Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/cGUSsQYhIsZ4YLk6byFkyJ3A3aU.roa
File:                     cGUSsQYhIsZ4YLk6byFkyJ3A3aU.roa (raw, json)
Hash identifier:          t1xk3W30gQo481i0lhBsbw57NLUhV0HNrRKW+tV2rQc=
Subject key identifier:   70:65:12:B1:06:21:22:C6:78:60:B9:3A:6F:21:64:C8:9D:C0:DD:A5
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       41
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/cGUSsQYhIsZ4YLk6byFkyJ3A3aU.roa
Signing time:             Sat 01 Jul 2023 01:30:28 +0000
ROA not before:           Sat 01 Jul 2023 01:30:28 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        2001:370:a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Jul  1 01:30:28 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=706512B1062122C67860B93A6F2164C89DC0DDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:05:b1:df:23:d4:59:fa:ff:83:cb:a6:9f:
                    5a:72:ba:ff:2f:79:c3:cd:3a:38:9b:47:ac:f5:23:
                    3d:dc:1b:69:61:8f:80:88:64:59:18:19:d9:e3:5b:
                    ef:11:0c:6c:68:34:ba:57:fd:3b:5a:9f:01:e5:b7:
                    f3:98:6f:08:24:49:8a:3e:f4:28:a8:3e:30:9a:80:
                    de:13:4f:42:e3:b8:73:37:d8:b3:55:74:76:8e:48:
                    8d:1b:bb:d9:fa:4f:0a:aa:00:15:98:b7:e7:77:04:
                    03:27:be:cb:66:27:55:26:91:35:31:5e:99:1d:ff:
                    6f:dd:75:86:a2:3a:b2:bb:85:d7:21:14:25:33:37:
                    ae:7b:21:2a:6b:8a:c1:60:52:64:99:87:d6:ec:91:
                    91:5e:66:53:90:d2:52:62:c7:22:3b:8a:53:02:6a:
                    10:e7:14:6c:61:4a:1b:66:15:01:49:48:2c:41:29:
                    8f:0b:69:c4:9a:10:8e:67:4e:8a:93:5c:08:71:bf:
                    7e:ed:4a:cb:91:cd:17:1a:e0:d0:3d:cf:2d:0f:f4:
                    72:ab:25:ef:e7:46:79:c1:13:72:2e:eb:b6:47:29:
                    19:b3:41:d4:a1:3e:c5:56:2c:68:4c:71:fb:07:e8:
                    f4:4c:3d:c9:f9:7b:a2:15:56:4f:f7:24:cb:6a:60:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:12:B1:06:21:22:C6:78:60:B9:3A:6F:21:64:C8:9D:C0:DD:A5
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/cGUSsQYhIsZ4YLk6byFkyJ3A3aU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:370:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:87:97:df:64:d4:71:d9:13:bf:63:d1:5a:26:63:a5:be:
         bb:1b:cc:ec:e9:5e:36:de:cd:cf:a6:e1:42:cb:4d:c8:e8:d4:
         0a:39:75:5c:e4:ae:ed:76:47:5e:76:92:d2:f8:cf:b5:46:6f:
         0e:15:b0:fd:22:5f:92:0f:82:1e:63:e6:85:e3:3e:78:8f:2a:
         68:b7:95:b4:51:63:6f:52:a0:8e:ef:5f:e3:7d:cb:44:b9:a2:
         9a:b1:0c:a9:81:ad:11:9e:8b:a8:60:ef:28:69:2c:ba:ed:64:
         f4:c4:5e:9f:b3:27:91:7b:3f:01:65:d8:0f:0b:29:83:f1:7b:
         cb:aa:b8:5c:14:8c:ab:42:eb:78:20:68:41:d5:d0:3e:c6:b0:
         20:f8:02:67:76:e8:25:07:a3:ad:14:ac:a8:3d:a6:87:10:70:
         f3:59:e2:17:4d:6e:db:aa:8d:41:6b:33:97:95:69:d3:e7:38:
         8e:ec:84:41:03:f2:79:7a:8e:5b:e6:e9:15:ff:da:4e:a4:d7:
         4a:b6:44:bd:8f:29:85:eb:a0:13:b5:23:c7:db:fd:e8:0b:c7:
         a7:d7:f6:03:b7:b8:28:e5:31:b2:14:0d:91:4b:20:2a:01:90:
         5f:77:0c:ad:61:af:f5:8f:47:e8:ad:c8:85:9f:7d:ed:cb:5a:
         ec:7b:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:23 2025 by rpki-client