Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30215/JZGDHxhq6omD90hiGTB-VH2VF34.roa
File:                     JZGDHxhq6omD90hiGTB-VH2VF34.roa (raw, json)
Hash identifier:          Wvbu5LlCwSSSVE9deLNQx6Jlzsitt8n5NUCdsJAIpE8=
Subject key identifier:   25:91:83:1F:18:6A:EA:89:83:F7:48:62:19:30:7E:54:7D:95:17:7E
Certificate issuer:       /CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
Certificate serial:       54
Authority key identifier: 0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/JZGDHxhq6omD90hiGTB-VH2VF34.roa
Signing time:             Fri 31 Jan 2025 01:31:39 +0000
ROA not before:           Fri 31 Jan 2025 01:31:39 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     18126
IP address blocks:        2402:6b00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
        Validity
            Not Before: Jan 31 01:31:39 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=2591831F186AEA8983F7486219307E547D95177E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:05:55:32:73:ef:5a:fe:51:84:e8:54:3f:
                    86:4e:30:d8:81:9d:82:80:1a:c3:99:2c:bb:a6:9d:
                    5f:e5:c7:68:7b:94:ec:47:5d:0b:10:40:7d:5c:cf:
                    48:b7:d2:2d:60:6d:12:08:13:a4:e9:eb:97:1a:9b:
                    47:07:e4:62:76:fc:3a:92:a8:a6:22:1a:94:7a:1a:
                    d2:c0:d9:58:34:82:75:59:d4:58:f3:0a:4f:08:f3:
                    eb:62:db:f7:da:d6:01:15:a0:ed:f5:ed:e2:b9:9c:
                    6e:82:1c:f4:de:10:1d:93:8b:de:53:ec:05:a4:ad:
                    84:e3:29:75:d5:8f:71:34:34:b8:5c:33:6c:48:39:
                    c5:9d:b9:d5:3b:51:65:08:de:41:74:b7:a3:4e:f1:
                    dd:5c:e8:f5:56:5c:78:c3:e0:2c:67:28:91:cb:ef:
                    1d:44:0d:f3:0d:ee:fe:e4:aa:b0:23:52:45:d3:7b:
                    45:f2:f6:a9:62:91:a6:96:cf:c6:f6:05:d8:20:fd:
                    d6:6d:62:ab:9a:1f:d1:d2:cb:a9:2d:9e:7c:60:3e:
                    bc:07:2c:02:9b:96:3c:08:0b:d2:e4:bb:71:c0:12:
                    9f:58:a3:b3:3a:85:cc:14:b9:79:c1:e6:e4:7a:a7:
                    dd:50:3b:1c:f5:8c:44:a6:fe:8a:bc:58:13:3f:0e:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:91:83:1F:18:6A:EA:89:83:F7:48:62:19:30:7E:54:7D:95:17:7E
            X509v3 Authority Key Identifier:
                keyid:0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/JZGDHxhq6omD90hiGTB-VH2VF34.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:0d:0e:02:d1:3a:b2:1b:86:15:c4:b7:5d:8c:c7:e5:06:
         bb:3d:34:d2:1e:e7:6b:77:0c:59:27:7f:02:c5:b8:35:99:c7:
         6e:63:b5:e4:12:a7:af:88:2f:d9:34:db:9d:bd:2f:5b:d7:7d:
         4c:a0:f4:19:8f:92:c5:47:58:48:cc:38:2b:a2:ba:a7:ca:8f:
         39:65:0a:7a:83:7d:29:ec:a3:ac:b0:21:45:af:15:b8:31:4b:
         46:d0:96:95:7a:29:e1:98:b2:7b:96:65:d6:c0:77:78:5e:63:
         c8:41:4c:da:56:47:1a:72:81:5a:f5:38:db:93:b1:2c:fa:32:
         2f:db:33:82:64:d3:18:50:d3:0a:b5:3f:22:42:06:90:44:39:
         ff:43:b3:c8:4d:2c:a3:e3:6a:2d:ea:91:50:24:99:62:d5:87:
         0e:c7:9b:ee:ff:91:25:ea:c5:95:0d:56:c0:75:2b:7c:8b:a0:
         0d:42:4c:03:e2:8a:95:f9:9d:36:55:d2:87:ee:f5:3c:7f:50:
         6d:cf:5a:2f:1c:61:98:a0:85:4b:2c:7e:06:5d:00:71:32:7f:
         b1:f6:7b:20:45:15:6f:23:02:e6:11:fa:94:a4:35:b1:da:a8:
         29:39:87:12:1f:b0:55:67:ef:b6:b1:89:21:bf:e2:fa:f7:76:
         3f:e8:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:36 2025 by rpki-client