Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30252/O5JnGfufMyWbbZMbkXLq1VL2pDU.roa
File:                     O5JnGfufMyWbbZMbkXLq1VL2pDU.roa (raw, json)
Hash identifier:          PWedoLXSC5Lwym74g+iWl2nrZvRWOdndmThvhSz/N70=
Subject key identifier:   3B:92:67:19:FB:9F:33:25:9B:6D:93:1B:91:72:EA:D5:52:F6:A4:35
Certificate issuer:       /CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
Certificate serial:       1D
Authority key identifier: B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/O5JnGfufMyWbbZMbkXLq1VL2pDU.roa
Signing time:             Sat 31 Aug 2024 01:31:38 +0000
ROA not before:           Sat 31 Aug 2024 01:31:38 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     45677
IP address blocks:        2407:8f00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
        Validity
            Not Before: Aug 31 01:31:38 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3B926719FB9F33259B6D931B9172EAD552F6A435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:15:d1:8c:1e:8e:80:16:a0:26:c2:d8:2d:
                    22:95:6e:f8:9f:75:65:3f:07:6d:18:4e:be:11:91:
                    e5:9f:7a:90:c6:b1:20:5b:09:f1:fc:d7:fb:26:45:
                    b5:1b:4e:97:88:2b:8b:48:89:2a:9b:fa:1d:38:00:
                    3f:c6:5e:8f:0f:f0:72:1a:ce:4c:30:33:3d:c1:2a:
                    57:3e:06:dd:89:3b:c0:78:2d:f6:82:95:58:61:d6:
                    8d:aa:ad:64:9c:ee:ab:60:5a:e9:75:73:3c:bf:fa:
                    de:19:a8:a6:29:57:24:e4:83:fa:51:de:5a:b4:80:
                    69:23:ee:53:9b:20:a9:9f:bb:a9:95:1b:43:a3:d1:
                    06:b7:f4:8d:d0:9e:ba:25:a3:be:dc:65:9e:2e:ec:
                    c4:a4:96:35:56:b6:01:da:3f:ec:79:d6:a2:e7:2c:
                    c2:10:b1:0f:8a:ec:ba:33:e5:48:bb:45:ed:eb:ae:
                    c1:a4:9a:ca:c8:0b:50:66:82:3f:32:0b:c3:bd:7c:
                    52:f7:e9:84:b9:38:f1:2e:70:bf:99:c0:d1:a5:50:
                    ac:12:90:a5:fa:76:da:0a:e5:be:1b:97:43:34:a2:
                    1a:5c:d2:d6:db:1f:6f:bf:8d:a4:28:66:b7:96:b2:
                    31:39:b8:8a:ce:bf:7f:56:ba:07:dd:27:68:92:c8:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:92:67:19:FB:9F:33:25:9B:6D:93:1B:91:72:EA:D5:52:F6:A4:35
            X509v3 Authority Key Identifier:
                keyid:B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/O5JnGfufMyWbbZMbkXLq1VL2pDU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:8f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:75:bd:54:5b:22:3e:31:9c:92:a1:73:ad:e1:a4:ca:4c:f3:
         ae:70:c5:db:f6:60:ef:3e:9c:e8:c8:f5:56:49:e9:81:ec:85:
         c0:7f:90:c8:2c:76:54:39:a3:76:0e:e8:00:44:e1:00:f6:58:
         9f:c6:ab:14:8e:25:79:4c:7a:3e:99:02:f2:4d:8e:ea:5f:28:
         e4:09:91:5f:bf:a8:b0:08:58:74:54:72:d6:d2:7d:f7:11:8a:
         76:5e:88:f6:44:86:d3:38:76:a2:49:1d:58:69:51:f8:18:14:
         7b:df:b8:9b:f0:fa:b0:b2:de:8a:95:e7:7c:ca:54:b8:3b:77:
         5c:8f:f8:1c:b3:e3:96:f3:97:9a:1d:18:7a:8f:88:40:be:2f:
         0b:9f:d4:df:99:9a:95:24:de:13:8b:42:ad:41:f8:0b:91:ec:
         91:24:4a:0d:c1:9c:d9:e5:05:43:6f:ee:fb:81:c7:fa:8e:0e:
         4e:ec:32:2a:99:0f:46:ed:f9:95:1e:5d:f4:e6:eb:d4:8b:b8:
         96:c8:07:4e:73:0f:71:ab:48:c1:d0:32:06:65:51:e6:90:bb:
         d3:02:29:e0:f0:b4:e8:8f:00:9f:a1:2e:53:fc:4c:39:f9:38:
         0e:a7:06:8a:8e:68:85:9c:fb:18:4b:94:ed:97:28:03:2a:02:
         23:a4:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:17 2025 by rpki-client