Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa
File:                     xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa (raw, json)
Hash identifier:          cMpvDwGoZ9aKKzVF9CaeeYpoF7AUFGU04HCYBUylyMw=
Subject key identifier:   C4:70:CF:65:50:3B:66:21:DE:DD:B6:73:A8:96:ED:B2:75:D3:7D:74
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       33
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa
Signing time:             Wed 31 Jul 2024 01:29:26 +0000
ROA not before:           Wed 31 Jul 2024 01:29:26 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        2001:c30::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Jul 31 01:29:26 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=C470CF65503B6621DEDDB673A896EDB275D37D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:e3:2f:01:c6:ec:9a:81:1d:02:1b:a2:ca:
                    c5:73:dc:4a:31:c5:b4:53:f9:0a:4c:9e:f2:60:96:
                    a3:e0:28:10:e2:03:00:57:8f:f4:79:87:04:6e:f6:
                    66:e3:52:fe:42:67:8e:2d:88:86:24:ed:61:d0:39:
                    ba:30:d8:a5:0c:d9:17:3e:45:cd:6b:81:04:b4:bb:
                    b8:18:0d:50:bd:7f:f8:71:47:a0:42:16:06:b9:f5:
                    e1:b7:60:d7:cf:5f:9e:3f:19:95:95:50:22:47:c5:
                    dc:b7:72:de:5c:3c:84:89:2c:f2:69:fb:7d:6c:c7:
                    bd:3b:b3:f4:59:7a:d2:7c:83:7f:ad:a3:25:3f:7c:
                    ea:c9:3b:1c:9e:2a:8b:9d:90:0e:9b:a1:42:1d:33:
                    ca:c8:43:10:18:cf:e9:3a:7a:2e:a6:d8:4d:b6:80:
                    81:be:75:65:a4:a6:6e:c7:79:c3:4a:ee:57:d9:cf:
                    bc:61:d7:fc:24:9c:c3:0d:eb:65:3a:e7:69:c4:d4:
                    af:fc:f8:32:ef:41:ad:fc:b3:a8:bc:41:7d:d6:0e:
                    da:f6:36:18:05:15:61:77:71:9a:54:e0:bf:b6:10:
                    0c:b8:44:fa:89:3d:02:0b:52:b1:56:c8:5e:8d:ff:
                    d1:92:d0:63:e0:f4:ec:d5:cd:09:6d:1d:00:ab:50:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:CF:65:50:3B:66:21:DE:DD:B6:73:A8:96:ED:B2:75:D3:7D:74
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xHDPZVA7ZiHe3bZzqJbtsnXTfXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:09:be:30:ea:11:97:f8:f6:0a:26:27:c3:62:0b:ee:76:
         88:65:1a:cf:ad:e6:9d:53:6a:07:d5:b9:8d:e1:7f:90:bd:b5:
         91:c6:75:e5:75:a7:b1:25:49:23:fd:c3:d8:2e:34:32:de:fc:
         55:c8:ec:c2:93:6b:b7:ea:d0:fe:c6:07:54:f5:45:4e:8d:bc:
         6f:01:1d:e1:8a:c8:2a:6a:38:d2:d7:68:85:c3:b5:8b:03:af:
         f8:18:b5:7b:ba:c6:8a:40:d1:08:68:55:87:f5:8c:08:3f:d3:
         44:64:8e:ff:1f:be:f4:f5:d0:97:4a:5c:86:3a:b4:f1:e2:14:
         dd:ff:0d:1f:28:d0:5c:84:6f:f9:a8:f0:d9:14:8c:59:a7:bf:
         d7:64:d2:fd:bf:02:8d:c9:64:7e:41:2d:53:fa:a8:9c:ad:f5:
         6b:33:0c:85:e6:24:ca:45:5c:d3:fa:14:38:4c:8d:60:cc:d3:
         36:a5:15:fb:87:60:72:0c:aa:2e:d7:54:18:02:1d:d8:25:c7:
         fa:6b:3a:ad:84:ef:3d:42:6e:d3:c5:d5:04:73:ac:73:2f:32:
         2b:6b:a8:39:99:f3:63:47:ef:cb:0c:3f:be:19:be:34:20:73:
         78:cf:0d:bb:bb:b2:3b:d9:c4:03:23:1b:d6:cc:7a:05:93:6e:
         fc:23:0a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:57:38 2025 by rpki-client