Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1tNTivKbaDD5Fixjd7k6t9jw5QQ.roa
File:                     1tNTivKbaDD5Fixjd7k6t9jw5QQ.roa (raw, json)
Hash identifier:          OOaXwkvYitdE3jGbuEffIzfCTPMT+/3NDRCi1FaGUWs=
Subject key identifier:   D6:D3:53:8A:F2:9B:68:30:F9:16:2C:63:77:B9:3A:B7:D8:F0:E5:04
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       43
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1tNTivKbaDD5Fixjd7k6t9jw5QQ.roa
Signing time:             Tue 30 May 2023 16:04:16 +0000
ROA not before:           Tue 30 May 2023 16:04:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D6D3538AF29B6830F9162C6377B93AB7D8F0E504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2f:fa:8e:aa:03:73:bc:0b:8a:a4:1c:52:c1:
                    30:08:f7:13:c4:e4:9a:ac:95:f5:17:66:03:8a:29:
                    5d:4c:47:1a:07:21:dd:5f:85:70:8a:40:32:72:4c:
                    9c:ad:eb:d0:b3:69:d6:56:0d:0a:49:d7:2c:66:09:
                    b3:d1:ed:c1:8f:56:1c:72:07:34:64:27:d4:8b:c8:
                    93:7d:c8:23:3b:1c:b0:c1:f3:10:86:7b:78:b3:2e:
                    08:22:8e:1a:fd:86:f2:c2:d1:d6:e9:2b:97:5a:ee:
                    ec:46:38:23:a6:cc:ca:c8:53:0d:18:7c:a3:ad:ea:
                    0f:fe:93:7b:85:db:de:97:fc:01:16:c5:e8:1a:39:
                    06:93:2a:b4:78:c9:98:2c:5b:80:e5:81:ec:c1:ba:
                    0b:c0:dd:18:8c:41:7f:96:c8:da:48:20:cd:4d:b4:
                    b4:14:30:dd:73:6b:97:20:96:a2:83:36:33:37:cf:
                    01:37:02:0d:a4:92:2f:5c:e6:2b:ea:47:ce:e8:0c:
                    5b:c4:8f:71:f8:36:d0:b6:6c:aa:df:8c:4a:ab:27:
                    0e:3f:0a:18:1e:81:ef:72:17:df:e3:e0:10:15:47:
                    85:d9:55:73:0f:94:a3:7e:70:6e:58:17:75:04:30:
                    51:69:e3:cc:9c:73:3e:a6:91:47:55:57:3b:ca:14:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D3:53:8A:F2:9B:68:30:F9:16:2C:63:77:B9:3A:B7:D8:F0:E5:04
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1tNTivKbaDD5Fixjd7k6t9jw5QQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:88:be:83:a4:2a:c4:57:9b:94:07:51:8e:7b:7d:52:9b:ef:
         39:59:8d:32:13:9a:85:82:d7:e2:c0:19:17:e2:2d:01:44:4f:
         77:d7:8c:79:b9:7e:93:20:ff:15:d6:f9:0c:79:0c:bf:6e:4f:
         ef:c7:06:98:54:6d:2c:f5:9d:85:54:ac:48:7a:7e:ef:ae:75:
         a5:a3:9c:b7:62:81:e9:19:49:13:02:c3:0c:d1:3b:e1:23:18:
         a6:19:ae:f2:90:18:13:4b:6e:4b:fa:c5:1e:93:ef:c4:3d:c1:
         7f:4e:b5:33:18:e4:3b:b5:54:ab:6d:f0:bc:9d:61:e8:2f:9f:
         96:a5:84:b4:00:a0:99:3f:1c:3b:9b:70:ff:37:93:67:10:51:
         21:cf:e9:ac:41:52:bb:a7:f2:75:d9:82:1e:91:b3:7a:ef:7c:
         54:61:79:c6:eb:db:0f:0b:5c:4f:5d:19:57:98:e0:b9:bd:b8:
         92:6a:1d:04:31:e5:68:9e:fb:73:a4:89:bf:65:b6:ed:55:78:
         23:39:19:7b:70:7c:dc:61:ee:c2:fa:3d:12:a5:83:3f:df:a1:
         df:83:3f:f4:a4:6b:5e:c7:bc:f1:ff:1d:d2:21:e1:4c:b4:1a:
         3b:77:cd:f1:9e:89:04:c7:ae:f3:38:ad:a0:34:e6:8e:5a:3d:
         bd:6f:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:44 2025 by rpki-client