Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_Ubpznzzl6lIdnxh4g8P-PBqp_4.roa
File:                     _Ubpznzzl6lIdnxh4g8P-PBqp_4.roa (raw, json)
Hash identifier:          JMob89afx8COGzXzVfVJ+K0RWt62W0naE2+BDo51hVM=
Subject key identifier:   FD:46:E9:CE:7C:F3:97:A9:48:76:7C:61:E2:0F:0F:F8:F0:6A:A7:FE
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       25
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_Ubpznzzl6lIdnxh4g8P-PBqp_4.roa
Signing time:             Fri 26 Apr 2024 08:17:50 +0000
ROA not before:           Fri 26 Apr 2024 08:17:50 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:7000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:50 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=FD46E9CE7CF397A948767C61E20F0FF8F06AA7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:da:c3:a9:02:17:09:77:9b:0f:3c:d6:00:
                    ae:38:28:20:b0:84:78:5e:09:51:15:25:7f:ff:86:
                    29:f9:c2:db:60:ab:33:81:55:8c:f9:a8:fd:9d:ac:
                    22:3c:fa:6a:9b:28:7a:5d:7b:42:f0:56:80:7f:fd:
                    c2:62:1f:e4:13:73:2f:69:90:69:61:25:0d:eb:0e:
                    4f:c4:f5:d3:f7:6a:ab:01:f6:0a:aa:bf:b5:24:e6:
                    b5:30:36:84:77:71:5a:b7:ee:da:bb:31:4a:b7:a8:
                    08:bc:be:e7:4e:fa:f0:87:8b:08:0e:b7:81:77:19:
                    18:22:99:aa:79:37:f5:a2:11:d0:b7:7e:fb:7a:7b:
                    2d:ca:ae:74:b7:cd:5a:b1:a4:8a:6c:b4:04:bb:d6:
                    41:2a:24:89:44:f7:5f:17:17:18:bf:1b:0f:e7:a5:
                    b1:28:32:f9:a4:ad:3e:ad:f6:f6:d2:d8:b0:f9:c3:
                    8e:ed:1a:8c:25:50:38:77:77:b7:e2:7e:78:cb:7a:
                    c6:65:85:92:e0:a7:d3:c5:1f:b5:eb:f5:b7:09:f7:
                    44:ea:c2:36:1f:51:e4:73:0f:27:01:8e:9c:5b:82:
                    34:f4:2d:17:49:c4:2f:c3:2a:48:62:61:2a:eb:ea:
                    d4:4f:59:c1:da:d0:0b:4e:20:bb:90:63:ad:8a:52:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:46:E9:CE:7C:F3:97:A9:48:76:7C:61:E2:0F:0F:F8:F0:6A:A7:FE
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_Ubpznzzl6lIdnxh4g8P-PBqp_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:dc:7f:b1:18:87:27:09:1e:1c:ed:ee:7a:c5:d0:77:fb:8c:
         22:76:ae:94:11:4f:96:c3:45:fc:5d:d2:a0:c8:c9:12:9c:c3:
         68:56:c1:e1:72:cd:ea:af:c8:ff:aa:8a:f9:38:23:68:21:3d:
         b0:2d:7a:60:12:94:29:82:75:c1:7e:67:ce:20:db:24:52:a2:
         65:87:5c:24:6b:c8:f6:89:1f:15:75:2d:4a:15:43:37:8f:4f:
         1f:83:da:0e:e3:a4:e5:af:e7:9a:a8:d9:3d:20:50:c9:28:85:
         8d:b1:d4:ea:a0:c0:31:81:1a:4c:7e:c4:c4:e7:1b:a0:e4:e2:
         9e:b9:52:fb:8c:76:86:94:95:dc:ae:f6:22:61:9b:aa:f8:f0:
         0d:7a:22:9f:3f:1a:04:12:d2:4b:85:80:11:83:ce:a6:ac:43:
         e9:be:c3:79:32:80:19:49:76:94:76:d6:bd:9e:fd:4f:c9:a4:
         7b:4f:33:df:df:28:a9:05:b2:3f:34:32:09:54:fe:78:b6:3f:
         8b:25:01:9e:8b:62:eb:a5:ff:4e:e4:73:4e:eb:13:f1:1f:d9:
         9e:de:eb:93:9b:94:11:7e:2d:12:b7:2d:68:85:13:81:2b:9a:
         98:45:be:24:85:15:5f:91:e3:52:a6:0f:c9:83:c9:18:d7:3c:
         eb:c7:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:02 2025 by rpki-client