Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/OQCP0SjYFRROybrrwux5ao2zxYw.roa
File:                     OQCP0SjYFRROybrrwux5ao2zxYw.roa (raw, json)
Hash identifier:          k8CelrzhMf22imsE7+vCa+gi8olAUBzglGKHTAgB6Dk=
Subject key identifier:   39:00:8F:D1:28:D8:15:14:4E:C9:BA:EB:C2:EC:79:6A:8D:B3:C5:8C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0170
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OQCP0SjYFRROybrrwux5ao2zxYw.roa
Signing time:             Fri 07 Jul 2023 04:10:38 +0000
ROA not before:           Fri 07 Jul 2023 04:10:38 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.30.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:38 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=39008FD128D815144EC9BAEBC2EC796A8DB3C58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:83:87:5e:c2:cf:eb:c5:32:bc:35:b4:b7:
                    1b:9b:f9:1f:54:71:fd:5c:e8:b8:84:8c:3b:7c:2b:
                    8c:9b:38:6b:de:2a:db:fa:dc:af:b2:5e:0b:7c:c0:
                    1a:e3:c8:8a:b9:6f:b8:57:19:04:57:61:12:e0:87:
                    b1:3c:70:fa:51:fe:4d:c3:31:bc:42:6f:a8:2a:0f:
                    8d:b1:3d:56:b2:13:80:d4:ec:72:c6:2d:64:44:c4:
                    d2:f4:41:7d:36:e6:9c:6a:d5:e1:95:e4:f8:35:56:
                    a1:12:80:7a:cc:59:e5:f8:b5:20:40:46:1c:7a:46:
                    09:2b:bd:9e:6e:30:61:c2:5c:ef:82:6f:75:cb:4c:
                    d6:0e:eb:5e:2e:ed:04:0d:01:96:f7:2f:fd:6c:26:
                    b7:44:1c:84:96:4b:07:91:4b:e0:a4:9b:41:f7:e9:
                    1b:c9:5c:90:72:be:10:d2:1e:92:4e:25:d1:6e:fb:
                    c3:cd:50:6a:4d:35:d4:f4:7a:c4:ee:11:d3:fe:76:
                    f8:d1:16:ce:dd:c5:fb:91:d7:15:af:c4:f0:d8:bd:
                    32:89:c6:d6:ba:d1:07:80:07:22:59:22:28:21:c8:
                    4b:ec:ac:1f:84:52:1d:90:39:a0:27:24:60:ee:0e:
                    31:cb:a5:c6:d3:9b:a2:55:a5:15:1d:e8:b1:8b:f8:
                    c0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:00:8F:D1:28:D8:15:14:4E:C9:BA:EB:C2:EC:79:6A:8D:B3:C5:8C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/OQCP0SjYFRROybrrwux5ao2zxYw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e7:e7:e6:64:6c:ed:b1:f8:2b:02:f6:84:3e:22:ad:0e:c8:
         9b:b0:2b:24:ab:eb:f6:8a:0f:ab:0a:a6:bf:72:9b:8c:4b:e5:
         f6:f5:6d:c1:f2:bc:31:80:f7:fc:60:39:29:92:a8:77:66:72:
         bd:f5:38:78:ea:80:d2:14:fc:8d:13:be:59:58:2c:e7:e0:36:
         da:bf:89:a4:21:09:06:f0:d1:1c:e9:55:df:0b:45:5b:d8:62:
         fd:fb:5b:e2:36:7b:d4:cb:13:5d:52:cf:41:d3:e7:32:22:4e:
         33:d7:f5:e8:60:84:e7:d5:77:92:0f:32:a1:75:93:ed:25:ef:
         cd:ea:de:45:53:68:56:40:a4:41:94:29:f3:02:d3:47:9b:47:
         f8:00:53:90:eb:3b:06:5f:0a:cc:90:f1:2a:64:8e:a6:5f:91:
         eb:ad:a6:8e:e9:0a:5e:7f:ba:ca:05:05:5b:7f:d0:65:50:43:
         fa:e2:1e:c9:a5:f4:d3:28:96:ed:3a:45:92:6f:19:68:dd:4f:
         11:2b:1f:b5:f9:1e:2d:3d:6b:45:8d:cf:f8:47:b0:bc:57:34:
         c7:df:e2:e5:5b:b8:71:c7:77:2e:f8:83:17:6b:d2:3b:72:be:
         a2:55:29:0e:db:fe:8f:30:74:57:02:28:43:70:08:12:a4:14:
         bf:b5:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:02 2025 by rpki-client