Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/TNhlvwcYA2i_-ynU6438hr1Eq98.roa
File:                     TNhlvwcYA2i_-ynU6438hr1Eq98.roa (raw, json)
Hash identifier:          BSB/f6pvDTsitFrwPPffbStip4IGPFFt8z6j6hJvTXU=
Subject key identifier:   4C:D8:65:BF:07:18:03:68:BF:FB:29:D4:EB:8D:FC:86:BD:44:AB:DF
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       2E
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/TNhlvwcYA2i_-ynU6438hr1Eq98.roa
Signing time:             Sat 14 Dec 2024 07:17:46 +0000
ROA not before:           Sat 14 Dec 2024 07:17:46 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     150362
IP address blocks:        2401:d20:b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Dec 14 07:17:46 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=4CD865BF07180368BFFB29D4EB8DFC86BD44ABDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f3:09:82:82:d5:75:9a:30:4f:52:a8:2c:ae:
                    d1:ad:58:23:9a:68:9c:23:00:40:c3:1a:b9:0a:97:
                    a1:45:22:c4:e0:d5:34:43:74:a6:0a:ed:6e:8d:2a:
                    ff:99:54:d8:a0:ae:98:ca:90:37:e8:70:ac:42:0e:
                    ba:ff:c4:77:a3:94:96:b8:6d:ed:0e:e8:f0:fd:b1:
                    1b:bc:da:82:0a:e5:fe:48:58:10:58:34:70:83:de:
                    b8:11:ac:d9:76:7a:c9:19:f9:85:64:8e:10:86:79:
                    98:ae:c1:1f:00:9c:a7:58:04:ee:b7:03:92:93:68:
                    53:26:8e:46:55:a8:ea:36:f9:e3:99:1c:c2:2b:87:
                    4e:7d:31:07:e6:29:af:46:fd:f3:c1:e6:6f:ae:6a:
                    b4:65:86:b3:2a:7c:5f:6b:f6:6e:e7:b9:7a:84:3d:
                    d3:49:8b:5b:00:ec:74:5a:ca:bb:cf:d0:41:6f:e2:
                    db:95:fe:06:60:2a:e5:0e:4f:ce:40:24:85:a6:39:
                    a8:09:22:61:b5:bb:b4:9b:bc:55:b9:68:4d:10:da:
                    0c:ce:22:14:53:9e:58:3e:3a:fb:d8:13:28:14:60:
                    6a:cb:ce:49:c9:c7:ea:48:bf:ce:bd:29:e3:59:d5:
                    e6:6e:42:20:66:80:3d:93:62:ac:63:4e:2c:13:05:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D8:65:BF:07:18:03:68:BF:FB:29:D4:EB:8D:FC:86:BD:44:AB:DF
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/TNhlvwcYA2i_-ynU6438hr1Eq98.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:83:af:d2:e9:80:fa:46:a4:27:b9:4d:ae:6d:3c:98:48:91:
         93:28:ff:a0:89:a5:96:51:bb:9b:de:c1:47:2a:e8:42:01:59:
         3c:fc:96:18:2e:9e:4f:cc:d1:23:c6:85:a6:4b:4f:fb:a0:a3:
         a8:de:63:2c:f5:fe:52:40:ea:32:97:7c:d1:4c:99:da:7b:7a:
         c9:d3:90:c1:12:46:e2:d1:95:69:0a:ce:0c:63:aa:62:35:bb:
         2c:0b:ef:5e:f0:75:ba:2e:27:3e:52:db:2e:ba:3f:33:48:a8:
         ff:47:2c:8a:c4:3f:b1:d0:1e:0b:ab:7c:97:dd:23:c5:98:1c:
         e0:f4:cc:3d:10:06:7d:c0:1b:23:aa:9c:95:c1:08:85:25:45:
         3b:9a:2e:73:54:93:1d:dc:00:c3:b1:63:c5:5a:4e:b7:33:47:
         01:02:ca:0d:c0:46:03:fe:8a:75:67:32:50:14:b9:0f:b9:7f:
         70:7b:77:f5:78:56:db:db:6e:f2:fa:f5:56:57:5c:b4:23:ae:
         f8:9d:7a:83:96:cb:b6:08:dc:7a:6b:cb:4e:a4:91:c5:33:67:
         e9:90:28:d6:75:c2:3f:8b:b9:2a:c2:66:ce:19:7b:66:38:57:
         69:c9:3b:47:e9:bc:e0:de:ca:81:0f:4c:61:a0:cc:30:85:2b:
         f8:8a:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:06 2025 by rpki-client