Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30435/xnK6A6Q8wefHoVrmJCPx2kJH4RY.roa
File:                     xnK6A6Q8wefHoVrmJCPx2kJH4RY.roa (raw, json)
Hash identifier:          Ts8Oatc5t2fowVZsA+HlOC4ecm45x6T6dDrvS+pWSgQ=
Subject key identifier:   C6:72:BA:03:A4:3C:C1:E7:C7:A1:5A:E6:24:23:F1:DA:42:47:E1:16
Certificate issuer:       /CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
Certificate serial:       02
Authority key identifier: C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/xnK6A6Q8wefHoVrmJCPx2kJH4RY.roa
Signing time:             Sat 25 May 2024 17:14:53 +0000
ROA not before:           Sat 25 May 2024 17:14:53 +0000
ROA not after:            Sun 25 May 2025 16:55:28 +0000
asID:                     55911
IP address blocks:        2401:98a0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
        Validity
            Not Before: May 25 17:14:53 2024 GMT
            Not After : May 25 16:55:28 2025 GMT
        Subject: CN=C672BA03A43CC1E7C7A15AE62423F1DA4247E116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:68:03:c3:d0:7e:94:34:10:5a:b4:e1:6b:
                    63:e8:fc:89:06:49:23:2a:43:4b:f5:6a:56:32:54:
                    3a:70:9f:66:ea:4d:5e:23:54:96:7d:59:e9:45:8d:
                    21:00:14:d4:07:3c:60:c7:66:e5:43:d5:fa:19:47:
                    84:37:a8:5d:3e:34:61:87:1b:88:aa:30:04:10:20:
                    bd:e1:dd:93:6e:72:5f:0d:07:71:69:1d:dd:c1:d8:
                    b3:b3:b7:4a:ad:23:1f:a2:58:71:d7:b2:1d:fe:da:
                    91:0b:d0:73:e4:87:9d:3d:7b:4d:57:62:ec:60:dc:
                    a4:56:33:73:d8:e9:8e:8a:6e:4a:d1:9a:c3:bc:67:
                    6d:82:ad:ab:e8:4d:c8:74:e3:eb:ad:fa:43:d9:77:
                    88:af:7c:5e:7b:9e:9e:cb:3e:d2:4b:fd:9e:d1:1b:
                    d0:02:31:78:c0:27:ef:98:a5:cd:dc:dc:2e:f4:9e:
                    13:6b:c5:99:2b:95:93:28:c8:d9:a4:b8:61:33:85:
                    78:0d:6a:91:0b:62:1c:5b:ce:8a:b4:c9:9b:ea:88:
                    2f:65:bb:e0:38:e2:1c:ab:7a:43:db:0a:21:a0:47:
                    55:b4:9e:2e:45:fa:0f:df:0e:eb:88:ef:f4:fa:c2:
                    8a:82:31:e0:5c:af:de:94:f0:c2:48:7a:60:0c:01:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:BA:03:A4:3C:C1:E7:C7:A1:5A:E6:24:23:F1:DA:42:47:E1:16
            X509v3 Authority Key Identifier:
                keyid:C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/xnK6A6Q8wefHoVrmJCPx2kJH4RY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:98a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:d2:b1:fe:5d:00:5a:bb:85:d2:17:2c:44:7e:f6:57:37:
         dd:a6:6a:11:50:88:cc:c9:a9:b0:6e:a5:b8:35:09:07:5a:9e:
         e5:f9:8c:0b:3c:67:f3:15:55:54:85:58:95:71:7d:cc:19:7e:
         ad:cb:41:51:c8:90:a2:a0:76:20:27:24:16:7a:9c:2a:64:2b:
         cf:76:c7:d9:35:f7:ae:2e:00:29:fb:9e:42:48:81:31:4e:a7:
         63:31:5a:78:77:0e:5d:b5:be:ac:85:fe:d2:88:92:07:fb:26:
         db:e2:f1:69:c8:52:67:16:aa:4a:39:af:f6:24:a0:e4:2f:4e:
         ee:a2:9c:46:83:6e:bd:5a:da:61:bd:0e:d2:da:34:34:59:38:
         af:7b:73:c6:4d:a5:54:3c:72:d0:b7:e5:88:7c:d3:9f:c2:0d:
         ac:50:b8:cf:08:78:2c:ab:ea:c9:8c:74:5f:37:ce:04:b4:bc:
         00:98:ec:85:ea:d4:37:94:16:92:67:c4:82:a4:b2:94:e9:26:
         f6:52:58:d4:44:51:0b:c2:e7:2f:62:bc:ee:dd:82:64:ed:46:
         e6:3b:9a:27:03:0a:c5:8c:41:43:c2:f2:57:c0:9a:b8:2a:3d:
         6b:28:1c:07:00:85:dc:2a:58:15:1a:fd:72:7f:1a:3c:cf:9b:
         b4:9a:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:00:44 2025 by rpki-client