Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XjFBTR0y57gLFTnE0EE2luib4Qk.roa
File:                     XjFBTR0y57gLFTnE0EE2luib4Qk.roa (raw, json)
Hash identifier:          7AzLfI4UU5bxg1ahyr07RqNsJlk0Eh+6RqkuCgSpdI0=
Subject key identifier:   5E:31:41:4D:1D:32:E7:B8:0B:15:39:C4:D0:41:36:96:E8:9B:E1:09
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01EB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XjFBTR0y57gLFTnE0EE2luib4Qk.roa
Signing time:             Tue 30 May 2023 17:38:31 +0000
ROA not before:           Tue 30 May 2023 17:38:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5E31414D1D32E7B80B1539C4D0413696E89BE109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:8e:c8:f5:3b:3f:3c:ce:1d:c2:c3:3c:f3:
                    4a:06:72:0b:5f:0e:69:d4:62:27:d9:30:ce:70:87:
                    e6:d0:70:e5:14:eb:2e:51:40:b7:98:98:9f:0e:b6:
                    be:30:9b:1e:f0:81:38:25:49:09:c0:ca:17:e1:96:
                    23:78:cb:fc:78:b1:f0:40:84:9d:0d:8e:62:cb:1e:
                    ec:2e:3a:8c:ac:d0:82:28:36:6d:1b:ab:a8:c6:82:
                    84:a4:3c:d0:80:cb:e9:60:90:3f:4d:22:a3:6a:e7:
                    89:12:66:03:18:90:54:51:0a:9f:78:15:5a:54:75:
                    00:14:d9:21:f6:20:6a:8a:da:8c:75:25:4f:73:cc:
                    a4:56:08:ff:a0:0c:b0:d9:f8:92:83:b2:c7:00:b9:
                    cb:de:93:ed:56:92:a8:4b:eb:27:d4:e0:54:f8:a4:
                    6f:a4:bf:e8:07:03:fe:c9:bc:8e:a3:0c:aa:c3:16:
                    9f:d8:07:88:2e:3a:0e:96:c5:f2:31:19:b3:b4:8b:
                    ca:12:7f:75:b3:b8:c6:04:1f:fa:ec:6a:6b:f1:56:
                    ae:b9:40:38:d3:2a:f3:f9:cb:21:61:1d:c5:a8:b2:
                    1a:e1:1d:b5:11:e0:18:d1:6c:ec:cd:41:93:48:d7:
                    9f:52:db:29:b5:bc:b9:44:53:9c:16:73:e6:95:d6:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:31:41:4D:1D:32:E7:B8:0B:15:39:C4:D0:41:36:96:E8:9B:E1:09
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XjFBTR0y57gLFTnE0EE2luib4Qk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:4a:f1:7a:25:33:03:ea:2e:0c:f0:3c:64:c3:fb:8a:49:c0:
         6a:59:2e:61:dc:75:af:69:1f:f4:d8:43:15:09:fd:00:fc:91:
         28:de:38:32:71:88:1b:5d:e9:c0:0f:c2:d1:7e:3e:40:c7:c5:
         eb:48:2c:be:01:77:e0:55:58:c4:d2:8b:03:36:88:69:01:93:
         2b:6d:64:23:71:25:86:8e:64:60:10:65:c8:75:06:b9:61:70:
         e8:5d:f1:0d:9a:93:ec:68:b2:77:39:cf:61:e6:66:74:9f:0e:
         80:b7:c3:08:2a:6a:3f:cb:f2:fe:ee:7f:c3:f4:62:e0:05:43:
         34:66:e6:aa:d3:d3:4d:80:72:0e:5c:51:44:12:31:ae:a0:6f:
         10:76:f9:85:f1:8b:66:3f:7d:7b:77:5c:d2:65:e0:ee:93:e6:
         bb:c5:d7:f7:64:e3:83:eb:3d:cb:57:14:a1:9d:84:d2:10:d3:
         75:ad:7a:01:4d:04:41:b0:45:a8:f9:eb:bd:dd:32:84:19:40:
         fb:a1:2d:ac:cc:f3:54:6c:bf:a2:c6:26:c2:35:87:fc:61:d3:
         56:0e:f1:7c:b3:83:77:7a:0e:ce:5b:57:89:03:52:65:2d:9d:
         78:28:77:69:14:f1:61:2a:af:f1:e7:72:33:23:aa:8b:f8:db:
         96:b6:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:41 2025 by rpki-client