73:0a:cf:2d:17:6f:09:4a:91:7f:01:
                    e7:56:36:21:a1:95:59:2a:83:0a:b2:d8:46:f9:ad:
                    eb:c1:06:dd:85:e2:f5:08:45:cd:78:25:62:ed:8a:
                    b5:c0:e3:55:10:4b:30:c2:03:9b:06:ce:67:d8:16:
                    00:b6:da:cf:7f:24:c5:10:56:1a:19:48:4b:b0:72:
                    5a:55:6f:69:63:26:75:59:36:31:65:bf:e4:96:77:
                    3c:b7:68:7f:8d:2d:57:5e:c6:3b:e4:14:ce:49:dc:
                    1d:c1:fc:42:80:4c:f9:04:60:4d:2e:ab:e4:d0:e7:
                    eb:c7:75:57:57:34:a5:e8:a9:57:1c:82:3e:bc:85:
                    16:31:e4:11:45:b1:ca:d0:d0:15:99:4d:52:e5:02:
                    87:99:ef:07:2f:45:30:68:65:72:fa:08:92:90:ac:
                    3c:c3:63:1d:bc:59:5f:00:8d:aa:b3:55:06:6d:83:
                    c2:20:a4:35:5f:05:49:73:6e:15:aa:7b:9a:b3:b8:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:16:17:55:13:81:54:7D:E7:03:83:D6:4C:B4:BF:4C:E8:B1:52
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/zH0WF1UTgVR95wOD1ky0v0zosVI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.54.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         51:d6:7b:b0:04:79:d6:3a:91:af:b1:85:5a:a7:79:46:2e:cc:
         34:da:08:32:05:a3:7b:3e:ad:cc:4c:19:1b:5f:56:60:26:ae:
         d5:84:a8:e5:29:ff:0d:93:42:2c:97:af:67:d3:de:be:9d:1b:
         e8:ff:14:77:84:f2:99:d9:ca:be:22:07:79:a7:cf:a1:01:ba:
         c0:b7:b2:ab:c2:d2:d3:08:a5:3d:e5:9a:34:6e:79:eb:38:2a:
         87:58:f3:9d:63:90:3a:cd:7b:48:e7:f5:9f:b8:7d:a8:5e:1b:
         0b:ac:23:86:fd:8b:df:e8:a5:32:01:6e:31:33:c0:b2:a2:a9:
         ea:1c:eb:32:90:ac:a4:f4:d5:f2:1b:82:02:e1:59:20:da:22:
         3c:63:13:12:2a:16:7f:bc:26:10:01:57:48:41:16:12:4d:a5:
         8d:b5:41:c2:77:82:6f:3f:e9:f7:23:d3:0b:9d:6d:9c:0b:4b:
         9c:aa:4c:b2:02:76:a5:ef:72:f0:b6:3d:22:c7:a8:d8:8e:b3:
         37:56:06:68:1f:65:fa:bb:65:c7:0a:51:9f:45:c1:b1:6c:f0:
         9e:30:2d:9f:86:b7:fb:cc:3a:c1:10:57:23:b3:01:ba:23:4a:
         a6:eb:d1:8b:f8:c1:69:1a:8c:d4:76:8c:5e:75:f1:f9:4f:34:
         f9:aa:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:47 2025 by rpki-client