Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vZZWJjXkQpHWOaT-GWK0gPK0AxI.roa
File:                     vZZWJjXkQpHWOaT-GWK0gPK0AxI.roa (raw, json)
Hash identifier:          K362HCPqqbeUX3qORiU/r1KGPx9Y2OrQBv1d1KTqYYM=
Subject key identifier:   BD:96:56:26:35:E4:42:91:D6:39:A4:FE:19:62:B4:80:F2:B4:03:12
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03A8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vZZWJjXkQpHWOaT-GWK0gPK0AxI.roa
Signing time:             Sun 30 Jun 2024 01:32:51 +0000
ROA not before:           Sun 30 Jun 2024 01:32:51 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        240a:0:100::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936 (0x3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 30 01:32:51 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=BD96562635E44291D639A4FE1962B480F2B40312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:7e:0a:7b:9f:d9:30:e6:4b:94:27:6f:43:
                    83:06:8f:1d:f0:c4:ca:af:9d:b8:23:ea:14:4f:92:
                    2f:a5:63:6f:99:a2:62:0b:7f:3d:c7:8a:d3:0b:cb:
                    62:4b:85:c9:cd:60:84:f0:35:67:dc:65:77:e9:b7:
                    66:f5:e8:85:50:38:a9:75:cc:d6:48:ab:fb:27:a9:
                    06:91:0d:08:14:62:79:75:77:81:5e:85:6c:41:49:
                    e8:6b:60:df:25:c5:30:e4:33:9f:cf:9a:23:65:9e:
                    c5:29:68:8e:ca:4a:07:25:67:6c:c5:75:52:cb:97:
                    f0:36:e2:6c:ed:b6:8b:f1:51:32:87:87:0f:5b:fe:
                    97:92:92:f9:c8:4c:8d:fa:79:2e:0a:42:b9:37:b3:
                    40:34:2e:f8:08:c3:a9:e0:54:ca:58:22:c0:c8:4a:
                    41:2a:2f:ac:82:d2:a5:7d:3b:6e:8b:3a:62:48:8a:
                    1d:70:8c:9f:fc:78:84:64:cb:5e:82:4e:22:05:22:
                    ea:d8:72:d9:a8:78:1e:8f:c2:61:7b:fd:f1:d1:61:
                    08:75:37:4a:2a:23:3b:71:51:76:7c:d4:98:2b:e3:
                    1f:a8:4c:3e:e7:1d:02:5e:e0:b6:65:b1:05:e3:46:
                    c6:2a:bb:14:00:35:0b:b2:67:f1:46:d9:2e:49:cb:
                    27:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:96:56:26:35:E4:42:91:D6:39:A4:FE:19:62:B4:80:F2:B4:03:12
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vZZWJjXkQpHWOaT-GWK0gPK0AxI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:100::/41

    Signature Algorithm: sha256WithRSAEncryption
         c5:8f:d9:26:e4:05:d1:63:96:bd:01:47:1d:69:9f:27:94:d9:
         1a:5a:60:6a:3f:5f:0e:cb:a3:3e:63:22:15:1d:62:49:3f:e6:
         ce:88:e4:cf:4a:19:ba:64:6d:4a:c1:ad:0c:a1:a8:b8:c4:af:
         b4:42:98:4e:10:2f:32:b4:ae:49:40:c3:88:90:a0:ef:5e:0c:
         24:c2:c7:c7:d9:74:18:b5:24:e5:a2:5f:ca:3f:22:fd:06:c5:
         a1:09:c1:ec:28:85:9b:97:8e:de:68:e8:5d:28:c0:f7:e1:a8:
         1d:33:ea:9f:53:da:10:f7:80:fa:b0:21:8d:c1:49:12:40:de:
         97:9f:da:19:e5:02:a3:9a:1e:0c:09:b5:76:6e:3a:3c:27:02:
         38:8c:d0:67:18:62:e5:c3:d0:94:32:87:ab:4e:67:82:5e:18:
         37:d7:75:c2:d4:f2:02:3b:37:1e:06:37:60:08:61:d8:1d:01:
         72:a1:cd:27:82:7d:a7:0e:35:85:1a:85:88:4c:e4:9b:24:cc:
         c7:db:df:4e:1b:11:3c:e9:3b:79:86:6b:d5:03:9a:ca:72:ec:
         a1:16:94:ea:24:99:45:bf:8b:6e:27:ef:c2:f8:b8:2e:28:db:
         45:42:20:9b:6a:02:6a:dd:b9:83:5e:b1:12:5b:2c:3d:af:a1:
         e3:7f:b9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:15 2025 by rpki-client