Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/7W_iiYb1rD9LUngcxSyvgka_r-s.roa
File:                     7W_iiYb1rD9LUngcxSyvgka_r-s.roa (raw, json)
Hash identifier:          Jyir6PubG+Hef5K9VW5dqGIr6sIQgjv+FCurr6puq1c=
Subject key identifier:   ED:6F:E2:89:86:F5:AC:3F:4B:52:78:1C:C5:2C:AF:82:46:BF:AF:EB
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0177
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7W_iiYb1rD9LUngcxSyvgka_r-s.roa
Signing time:             Sat 30 Nov 2024 01:28:38 +0000
ROA not before:           Sat 30 Nov 2024 01:28:38 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2527
IP address blocks:        211.2.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Nov 30 01:28:38 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=ED6FE28986F5AC3F4B52781CC52CAF8246BFAFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:8e:7a:1c:83:e9:d9:6d:84:66:71:4c:12:
                    8b:bb:08:3c:b2:17:25:f0:b6:1e:95:89:97:3c:77:
                    1e:86:ed:99:1b:34:53:e1:46:68:a5:b3:27:a5:30:
                    9b:36:0a:b9:3b:62:25:f3:13:d5:42:1c:55:74:98:
                    21:33:5d:ec:43:4a:dc:04:2c:bc:25:ee:57:ca:33:
                    ed:e4:4d:29:17:19:34:2e:94:e0:88:1f:d0:2f:1d:
                    e4:8f:de:51:64:1a:42:54:df:8e:1d:b1:68:0b:4d:
                    7f:bb:f9:30:86:8e:08:7b:08:7c:36:7c:d4:6a:25:
                    a6:27:f6:cd:49:3f:c0:96:26:2a:6a:6b:de:25:9b:
                    36:56:46:63:68:ab:05:1d:71:5d:b5:05:96:ec:e9:
                    59:57:d2:7c:88:20:1a:f2:59:49:35:c5:b8:01:4b:
                    c5:13:59:38:03:50:f3:09:75:7f:cf:96:b1:2f:12:
                    7b:77:ba:70:46:ed:71:dc:c6:df:aa:42:e2:32:36:
                    b6:34:54:e2:5c:72:92:96:12:4b:90:73:2e:6e:4e:
                    55:a5:aa:98:19:c1:63:15:a0:6a:ef:c5:d8:21:f7:
                    c1:bf:ca:50:55:7d:82:2f:a5:a0:36:39:93:8e:27:
                    06:1b:88:d5:bb:fe:10:cb:6b:b6:90:87:03:37:be:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6F:E2:89:86:F5:AC:3F:4B:52:78:1C:C5:2C:AF:82:46:BF:AF:EB
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7W_iiYb1rD9LUngcxSyvgka_r-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.2.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:84:ec:c6:59:61:7a:57:5b:4f:81:13:d1:b6:e5:ed:4e:b4:
         67:0a:fe:f0:67:33:01:9e:b5:0a:d3:2f:2d:cc:9d:c5:e5:a6:
         d6:79:69:3f:2b:10:dc:b5:78:70:b2:15:40:d3:bc:e0:df:8a:
         5f:c1:ca:a4:e1:47:79:45:ac:e4:c6:f1:6d:05:04:18:06:fd:
         90:dc:b9:ce:01:4b:07:a4:6d:fa:b1:3d:02:ed:a1:dd:51:ed:
         19:e7:56:97:03:2c:3e:0a:33:71:a1:53:f4:a9:b6:ab:e8:5a:
         2e:2c:c6:0d:b1:95:fa:b1:79:66:5e:49:78:b2:50:27:87:88:
         d2:fa:53:1e:78:de:4f:0d:89:a9:3c:3f:5e:d2:1a:63:36:16:
         f4:c6:25:bb:23:0f:64:f8:db:e8:0d:d5:71:76:26:6c:fb:60:
         78:35:10:66:f6:92:5f:2e:d1:cf:3f:9a:75:f4:31:7f:99:cb:
         bf:c4:28:3b:f3:1f:96:53:4e:e8:59:f0:20:67:c4:28:8b:15:
         c8:df:ec:2f:44:a9:fc:3d:64:74:7b:13:d1:12:26:a1:1b:83:
         28:8d:68:9e:44:d8:e4:04:11:12:85:87:c4:71:6c:71:3a:08:
         75:b3:6e:69:58:7a:4c:fd:54:f1:18:fb:ae:a9:bc:7e:10:1b:
         58:42:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:58:10 2025 by rpki-client