Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/7Ce2hR7oeamsrrGURqzjnD__JSw.roa
File:                     7Ce2hR7oeamsrrGURqzjnD__JSw.roa (raw, json)
Hash identifier:          fhvn/lsqEPbjluBko8XLbhGAd+kFrspEwqWbQ0OSaoI=
Subject key identifier:   EC:27:B6:85:1E:E8:79:A9:AC:AE:B1:94:46:AC:E3:9C:3F:FF:25:2C
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       82
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/7Ce2hR7oeamsrrGURqzjnD__JSw.roa
Signing time:             Sat 01 Mar 2025 01:30:31 +0000
ROA not before:           Sat 01 Mar 2025 01:30:31 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        2406:bb00::/29 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Mar  1 01:30:31 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=EC27B6851EE879A9ACAEB19446ACE39C3FFF252C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:67:a2:0d:fc:cc:99:cb:10:d4:ce:c4:86:
                    1b:86:7a:0e:09:e0:99:da:ec:bb:33:70:17:5d:74:
                    58:44:3f:b7:fd:b5:cf:64:71:38:9b:fd:47:e1:3d:
                    61:54:d7:95:d1:72:62:06:1d:fd:2e:03:70:a1:c7:
                    bf:a9:0a:14:d2:6c:0e:87:e1:fc:0f:d0:db:48:94:
                    e5:d5:20:74:4f:82:6c:c8:ff:fa:e6:7a:ed:b0:3d:
                    97:92:64:11:3f:48:8b:14:7e:fc:54:3b:86:eb:00:
                    ff:dc:85:19:92:04:49:dd:fc:60:c2:1c:b3:a9:6a:
                    89:cf:b4:63:78:6f:2d:1e:62:85:0d:35:93:36:be:
                    d0:f3:2d:16:ef:78:44:7f:b3:70:fc:64:89:45:27:
                    de:be:0b:f7:96:9c:f0:aa:2c:4d:3b:38:84:5a:a5:
                    f5:b4:44:eb:78:15:aa:6c:af:df:c1:e5:34:1c:73:
                    1c:ab:75:14:6b:ce:28:19:ae:1e:86:7f:85:56:22:
                    f6:3b:c3:af:fe:d9:46:91:11:8b:10:c1:35:58:04:
                    4c:bd:7a:fc:0a:67:41:ca:50:de:d1:f2:56:ac:a5:
                    26:74:19:18:94:e9:1d:f3:11:c0:7f:80:f2:b5:7c:
                    3e:2e:99:c4:dd:3f:4f:6e:ef:d3:25:2b:d4:71:0e:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:27:B6:85:1E:E8:79:A9:AC:AE:B1:94:46:AC:E3:9C:3F:FF:25:2C
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/7Ce2hR7oeamsrrGURqzjnD__JSw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:90:31:c0:c9:b1:6a:a1:f8:ae:a1:59:e6:24:10:c8:f2:68:
         f1:cc:2a:0c:b1:56:89:cf:87:7e:0f:92:ea:6a:52:08:5c:05:
         9d:c0:f4:43:e6:9f:19:b7:9b:01:d9:99:b9:5f:72:b8:1e:4a:
         18:2b:7f:78:b8:1b:ea:1f:f0:e1:4c:cf:2c:4c:ba:42:dd:b9:
         04:b7:a5:f4:74:ee:55:c4:a5:61:32:0c:eb:31:50:94:34:ee:
         12:a4:9f:b4:d7:f1:e3:5e:fe:be:e3:48:ca:5e:b6:78:97:ed:
         41:8c:92:b4:df:05:ce:e3:01:b3:32:88:de:3c:72:ae:ed:dd:
         60:67:f9:ca:3e:86:6e:34:3e:6c:6e:15:9b:53:e6:95:87:77:
         d6:3e:8f:84:ef:83:6d:f6:b4:b1:53:da:5e:84:ed:a3:2d:b5:
         8f:75:1a:40:f1:d0:de:be:ec:9e:1c:fd:54:81:15:ab:61:80:
         d2:73:1d:1e:1c:3f:60:54:44:37:d3:17:b2:c9:33:2e:3a:2f:
         b4:93:c5:ed:3c:ff:b1:5a:ab:38:16:50:43:32:6a:1b:28:da:
         de:4c:63:ef:54:de:84:fd:15:fe:34:61:e7:b2:6f:3d:f1:89:
         23:04:4f:fa:f4:01:03:96:a4:3d:d2:61:fa:cd:7c:3a:c8:45:
         e7:46:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:51 2025 by rpki-client