Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/45Gaa8hb82p0TjLQtxnWuUhrDpw.roa
File:                     45Gaa8hb82p0TjLQtxnWuUhrDpw.roa (raw, json)
Hash identifier:          snkoUIECbzLinGBzXhU0j7ot/xJq4ryTkRzK4vAh3rY=
Subject key identifier:   E3:91:9A:6B:C8:5B:F3:6A:74:4E:32:D0:B7:19:D6:B9:48:6B:0E:9C
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       32
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/45Gaa8hb82p0TjLQtxnWuUhrDpw.roa
Signing time:             Sun 29 Dec 2024 09:50:16 +0000
ROA not before:           Sun 29 Dec 2024 09:50:16 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     31898
IP address blocks:        2401:d20:1c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Dec 29 09:50:16 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=E3919A6BC85BF36A744E32D0B719D6B9486B0E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:71:03:97:c7:12:96:c3:bc:7c:62:c6:2e:
                    25:72:f3:ff:42:08:73:3c:d1:9e:cb:f7:44:b0:5b:
                    94:bf:a7:2d:6f:29:31:94:77:48:08:d8:4d:13:02:
                    34:18:4a:a6:aa:a3:14:6a:9f:ea:e2:e3:92:13:f3:
                    91:f0:91:28:85:eb:3c:11:f9:94:1f:1a:60:b9:c2:
                    5c:39:0c:79:8b:df:2a:8f:1f:6d:29:70:d5:c7:e7:
                    23:77:52:71:22:83:58:d2:2a:9c:6d:a8:66:cf:0c:
                    c6:3a:a3:cd:f2:38:5b:ff:57:db:53:8e:28:ae:71:
                    54:06:f5:e0:28:b7:f0:12:e5:67:ea:fd:49:e8:76:
                    80:ac:96:1e:0e:fe:f3:66:fa:9a:62:6c:5c:c6:c3:
                    2c:26:53:69:89:b6:7a:d1:f9:f0:14:9b:3e:5f:cc:
                    23:a0:5c:47:5d:28:89:38:ff:33:5e:91:c0:81:6e:
                    8c:98:dc:ce:88:39:13:81:67:36:b8:b3:01:fd:bc:
                    d5:44:3b:d5:9f:35:13:10:36:e9:cf:e4:33:1c:18:
                    39:2f:75:87:fc:63:e7:27:04:fd:34:ab:3c:ff:88:
                    f0:a6:53:93:ca:ea:db:c2:65:c0:ba:58:7c:f3:d9:
                    fa:5f:d9:95:a5:d0:c5:19:09:9d:e0:2d:22:ab:bb:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:91:9A:6B:C8:5B:F3:6A:74:4E:32:D0:B7:19:D6:B9:48:6B:0E:9C
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/45Gaa8hb82p0TjLQtxnWuUhrDpw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:83:af:d2:92:9c:38:20:67:b4:b8:d6:37:d9:fe:8a:6a:da:
         29:42:b2:55:8e:81:46:57:7c:8f:fd:a1:c0:b1:6e:08:ef:ab:
         43:a9:f9:00:56:47:22:f2:c5:45:dc:4d:12:a0:bf:16:58:f2:
         37:a1:9f:57:ae:0d:92:63:b4:d7:ae:47:dd:17:d6:2b:be:cb:
         bf:1a:50:cc:10:91:43:c7:a0:e9:28:95:0a:61:81:43:ac:99:
         f2:53:de:df:1e:91:ac:49:a4:08:ea:c4:db:87:64:eb:79:1c:
         b1:5e:d5:58:3d:7c:17:bf:1a:65:55:7d:5a:c2:9b:48:b9:f9:
         65:95:bf:ae:47:5e:72:c8:fd:75:a8:90:fa:ae:82:0c:02:65:
         3d:a4:e3:45:92:1b:ec:93:82:82:8e:03:fe:78:91:24:24:89:
         ac:c2:33:ff:41:cd:41:ad:d8:00:be:39:b5:8d:1d:5a:97:d7:
         53:52:4a:e0:a0:94:54:4e:67:79:85:08:71:ac:3f:d1:a1:0b:
         ed:ed:fc:49:26:d9:ed:ef:57:6a:aa:9a:0d:6d:3a:bb:1d:12:
         ca:b6:35:f1:2d:8d:58:d0:de:66:e9:30:c3:3c:62:a5:15:7f:
         46:ca:38:a1:ea:44:d0:ab:9f:f8:07:86:17:dd:7d:9b:bc:25:
         aa:93:f9:d7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw
QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI0MTIyOTA5
NTAxNloXDTI1MTIxNTAxMzAwM1owMzExMC8GA1UEAxMoRTM5MTlBNkJDODVCRjM2
QTc0NEUzMkQwQjcxOUQ2Qjk0ODZCMEU5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALzFcQOXxxKWw7x8YsYuJXLz/0IIczzRnsv3RLBblL+nLW8pMZR3
SAjYTRMCNBhKpqqjFGqf6uLjkhPzkfCRKIXrPBH5lB8aYLnCXDkMeYvfKo8fbSlw
1cfnI3dScSKDWNIqnG2oZs8MxjqjzfI4W/9X21OOKK5xVAb14Ci38BLlZ+r9Seh2
gKyWHg7+82b6mmJsXMbDLCZTaYm2etH58BSbPl/MI6BcR10oiTj/M16RwIFujJjc
zog5E4FnNrizAf281UQ71Z81ExA26c/kMxwYOS91h/xj5ycE/TSrPP+I8KZTk8rq
28JlwLpYfPPZ+l/ZlaXQxRkJneAtIqu7dgMCAwEAAaOCAiowggImMB0GA1UdDgQW
BBTjkZpryFvzanROMtC3Gda5SGsOnDAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq
br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x
X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDIzLzQ1R2FhOGhiODJwMFRqTFF0eG5XdVVockRwdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkAQ0gHDANBgkqhkiG9w0BAQsFAAOCAQEAioOv0pKcOCBntLjWN9n+
imraKUKyVY6BRld8j/2hwLFuCO+rQ6n5AFZHIvLFRdxNEqC/FljyN6GfV64NkmO0
165H3RfWK77LvxpQzBCRQ8eg6SiVCmGBQ6yZ8lPe3x6RrEmkCOrE24dk63kcsV7V
WD18F78aZVV9WsKbSLn5ZZW/rkdecsj9daiQ+q6CDAJlPaTjRZIb7JOCgo4D/niR
JCSJrMIz/0HNQa3YAL45tY0dWpfXU1JK4KCUVE5neYUIcaw/0aEL7e38SSbZ7e9X
aqqaDW06ux0SyrY18S2NWNDeZukwwzxipRV/Rso4oepE0Kuf+AeGF919m7wlqpP5
1w==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:13:08 2025 by rpki-client