Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/5sJnZ4OOd0CkDlOCvX01l44sa1U.roa
File:                     5sJnZ4OOd0CkDlOCvX01l44sa1U.roa (raw, json)
Hash identifier:          b7AllcQeQ9hZG71XnhfL9jRCjduDCEraFbhrnI4Gzk8=
Subject key identifier:   E6:C2:67:67:83:8E:77:40:A4:0E:53:82:BD:7D:35:97:8E:2C:6B:55
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       73
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5sJnZ4OOd0CkDlOCvX01l44sa1U.roa
Signing time:             Sat 30 Nov 2024 01:31:48 +0000
ROA not before:           Sat 30 Nov 2024 01:31:48 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     17676
IP address blocks:        218.45.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov 30 01:31:48 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=E6C26767838E7740A40E5382BD7D35978E2C6B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:28:0b:cb:94:55:b3:7c:0e:c7:0d:ad:25:
                    28:20:06:a3:9c:41:77:2a:27:f6:20:98:82:fe:19:
                    9f:07:97:a7:b7:e9:b5:53:41:51:4c:f2:85:66:96:
                    d8:5b:6e:57:fe:d4:7d:f7:a0:7b:4a:a3:b2:eb:11:
                    df:f6:d6:6e:44:71:24:63:68:96:e0:a1:03:0a:14:
                    cc:d3:5b:0e:32:e1:42:61:a5:91:f7:d2:46:8d:dd:
                    99:88:6f:d1:33:45:75:95:e2:f7:53:73:63:be:c8:
                    27:b6:81:c5:69:52:d4:05:e2:c2:69:15:4e:85:fe:
                    ef:a3:b1:77:aa:12:23:81:33:f9:94:7f:bd:e4:f6:
                    08:68:ce:08:d5:67:02:2f:6a:25:f3:f8:25:51:65:
                    48:c3:4d:94:0b:39:b8:3f:1b:fb:f5:0e:61:15:e0:
                    93:b5:f4:a7:f2:c3:56:dd:14:a2:fd:7d:7c:d3:24:
                    e4:e3:57:ba:c1:2f:c2:7b:ea:5c:37:5d:f6:70:d3:
                    c3:78:56:7f:02:35:74:6a:72:9a:b9:96:9b:45:c2:
                    8a:f0:95:73:3c:cd:a4:c9:55:22:dc:ca:71:55:62:
                    81:1a:de:49:23:94:08:f8:59:8d:8f:ee:57:30:16:
                    30:ba:ef:cf:6e:8c:21:bc:69:ee:19:3e:c8:b5:45:
                    c6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C2:67:67:83:8E:77:40:A4:0E:53:82:BD:7D:35:97:8E:2C:6B:55
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5sJnZ4OOd0CkDlOCvX01l44sa1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:0c:cf:f3:41:7d:1c:e2:a8:64:be:28:da:17:b8:c4:e1:
         b3:65:78:70:91:3e:0e:79:b2:ee:5c:46:ec:6d:f6:3d:5f:74:
         e8:35:56:c5:c8:9e:81:cd:18:00:b5:e3:43:ef:ea:28:c4:42:
         d5:1b:fb:92:85:50:d8:3d:62:d3:14:48:09:27:fe:03:ae:da:
         34:e0:53:6a:ef:86:ef:c5:49:aa:ce:41:c7:20:db:86:af:79:
         95:39:4e:67:be:57:10:76:4c:05:67:a2:cf:1d:02:4e:da:37:
         a8:81:e5:c5:5f:ae:99:53:29:46:a8:6f:93:b8:69:6f:cb:0e:
         d7:5f:15:43:7c:6f:56:0a:90:4d:a8:f9:89:93:09:9c:2e:d7:
         57:9a:cc:df:10:bd:5d:00:e4:fa:05:88:07:87:fb:4e:95:99:
         7b:f7:9c:05:4f:d5:82:55:6e:85:b9:5d:f4:b0:1b:7e:fb:66:
         58:5f:b2:78:c9:cb:f4:64:9a:7e:47:47:71:a8:75:44:eb:78:
         fb:cd:69:47:f4:04:39:a4:59:86:d3:81:18:f8:52:fe:a3:78:
         84:39:1a:bc:8d:48:80:57:ef:20:f6:aa:91:4c:13:1d:15:48:
         6c:31:95:d6:4e:1a:58:4d:96:e5:11:8d:5a:dd:fd:ee:fa:2f:
         7b:05:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:51 2025 by rpki-client