Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Zc77TX4wuXw2RAWwXBtiGzsBU68.roa
File:                     Zc77TX4wuXw2RAWwXBtiGzsBU68.roa (raw, json)
Hash identifier:          mzeT1bkM7YeXosvjPl0oCr3IlwAcBi2b6+cICqz2enU=
Subject key identifier:   65:CE:FB:4D:7E:30:B9:7C:36:44:05:B0:5C:1B:62:1B:3B:01:53:AF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       02DE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Zc77TX4wuXw2RAWwXBtiGzsBU68.roa
Signing time:             Wed 09 Oct 2024 01:19:54 +0000
ROA not before:           Wed 09 Oct 2024 01:19:54 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        27.132.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct  9 01:19:54 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=65CEFB4D7E30B97C364405B05C1B621B3B0153AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:92:96:df:77:35:76:4d:b9:7f:59:dc:e7:
                    e9:20:a9:53:23:b1:bd:c7:dd:28:54:0e:16:0a:0a:
                    3f:60:91:d8:1c:8b:38:2f:18:7d:48:c2:2b:fe:fa:
                    28:4b:9c:38:df:cb:67:f5:64:90:83:14:cc:6f:48:
                    be:7a:b8:1e:4b:09:e5:05:ca:b6:85:8c:3f:7b:da:
                    7f:a4:2f:a3:22:56:32:03:c0:7f:bb:4e:f0:cd:cd:
                    2f:0f:4f:7e:73:35:05:c1:ad:f7:0d:fd:58:dc:c9:
                    c2:ae:88:47:a0:8f:e0:82:d8:64:ac:0d:90:30:5d:
                    02:b3:bb:90:fb:78:51:fa:6a:56:60:2b:a8:c0:af:
                    05:7b:5f:f4:4a:10:3f:38:d7:5d:d2:e5:b4:2a:15:
                    ca:27:a1:a3:ca:49:0a:92:13:27:c6:c2:6f:11:c1:
                    0a:e1:d9:b5:64:2a:2a:36:60:79:5a:86:61:d5:72:
                    a4:34:f5:a2:21:bd:7a:aa:f6:05:45:19:3f:01:79:
                    6c:c9:f6:19:c5:31:da:a6:41:da:86:e5:67:a8:47:
                    71:87:d6:2b:d2:7d:e1:a0:82:7d:40:6e:1c:bf:51:
                    b3:28:33:cb:63:55:70:c6:2d:41:34:78:80:91:81:
                    88:39:4f:56:35:c4:76:ec:e6:ff:d0:68:e3:73:0b:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CE:FB:4D:7E:30:B9:7C:36:44:05:B0:5C:1B:62:1B:3B:01:53:AF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Zc77TX4wuXw2RAWwXBtiGzsBU68.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:23:57:58:52:75:79:95:2f:fa:5c:96:ba:fb:81:c4:82:
         b7:5a:a5:56:0b:21:37:5d:1f:31:e3:b6:ad:3d:83:81:42:c9:
         a3:c6:78:7d:59:01:a4:dc:88:bd:80:ce:0d:10:f4:31:1b:dc:
         8d:c6:6e:50:44:59:78:ef:17:68:53:29:7f:ba:8c:6e:50:f5:
         1a:a3:15:64:de:d3:10:2b:e8:18:d2:46:2f:52:6b:e8:3b:b5:
         cf:c3:ae:30:87:af:3b:d2:b9:1f:2b:99:e5:35:e7:bd:92:d7:
         f8:10:f8:10:07:19:8b:14:ad:ff:80:9b:2e:54:e3:49:ff:d2:
         7d:6c:33:8d:04:35:fc:0d:42:7e:07:06:c1:35:be:de:57:c8:
         21:b3:f2:40:c2:3f:61:26:09:c3:ba:23:cf:2d:07:a9:fd:40:
         55:c3:42:a8:2d:70:f2:a9:9d:01:4d:27:3c:72:d8:4a:e3:6e:
         12:8b:bd:5c:cf:dc:b6:5a:72:da:25:b3:f3:8f:a9:2a:da:3c:
         59:33:ba:36:d5:20:e8:06:ed:24:0f:ff:e1:b0:dc:16:b4:16:
         fe:ed:5f:ba:51:96:52:19:c6:1b:dc:8b:65:3f:77:92:dc:da:
         ac:22:f2:0e:a9:ba:d9:68:e6:e1:7f:65:ff:e5:0e:06:54:e9:
         de:42:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:55 2025 by rpki-client