Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/rsX288JjulwYIGQX2fEr2R-Rans.roa
File:                     rsX288JjulwYIGQX2fEr2R-Rans.roa (raw, json)
Hash identifier:          liAUnZMhDG2vfgre5swDGc0K4gzxIDvQvVJF10S6RaI=
Subject key identifier:   AE:C5:F6:F3:C2:63:BA:5C:18:20:64:17:D9:F1:2B:D9:1F:91:6A:7B
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       33
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/rsX288JjulwYIGQX2fEr2R-Rans.roa
Signing time:             Sun 29 Dec 2024 09:50:16 +0000
ROA not before:           Sun 29 Dec 2024 09:50:16 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     31898
IP address blocks:        2401:d20:1d00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Dec 29 09:50:16 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=AEC5F6F3C263BA5C18206417D9F12BD91F916A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:5e:3b:73:23:44:25:93:a0:30:c4:69:40:
                    17:22:cc:ed:74:39:ec:c0:2b:9c:65:60:44:b9:e5:
                    13:6f:34:1b:09:0c:56:41:ac:d6:9e:cd:91:57:37:
                    be:71:16:6b:f3:3d:7d:d4:12:e5:41:57:1c:ff:d7:
                    79:80:72:c2:04:50:4d:e0:46:f6:a9:45:34:6a:97:
                    66:30:ad:b8:1c:c1:aa:c4:64:3f:20:51:b9:fd:82:
                    75:c6:4c:cd:ba:c3:80:23:3e:27:83:45:e2:b1:93:
                    6b:da:d8:1b:8c:68:8d:32:c9:52:c1:f4:09:4d:51:
                    30:a6:e1:68:44:09:fe:a4:73:4e:f1:0b:9c:89:38:
                    08:b5:94:e1:79:dc:41:25:33:37:51:bc:6b:75:d7:
                    53:a9:1f:cf:f0:73:54:70:ff:36:45:0f:03:50:25:
                    bc:85:42:5e:fe:44:93:a8:94:58:16:9f:05:04:b5:
                    2c:68:f6:85:99:40:15:57:8c:49:89:b5:b0:4f:d9:
                    c4:cb:c0:78:0b:c1:36:98:fc:34:d6:9d:5a:6f:13:
                    3f:17:b6:6a:e6:82:48:22:6e:7d:31:86:62:d0:a8:
                    4b:35:c2:df:d3:49:37:aa:10:e4:21:ed:fc:e1:9d:
                    d3:96:23:a4:fe:68:41:29:a9:38:6f:8b:5c:78:6b:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C5:F6:F3:C2:63:BA:5C:18:20:64:17:D9:F1:2B:D9:1F:91:6A:7B
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/rsX288JjulwYIGQX2fEr2R-Rans.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:79:18:80:26:b6:84:63:41:b5:85:98:55:59:07:76:fa:09:
         9f:05:e5:ac:20:c4:4a:59:ff:96:bd:23:fa:3a:74:fe:f3:36:
         80:5d:06:9d:b6:46:cd:e1:17:72:fb:67:e1:54:1a:c0:54:c3:
         50:7c:3a:4d:2d:a5:75:d3:1b:e9:c7:3a:11:c5:c7:f9:9a:6b:
         9d:ff:99:64:56:25:4d:07:e0:71:15:be:a4:c2:c6:d1:f9:12:
         4c:09:81:6b:6b:b0:9f:0b:60:1f:4d:1e:4a:28:46:53:0f:f3:
         04:e4:a7:24:b6:96:62:ef:3d:8d:a4:eb:40:74:cd:b7:e9:c8:
         83:75:68:50:1e:62:40:4c:90:9d:fe:12:19:77:f2:ac:3f:04:
         79:84:b0:7a:84:06:cd:15:88:a3:c5:57:e4:f1:86:ff:ef:82:
         a9:62:a3:13:2f:9d:9c:a2:0c:2c:6b:1d:e3:dc:04:4e:89:0f:
         8c:a9:77:b9:81:bd:da:d2:40:0d:bc:1c:7c:2a:01:14:f3:20:
         b4:28:f8:7e:ad:d4:0f:90:7f:6a:c6:32:e8:bf:ae:5f:0a:78:
         f7:3d:7d:db:ec:3b:6a:ae:f2:43:c1:f7:1b:63:f6:10:e7:45:
         da:62:7c:8f:c1:2a:c6:e0:07:20:e5:76:fa:5f:73:97:5a:f2:
         a4:2c:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:14 2025 by rpki-client