Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/aeQi-Mvy8eWy3d4fFvDtN3Vp0mU.roa
File:                     aeQi-Mvy8eWy3d4fFvDtN3Vp0mU.roa (raw, json)
Hash identifier:          NM5z3h7MUZ3Am9mt7izlA26rYmbTrIjAV7/9//RHRAM=
Subject key identifier:   69:E4:22:F8:CB:F2:F1:E5:B2:DD:DE:1F:16:F0:ED:37:75:69:D2:65
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       4D
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/aeQi-Mvy8eWy3d4fFvDtN3Vp0mU.roa
Signing time:             Thu 31 Oct 2024 01:29:59 +0000
ROA not before:           Thu 31 Oct 2024 01:29:59 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     131925
IP address blocks:        160.237.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Oct 31 01:29:59 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=69E422F8CBF2F1E5B2DDDE1F16F0ED377569D265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:4a:d3:56:07:75:87:7a:32:67:d6:18:8b:
                    f1:36:f8:2d:83:26:14:0f:7d:3f:d8:59:95:cf:18:
                    a7:26:06:48:76:3a:c8:0f:16:1c:3b:6f:d8:f4:b8:
                    f9:ea:d5:ad:0b:47:cf:bd:f4:92:27:bd:1b:e4:7c:
                    09:d4:7a:db:93:dc:ff:63:cf:ff:85:51:dc:67:9b:
                    27:20:0b:24:4a:47:0f:5b:68:dd:8c:e2:6b:a4:44:
                    49:93:9f:36:70:7c:fb:40:80:5e:36:cd:e7:26:5e:
                    38:80:e1:5f:81:1f:28:34:83:e1:fb:72:89:99:18:
                    34:6c:08:22:68:36:c2:89:21:ce:9c:a6:21:9a:05:
                    3b:6b:0a:92:f8:c2:99:66:54:e6:5c:39:42:86:02:
                    97:7e:16:45:b1:a7:59:2c:90:36:88:2b:90:f5:e3:
                    9c:39:da:ff:03:fa:5b:b5:55:b9:55:5b:21:4e:e6:
                    d9:48:d6:4c:49:50:77:58:80:bf:ea:c2:eb:26:0f:
                    e3:56:ee:b5:81:5c:4c:d7:14:76:db:3e:6e:02:bf:
                    bc:63:37:21:9f:b8:63:2f:af:05:1d:37:10:df:b2:
                    15:b0:c3:be:ce:fa:9b:8d:62:08:a0:4e:c4:ff:0b:
                    01:11:30:f6:c3:80:7e:81:7d:79:23:84:66:2e:98:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:22:F8:CB:F2:F1:E5:B2:DD:DE:1F:16:F0:ED:37:75:69:D2:65
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/aeQi-Mvy8eWy3d4fFvDtN3Vp0mU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:d1:2f:a8:6e:3f:2f:bf:0c:fe:14:5d:11:92:c5:bb:4e:1e:
         61:15:86:7b:08:ee:54:ff:87:31:47:9b:a0:bc:21:0d:96:25:
         d6:d3:f5:cb:8d:c1:b3:13:c0:63:bb:21:42:56:9b:89:23:30:
         b7:10:10:5d:25:3a:fe:0a:66:ba:30:d7:ed:01:8c:56:79:ac:
         46:0a:53:d3:44:03:e2:37:a5:5d:98:82:c3:97:8a:7a:bf:88:
         78:3c:ee:a5:6e:8d:27:66:71:88:d6:3f:6e:e3:b9:9b:5b:ce:
         4c:06:f4:ba:76:b3:6d:8f:81:c7:ef:87:3b:3d:90:40:af:51:
         15:ca:c0:b5:ee:90:b0:c5:79:28:36:f6:f6:76:c9:e2:f3:3d:
         9d:cb:ca:fb:6f:71:31:1e:12:8a:f3:3b:4f:45:0f:a4:9b:b9:
         a3:12:82:d6:9b:15:b2:f3:bf:8d:3a:65:82:3b:bb:99:6b:74:
         6b:08:7b:a8:33:77:bf:99:ec:37:cc:cd:5e:4a:e8:d7:f6:e8:
         61:f7:7c:2a:11:aa:bd:26:3d:7d:1c:90:60:c7:83:5a:41:f4:
         fd:98:a4:c1:f0:05:74:ff:f4:64:b6:7d:96:41:ee:b8:08:a4:
         5a:bd:2d:94:3c:26:c8:71:09:51:ee:b7:2f:80:9d:c4:a1:85:
         88:3b:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:17:33 2025 by rpki-client