Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/GiUkSRrSYig3S4Bgswo7LgXkoII.roa
File:                     GiUkSRrSYig3S4Bgswo7LgXkoII.roa (raw, json)
Hash identifier:          WatG5NfpVHyJzfxGaHj041ON7DtyXXhNh9pVnjo42ko=
Subject key identifier:   1A:25:24:49:1A:D2:62:28:37:4B:80:60:B3:0A:3B:2E:05:E4:A0:82
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0531
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/GiUkSRrSYig3S4Bgswo7LgXkoII.roa
Signing time:             Fri 31 Jan 2025 01:30:20 +0000
ROA not before:           Fri 31 Jan 2025 01:30:20 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        119.83.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:30:20 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=1A2524491AD26228374B8060B30A3B2E05E4A082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:f9:95:3d:24:30:e0:9f:48:b5:66:e4:75:
                    69:2c:c8:d7:e1:f8:3f:43:5a:b6:01:55:2e:71:d1:
                    64:76:19:fd:9c:3e:aa:b9:51:09:d5:72:f1:88:3f:
                    14:a6:c4:31:9a:3b:f0:b2:54:7f:b4:8e:22:61:5f:
                    8f:69:97:85:c0:8b:50:cf:c1:62:28:79:e8:19:f6:
                    04:33:d1:29:4a:b5:6d:23:c5:0b:c5:40:23:08:27:
                    35:12:56:7c:5a:96:f2:58:cd:4f:3d:88:20:50:8c:
                    5d:f4:b0:66:67:61:fe:e0:3d:5a:c3:02:ed:c3:8f:
                    cc:31:0b:b8:f3:e0:07:ab:91:96:9a:31:68:28:76:
                    95:cd:c7:ed:c7:ba:70:73:82:63:d8:8a:00:f5:fc:
                    36:c8:df:32:b5:d5:e0:3a:33:8e:0d:6e:2c:f4:c9:
                    a5:32:60:c1:32:0e:fd:f2:cd:1f:23:12:5e:17:ec:
                    37:78:df:fd:2d:25:83:50:6a:66:0e:97:e7:9a:e5:
                    62:3e:b1:76:27:d4:16:61:7a:ef:74:db:f8:06:c1:
                    9c:20:9e:d4:27:13:9b:a0:c6:fe:0a:8e:2e:5c:d6:
                    2c:44:28:b9:c9:a0:28:21:c9:c6:99:38:5e:16:12:
                    d1:12:d1:90:51:65:97:09:b1:3f:0c:1d:75:0b:33:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:25:24:49:1A:D2:62:28:37:4B:80:60:B3:0A:3B:2E:05:E4:A0:82
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/GiUkSRrSYig3S4Bgswo7LgXkoII.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.83.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:2a:40:a4:ab:cb:7d:fd:d0:ba:59:04:98:43:97:a3:7d:
         64:e9:b6:8a:56:17:df:a4:be:bc:c3:b8:b0:8f:e9:da:67:67:
         3d:35:0e:ea:26:9f:1c:b9:ac:33:0f:56:db:78:55:ef:75:c3:
         30:b2:74:0e:2a:80:ca:65:5b:87:45:2f:97:93:07:32:b1:70:
         46:9a:a5:fb:be:cf:c8:f9:ab:62:4b:28:a6:fb:bb:b0:f2:a7:
         b7:2f:20:8b:23:94:6d:4d:5e:e4:2d:38:f6:da:41:39:57:fd:
         a3:84:ba:37:72:46:0d:81:9d:1d:cc:c8:05:81:8a:fe:3d:5b:
         86:df:d1:b6:65:89:eb:57:89:b5:e6:d0:a7:23:30:9b:a2:46:
         24:34:01:0a:a5:54:15:b0:36:7a:73:0e:8b:17:59:c2:7e:03:
         ed:ff:ec:51:11:dc:01:c2:ab:5b:23:cb:43:d8:06:c0:15:77:
         a9:a6:04:fa:18:d5:4a:30:45:0d:b4:d2:c5:43:28:36:81:f5:
         38:bb:ef:bd:61:0f:4c:e2:f6:e3:5d:0e:77:f8:de:0f:f5:8a:
         91:07:11:0d:bc:45:65:ae:c0:2f:8f:49:a1:c2:ca:10:94:f3:
         83:26:89:93:56:69:6c:aa:d4:02:87:ab:b6:f9:e7:64:b8:d4:
         21:2a:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:21 2025 by rpki-client