Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/rGTb99wymarRPP16m1M9S3kvtpo.roa
File:                     rGTb99wymarRPP16m1M9S3kvtpo.roa (raw, json)
Hash identifier:          2Ptjyy0Nx66cySKbXqtEfx9C08J0eQdMSdlhh3zkM3c=
Subject key identifier:   AC:64:DB:F7:DC:32:99:AA:D1:3C:FD:7A:9B:53:3D:4B:79:2F:B6:9A
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       77
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rGTb99wymarRPP16m1M9S3kvtpo.roa
Signing time:             Sat 30 Nov 2024 01:31:50 +0000
ROA not before:           Sat 30 Nov 2024 01:31:50 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     17676
IP address blocks:        126.135.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Nov 30 01:31:50 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=AC64DBF7DC3299AAD13CFD7A9B533D4B792FB69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4d:2b:a8:a3:24:ce:38:b2:88:ec:d8:fc:c2:
                    bf:78:e7:2a:4b:c7:2b:b5:0c:71:a3:54:97:80:76:
                    e8:25:71:eb:85:81:74:1b:bf:6e:84:da:d3:14:4a:
                    3c:49:b8:dd:1f:3e:e4:a6:89:21:db:34:76:d8:fe:
                    a7:a9:3b:a1:58:1b:f1:3d:d9:91:75:e3:74:69:d7:
                    83:2f:d8:55:46:19:ca:07:11:f3:90:6e:c2:88:64:
                    df:81:e9:9e:26:21:ee:8b:ec:f5:75:b3:e2:a6:82:
                    00:79:59:df:d9:7a:3f:2c:a7:4c:3e:e3:ae:ce:20:
                    f5:13:bc:0a:3d:26:c4:15:47:06:90:6d:e8:65:59:
                    5c:89:d8:d6:b6:15:a5:f1:0a:c4:43:b4:ec:59:bf:
                    c1:22:1b:f5:23:4b:32:f8:aa:a4:21:51:0e:ea:b0:
                    b2:4a:1f:55:da:fc:4b:2d:52:9e:23:6a:14:01:b2:
                    ec:82:dc:7d:3e:25:0c:eb:4d:b7:a5:6c:8d:2d:ec:
                    af:62:78:87:9b:62:80:98:ef:b8:b7:52:19:84:12:
                    e2:d5:51:5a:9f:6f:2b:3f:cd:d3:9f:f6:15:78:23:
                    97:cd:dd:bb:3b:b7:ba:7d:0c:87:2f:ac:c5:9b:ea:
                    cf:f0:07:a4:ed:43:15:3b:1d:21:2f:aa:36:98:aa:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:64:DB:F7:DC:32:99:AA:D1:3C:FD:7A:9B:53:3D:4B:79:2F:B6:9A
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rGTb99wymarRPP16m1M9S3kvtpo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:ed:58:35:bb:f0:6c:e5:e9:80:8e:17:aa:77:c6:b4:e5:ab:
         09:10:30:b2:61:c0:c6:a8:52:c6:10:e2:9b:c2:a1:7c:0a:07:
         6c:b2:0b:41:06:6b:e1:bd:a3:cf:af:d7:5b:03:09:8e:28:09:
         70:6f:1b:ca:20:b8:6c:a6:f4:f2:31:61:95:84:75:8f:47:3c:
         a3:19:b7:f2:b0:6e:45:86:32:e1:0c:b5:be:a8:76:0e:ab:dd:
         9d:9a:17:9d:a0:12:78:e5:8c:49:57:f2:eb:c4:06:35:19:ff:
         20:3d:76:5b:2f:03:5f:ff:da:d8:f5:16:f8:cb:3f:01:1f:92:
         c5:17:77:f7:8a:6e:2c:90:27:dc:85:da:b0:c9:a7:3c:db:03:
         bf:e7:cf:31:0c:3d:75:e2:05:56:21:25:4c:61:27:3f:e4:b8:
         b5:58:83:44:ba:10:9c:25:1f:60:0b:a1:5a:85:4b:7f:e5:12:
         aa:81:1b:01:b1:27:48:a9:f4:cb:83:6d:4a:dc:fd:ab:b8:23:
         34:d2:fe:a2:c4:03:0a:46:86:78:3f:10:8f:0c:92:a2:b7:9f:
         0d:c1:c3:02:69:77:62:de:19:cc:78:6c:f3:de:79:1e:1e:3f:
         91:7c:62:df:55:64:aa:1b:1f:5f:c5:ea:0c:55:6f:1a:bd:dd:
         97:93:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:57 2025 by rpki-client