Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/o1OxvwQODW6bDAWozq75c6Gx4p8.roa
File:                     o1OxvwQODW6bDAWozq75c6Gx4p8.roa (raw, json)
Hash identifier:          2on6q9GXYRXdWEjwlq5pl3+ieveMWmAU4pDVXGQFOfE=
Subject key identifier:   A3:53:B1:BF:04:0E:0D:6E:9B:0C:05:A8:CE:AE:F9:73:A1:B1:E2:9F
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       50
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/o1OxvwQODW6bDAWozq75c6Gx4p8.roa
Signing time:             Thu 31 Oct 2024 01:30:01 +0000
ROA not before:           Thu 31 Oct 2024 01:30:01 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     131925
IP address blocks:        160.237.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Oct 31 01:30:01 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=A353B1BF040E0D6E9B0C05A8CEAEF973A1B1E29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:e4:5d:a8:4f:5b:a1:fb:90:fb:4e:24:cf:
                    58:d6:23:84:00:b0:6a:a0:92:77:b9:47:6c:f8:23:
                    4b:e5:b0:88:02:c8:a4:4b:fa:f8:73:79:d3:41:40:
                    09:30:d5:e9:30:3f:70:74:90:61:3f:df:0f:dd:89:
                    38:6e:ce:8b:c3:79:a8:e4:d2:6f:f3:4c:89:33:82:
                    0b:43:e3:8a:f8:f4:d4:f8:b3:97:5e:55:5a:ed:c2:
                    af:a2:15:21:1b:83:55:24:63:a8:53:64:7e:98:5a:
                    2f:b8:03:04:56:58:43:bd:7e:98:7d:5e:97:4b:9b:
                    9e:aa:e5:8b:1c:99:a4:e3:b3:96:49:dc:93:0d:42:
                    2e:14:2a:82:f5:00:06:8a:16:3c:87:d7:d7:7f:86:
                    c7:3c:2e:ac:44:cf:dc:9b:df:c0:ec:97:13:22:52:
                    64:ee:d6:d1:f7:2e:77:7f:f1:c4:d5:24:7a:db:d9:
                    2e:97:90:b2:20:ee:80:90:02:02:7e:69:8f:97:68:
                    dc:64:a8:d7:cd:96:92:ec:52:c4:53:b7:48:7c:de:
                    a8:cd:73:92:b4:46:ef:b3:8f:4c:1b:57:54:33:9b:
                    8e:51:16:e7:b4:f8:c2:06:f7:74:df:84:dd:2c:71:
                    60:fd:c8:98:09:49:5c:de:0b:a5:96:bb:04:78:68:
                    61:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:53:B1:BF:04:0E:0D:6E:9B:0C:05:A8:CE:AE:F9:73:A1:B1:E2:9F
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/o1OxvwQODW6bDAWozq75c6Gx4p8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a1:f5:b5:f2:f5:74:8d:dd:34:67:56:c0:b6:12:a5:7d:4d:
         f3:e4:0c:02:19:8e:5a:ef:06:46:9c:70:d5:bc:68:5f:38:bf:
         10:b0:41:fa:c4:45:e1:f7:07:33:6e:97:8b:d3:9d:48:e4:c9:
         4c:7e:94:31:21:89:f4:ba:bc:4f:86:0a:53:0d:06:6f:1b:18:
         6e:7b:ed:42:81:bc:16:bb:f2:6e:8f:e9:de:17:7a:af:86:0f:
         ce:46:8c:3e:8c:54:af:81:4f:09:60:51:7b:e8:25:39:42:6a:
         ce:ca:3b:70:e6:7a:68:4f:7f:8f:4e:20:38:e9:fc:99:34:f7:
         1a:6a:ed:e4:72:16:1b:e0:8b:58:43:5e:38:96:57:d5:20:de:
         89:68:dc:dd:6c:b1:05:16:9f:47:6f:6a:78:74:06:87:cf:5b:
         7c:2c:65:97:4a:89:f4:42:2b:c2:af:fb:be:f0:59:2e:3c:18:
         5b:15:c1:66:56:2e:41:ea:6c:43:e3:51:23:f8:b7:29:f5:55:
         9f:07:71:d5:e4:dc:52:b9:70:64:1d:62:33:95:f8:0d:a1:ff:
         95:8a:01:24:c0:51:15:21:10:7a:0f:b5:45:31:69:d7:c7:c3:
         a3:71:38:8a:43:bd:5e:61:53:a6:d1:1f:6b:74:20:06:25:5f:
         c9:a1:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:17 2025 by rpki-client