Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/VndwrjLx6CIlB3GE6JY9_siJIZ0.roa
File:                     VndwrjLx6CIlB3GE6JY9_siJIZ0.roa (raw, json)
Hash identifier:          qs+X3L/bjofTqH3KMaWwgfQYke81y0/kM5xvkmLFFXg=
Subject key identifier:   56:77:70:AE:32:F1:E8:22:25:07:71:84:E8:96:3D:FE:C8:89:21:9D
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       5C
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/VndwrjLx6CIlB3GE6JY9_siJIZ0.roa
Signing time:             Fri 31 Jan 2025 01:31:01 +0000
ROA not before:           Fri 31 Jan 2025 01:31:01 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     7671
IP address blocks:        2001:d70::/30 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: Jan 31 01:31:01 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=567770AE32F1E82225077184E8963DFEC889219D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:c2:2d:ba:cb:f2:c1:89:16:81:30:ba:6b:
                    b1:7b:51:9e:a9:1c:74:1e:48:d7:0e:59:f7:5a:52:
                    de:0e:73:47:42:00:83:98:10:49:8d:e4:26:52:1d:
                    d7:38:ac:ae:8e:b6:05:e4:7b:4b:dc:b6:1b:f7:db:
                    bf:05:3b:92:79:c1:12:9d:c3:08:dc:fa:7c:eb:cc:
                    02:4c:6a:76:1f:d3:8a:91:91:8b:c0:49:4f:e0:88:
                    20:a4:a5:d5:44:19:53:93:9e:a5:f9:41:30:b9:3d:
                    58:68:10:90:17:fa:29:2c:9c:06:cc:72:52:de:b0:
                    dc:ed:80:e8:27:e8:e4:47:7b:d5:4f:af:2c:91:d5:
                    bd:d9:ab:b8:60:83:7e:fb:a5:6c:b3:b0:ad:68:f7:
                    66:27:ff:7f:05:fd:69:a7:9d:e4:f8:0c:f6:c7:50:
                    eb:b2:a3:5f:d5:44:db:98:fe:4a:1b:e0:cf:63:ce:
                    6b:25:16:62:65:20:ae:2f:c1:df:89:bb:e6:65:92:
                    50:70:6b:6a:71:4a:a4:20:4c:15:e5:36:e4:ca:91:
                    2f:23:7c:8f:78:1c:f0:e1:d3:5e:2f:c5:89:6a:e9:
                    3e:25:2e:b7:f2:c0:c9:d3:7d:c4:dd:f2:f3:86:49:
                    79:11:5a:1f:35:40:c1:98:09:fe:46:15:9d:dc:0d:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:77:70:AE:32:F1:E8:22:25:07:71:84:E8:96:3D:FE:C8:89:21:9D
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/VndwrjLx6CIlB3GE6JY9_siJIZ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d70::/30

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:44:51:c0:1c:ad:67:7d:ac:ff:e1:40:78:bc:07:f4:c9:
         67:6b:77:af:c3:3a:94:83:c6:9c:bc:22:cf:67:44:47:91:21:
         b1:c1:d5:70:8f:98:6f:9a:a6:75:3b:09:2c:d5:e5:b3:a1:c0:
         e2:26:95:3f:1e:09:a0:fd:83:fc:69:71:16:e4:25:ec:e0:13:
         32:1e:ba:c1:10:59:53:b1:6a:a7:3b:51:3d:fb:b1:5d:cf:8c:
         a2:01:95:76:6f:2b:c6:54:53:e9:37:a1:6b:2d:c9:cc:c9:d5:
         61:ef:02:a6:6b:ca:b0:1e:06:37:38:fb:ed:b6:a7:2f:c9:91:
         3f:9c:8c:22:26:88:49:9b:19:68:50:5e:d3:f4:4e:9a:10:d1:
         a8:c3:0d:7a:39:93:e3:6a:1a:eb:24:76:81:10:f5:21:85:d1:
         5b:58:69:5f:28:9b:19:e1:37:90:71:da:19:20:0f:70:c4:a8:
         56:4a:a5:1f:73:cc:91:69:fc:b4:74:28:d0:6a:89:40:51:0c:
         62:3f:e7:b6:e6:ab:8b:06:28:45:15:7c:9f:68:f9:df:ce:36:
         b8:f5:b6:2d:d9:31:f5:8e:20:32:3d:63:1f:d0:5d:66:42:91:
         e8:87:6f:12:d8:65:23:ff:e3:da:e5:6a:47:f8:78:d4:39:37:
         88:30:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:05:14 2025 by rpki-client