Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/m_9CpncDU14w1q2YdaRYcuN-8V4.roa
File:                     m_9CpncDU14w1q2YdaRYcuN-8V4.roa (raw, json)
Hash identifier:          7lmADiMW+JuZpQdKpVpqQpTwxAtmQLJ4WhuKd5OFHjM=
Subject key identifier:   9B:FF:42:A6:77:03:53:5E:30:D6:AD:98:75:A4:58:72:E3:7E:F1:5E
Certificate issuer:       /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial:       5B
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/m_9CpncDU14w1q2YdaRYcuN-8V4.roa
Signing time:             Fri 31 Jan 2025 01:30:50 +0000
ROA not before:           Fri 31 Jan 2025 01:30:50 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     55391
IP address blocks:        2404:8e00::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
        Validity
            Not Before: Jan 31 01:30:50 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=9BFF42A67703535E30D6AD9875A45872E37EF15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:56:08:38:e9:43:00:ad:13:8e:da:e0:39:
                    9e:01:c8:5c:a4:f9:12:58:7b:fd:a3:7e:0e:74:74:
                    fa:ee:34:8b:23:ae:1b:0b:9b:d7:f1:98:55:9f:ca:
                    84:96:a8:0b:07:32:83:36:ff:a1:b6:73:ff:b8:3c:
                    3c:0e:f4:63:57:14:9e:b0:a8:a7:8f:0d:c3:75:69:
                    20:b6:cb:d3:01:cd:08:cc:46:58:c4:20:ef:af:ef:
                    50:5c:97:78:98:67:b8:44:df:f8:4c:7a:2c:30:01:
                    43:b7:62:41:f6:46:82:ba:ff:64:d0:71:9d:42:a6:
                    9d:4f:79:5e:24:b8:f2:94:6a:5b:b3:cb:dc:80:94:
                    40:e7:76:ae:21:21:6a:8d:c7:c3:66:0a:fa:ba:ab:
                    a3:5d:35:2b:f5:07:3a:e6:a1:dc:fb:1b:54:b9:cc:
                    bb:1d:a4:c9:b7:e6:b3:92:41:56:39:55:b8:df:1f:
                    1a:ee:e1:7b:98:db:03:8b:95:5f:a8:37:32:8a:e0:
                    3e:f4:14:37:3e:7a:ec:67:49:97:e9:3b:3d:04:08:
                    da:8d:fb:ea:ea:a6:f8:78:a2:3b:3c:72:d7:2b:2b:
                    4c:f7:2b:48:44:89:e8:27:23:45:9d:20:39:05:31:
                    a6:f4:ce:e3:3b:a8:ec:bc:29:69:f8:86:81:f0:85:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FF:42:A6:77:03:53:5E:30:D6:AD:98:75:A4:58:72:E3:7E:F1:5E
            X509v3 Authority Key Identifier:
                keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/m_9CpncDU14w1q2YdaRYcuN-8V4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:0f:9d:5e:d1:07:a3:43:63:eb:49:b6:81:5c:6e:69:a5:1c:
         69:9b:2d:c5:af:7c:1e:03:cb:11:c3:7b:1c:fc:92:73:c1:b3:
         d0:75:1f:12:28:58:21:7d:38:66:3f:66:61:f7:ff:9c:c8:56:
         f6:79:d9:df:11:d3:3c:c2:05:66:a0:e0:23:b6:1c:55:89:72:
         cc:ec:d9:7f:44:33:b2:75:10:87:2d:be:30:74:ef:c6:c6:79:
         9f:8b:08:d5:52:60:25:ed:6a:7b:0c:75:36:23:1a:30:c5:d1:
         6c:e6:70:bf:08:fb:d0:f2:46:a7:e5:96:12:6a:18:f3:4f:32:
         84:e7:d8:ad:07:eb:90:f3:0b:a5:ff:15:c7:16:62:41:d7:00:
         cf:6d:a6:e4:07:af:9b:05:d1:6e:a2:7d:71:eb:2f:ef:25:37:
         73:25:ce:44:20:ba:8d:a3:5c:8d:dc:a9:ce:29:2e:79:eb:9d:
         7e:de:38:e6:72:2e:b2:11:4a:d7:e0:a1:52:e2:39:2c:7b:32:
         a4:1d:89:e5:f7:bc:12:85:e0:df:fc:9c:2c:0f:be:31:d7:26:
         43:da:16:ec:04:21:1a:ec:cc:1e:86:f5:50:0d:bd:61:6d:4f:
         a0:d2:7a:fa:b0:69:0c:ec:47:15:19:3d:0d:65:aa:3d:64:2c:
         34:87:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:20 2025 by rpki-client