Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/NRilfKs0HKBnDux-7O1lpXO707g.roa
File:                     NRilfKs0HKBnDux-7O1lpXO707g.roa (raw, json)
Hash identifier:          FeBQvJ7wj1loAXtpMFKyrHjf4cnBYvBvXlqLflBWKWg=
Subject key identifier:   35:18:A5:7C:AB:34:1C:A0:67:0E:EC:7E:EC:ED:65:A5:73:BB:D3:B8
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       059A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NRilfKs0HKBnDux-7O1lpXO707g.roa
Signing time:             Fri 31 Jan 2025 01:42:13 +0000
ROA not before:           Fri 31 Jan 2025 01:42:13 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        117.104.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:42:13 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=3518A57CAB341CA0670EEC7EECED65A573BBD3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:7e:eb:38:29:5b:ad:41:b6:6e:51:c2:3c:
                    5f:7b:ef:f2:de:98:7f:64:9c:0d:69:4e:d9:aa:88:
                    b8:53:32:40:26:53:96:8b:5d:63:0b:15:c4:5e:11:
                    8e:0e:90:34:1b:3d:a7:39:e2:a6:cb:d5:ff:14:de:
                    b1:5d:1d:d1:58:48:d3:ca:fa:c0:4f:ac:30:02:de:
                    b3:72:ca:cd:52:a4:d3:6b:17:f3:aa:35:89:f7:05:
                    b1:b6:9c:23:ba:32:28:7e:13:4d:e5:b4:44:80:d7:
                    14:02:43:92:45:d6:81:c3:85:ff:1e:18:c7:d2:80:
                    3c:9b:ed:4e:e0:b0:45:eb:52:48:53:ac:e6:11:80:
                    c9:bc:67:58:dd:86:ac:a1:49:fb:19:f5:db:c1:c9:
                    01:81:4a:a7:63:02:e1:ad:ef:04:8c:db:3e:4d:62:
                    c2:a0:67:79:a1:c1:d5:6a:7d:b5:c5:9d:67:69:68:
                    1e:7d:5d:e6:00:58:58:17:2b:f2:26:68:78:d2:33:
                    b3:63:35:6c:3e:a9:f5:2a:98:b3:8a:0d:9a:58:24:
                    5b:14:f3:5e:fc:9a:e4:e8:46:3f:c3:5c:a8:77:51:
                    c4:22:52:6d:66:bf:54:fc:b0:ef:4b:21:e1:b9:d0:
                    27:08:1d:da:4d:69:2a:e8:69:28:0e:4a:8d:b4:a7:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:18:A5:7C:AB:34:1C:A0:67:0E:EC:7E:EC:ED:65:A5:73:BB:D3:B8
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/NRilfKs0HKBnDux-7O1lpXO707g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:35:bf:a9:72:62:ab:c8:f3:d7:a6:34:c5:33:59:dc:de:35:
         43:cb:0a:95:27:a8:59:f8:79:ab:3d:99:a1:ee:b3:03:dd:6a:
         7a:26:e9:e9:42:e2:03:c0:90:c4:d1:59:cb:ca:7b:42:38:1b:
         89:cc:19:38:85:fe:17:6e:7e:9d:ac:eb:12:be:e9:36:38:20:
         ab:69:6f:7d:9d:88:93:91:a1:16:34:d9:62:7e:a4:33:7e:20:
         20:61:3d:f5:c0:87:7f:7b:a5:5f:49:8e:73:47:2c:c8:15:37:
         1e:c8:83:09:71:3d:a0:bf:a8:33:a4:e9:8a:d8:d4:5c:09:5b:
         11:d8:36:38:9e:b9:ad:a9:94:8b:87:f9:76:7e:53:0e:49:4c:
         01:8d:d0:fe:6d:90:05:7e:1e:b9:b4:7a:e1:b5:33:94:fe:29:
         17:a0:ff:bd:9d:af:b4:a0:d6:93:3c:f5:ca:50:b6:ed:e2:8a:
         6d:36:9a:42:c4:b5:dc:9a:9d:c3:ef:c2:63:96:93:7a:b0:16:
         ec:92:ca:2b:dd:10:52:02:da:c8:b5:e4:7a:b1:99:de:67:96:
         0a:81:24:82:09:2a:2f:d9:96:2c:6a:f7:bb:3b:1e:89:6e:75:
         b5:df:96:4f:37:5c:5f:79:b6:cb:5d:12:28:ba:46:61:16:c3:
         3e:46:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:35 2025 by rpki-client