Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/NGBgwPl873_LqKvCCjeHDC1Q22U.roa
File:                     NGBgwPl873_LqKvCCjeHDC1Q22U.roa (raw, json)
Hash identifier:          0KdpTWdhpSdvR7OVxHi8nSf6/6OMyhiJe6EJNHkH2gk=
Subject key identifier:   34:60:60:C0:F9:7C:EF:7F:CB:A8:AB:C2:0A:37:87:0C:2D:50:DB:65
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0532
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NGBgwPl873_LqKvCCjeHDC1Q22U.roa
Signing time:             Fri 31 Jan 2025 01:30:20 +0000
ROA not before:           Fri 31 Jan 2025 01:30:20 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:30:20 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=346060C0F97CEF7FCBA8ABC20A37870C2D50DB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b0:80:86:bf:0e:d4:7c:14:82:2c:f1:cf:86:
                    6f:2a:cf:72:a1:55:6c:d6:a9:b9:d3:17:fb:c5:ea:
                    ad:eb:28:1b:00:da:40:af:11:84:6c:50:5f:a7:28:
                    e9:b1:ba:db:97:ac:fd:9b:ab:87:dc:84:f7:90:3f:
                    1e:3b:72:11:6e:a2:7b:43:11:31:82:d4:f8:27:79:
                    53:a4:56:29:30:fb:37:8e:19:8a:3c:9c:28:33:bc:
                    d9:7f:63:87:b5:1f:a0:ee:53:1c:e0:30:36:c9:df:
                    90:23:4c:8d:15:39:a4:b6:0e:04:5d:91:02:1e:f5:
                    90:6f:0d:df:8c:12:a0:ad:04:50:4e:c9:fd:2d:d5:
                    c5:53:cc:8d:c2:cf:8e:6d:23:d3:2b:19:28:90:84:
                    82:85:a7:cf:67:88:52:d3:cc:c7:c8:c3:53:a1:56:
                    11:35:81:1f:81:99:ad:b6:f6:1b:a0:72:b7:da:19:
                    c9:0e:e3:dd:25:8b:81:a8:43:0b:29:f4:bb:26:2b:
                    d1:ce:e6:ae:08:15:5a:33:a7:17:c1:90:84:9e:2d:
                    11:e4:b3:da:7d:ca:f0:8a:6c:d3:2d:be:0b:4f:3d:
                    da:a2:77:36:a1:7d:c8:3a:fe:99:6d:0e:5b:6d:0f:
                    3e:65:52:79:83:b1:c4:2d:c9:c2:39:ba:db:30:b5:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:60:60:C0:F9:7C:EF:7F:CB:A8:AB:C2:0A:37:87:0C:2D:50:DB:65
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NGBgwPl873_LqKvCCjeHDC1Q22U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:57:ab:91:b9:1e:11:71:c7:9b:e3:b3:f9:58:bb:6f:9b:
         ca:9c:29:37:29:2b:90:81:60:bf:ec:0d:37:58:87:40:3f:12:
         7d:c2:41:c7:7e:e1:df:01:ca:f8:6c:2c:4e:92:2a:0c:f4:16:
         59:79:24:02:72:09:54:ff:d5:7d:a2:b4:9f:5e:6b:3b:e1:73:
         4b:42:cd:70:f4:3b:1f:46:bb:56:f6:52:01:20:0c:28:12:db:
         43:47:f6:79:a7:87:82:cc:cf:e8:d8:e0:18:dd:c5:11:59:04:
         45:12:00:04:ff:43:72:e5:a4:c1:67:e6:ff:48:6d:12:29:71:
         dd:8c:28:a1:2b:92:96:d7:2b:3b:e5:69:1f:62:c7:fd:5d:23:
         8b:3a:6e:e7:2f:c0:15:44:a1:34:88:8f:78:70:74:3e:00:75:
         1d:3a:dc:1b:79:47:39:32:ac:80:3f:b0:46:e0:f5:c7:30:58:
         cc:1f:e3:78:92:86:af:92:cf:36:34:21:80:44:86:59:a8:47:
         56:97:26:89:55:22:4e:48:09:d7:24:f7:d3:bb:98:c1:b7:a0:
         8b:ca:af:bb:2e:a4:7b:7b:1d:f8:39:44:c7:0b:c4:09:6e:2c:
         6d:4e:97:51:b4:95:ce:4b:21:52:e0:1d:0e:a5:60:ff:eb:9d:
         b0:1c:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:43 2025 by rpki-client