Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/PqmOrZg1X3r4LQEFC8TRLFeRy9A.roa
File:                     PqmOrZg1X3r4LQEFC8TRLFeRy9A.roa (raw, json)
Hash identifier:          9/WzrdasfkI23KvNpjOl9QdIwICkmxnWnwqpcJ73ZDw=
Subject key identifier:   3E:A9:8E:AD:98:35:5F:7A:F8:2D:01:05:0B:C4:D1:2C:57:91:CB:D0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0594
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PqmOrZg1X3r4LQEFC8TRLFeRy9A.roa
Signing time:             Fri 31 Jan 2025 01:42:10 +0000
ROA not before:           Fri 31 Jan 2025 01:42:10 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        219.126.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:42:10 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=3EA98EAD98355F7AF82D01050BC4D12C5791CBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:9c:91:a8:26:40:62:ec:e4:34:df:93:0a:
                    e1:ea:ee:55:18:86:43:9f:eb:72:d4:83:88:9d:85:
                    d2:5e:ef:29:90:3b:10:ab:c4:3a:93:2f:00:96:59:
                    7a:16:4b:e0:13:ad:a7:1c:b4:e2:57:44:2e:22:0f:
                    de:14:c7:4b:3f:71:23:ee:46:5f:bf:65:59:af:84:
                    ef:08:ce:80:b8:5c:b9:7b:06:f3:3c:cf:4b:dc:4d:
                    88:66:6d:a5:77:ab:5f:d4:9b:ab:3d:7c:f3:34:56:
                    80:23:47:3c:04:e8:e3:6b:5f:79:b2:c8:79:d1:e8:
                    ce:c3:07:c5:ea:a7:4c:96:64:d7:ec:9a:36:b0:c2:
                    ae:39:3b:1c:96:1a:be:f7:5f:36:77:58:d9:51:b1:
                    f4:b2:e0:c5:9c:f7:ba:27:5a:2c:93:a0:9f:d6:65:
                    04:41:ae:24:7f:50:a6:ce:e0:bc:00:45:05:6f:a7:
                    10:8e:15:57:fe:26:eb:66:73:ed:75:94:1d:3e:1f:
                    28:b4:b2:76:50:81:ba:d5:e5:e7:2e:6b:d3:4d:9c:
                    35:7e:a6:d5:f4:5e:65:35:d8:d8:2b:a6:24:94:05:
                    53:7d:04:31:1c:b8:b9:f5:d9:0f:87:39:7d:a4:6d:
                    81:5d:d1:dc:fc:59:3a:29:1f:e3:dc:2d:1f:82:46:
                    66:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A9:8E:AD:98:35:5F:7A:F8:2D:01:05:0B:C4:D1:2C:57:91:CB:D0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/PqmOrZg1X3r4LQEFC8TRLFeRy9A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c2:89:c2:df:0c:b1:41:66:d4:9f:06:a7:07:65:e9:76:9f:49:
         19:ae:ba:b4:58:81:ee:1b:ba:76:4f:da:f6:bd:4e:dc:54:8a:
         7e:5b:35:e1:fe:f4:db:29:2a:9e:a3:02:a7:f8:89:4d:7e:1f:
         82:cc:97:eb:cf:3e:ef:ee:36:55:27:d2:f7:54:76:c0:4f:b4:
         fa:33:3f:9f:19:72:60:ef:a6:02:f3:57:64:2b:61:17:ff:f3:
         56:a7:10:ae:7c:d5:95:65:3c:88:83:d8:2d:f4:a7:45:37:c6:
         fb:09:18:eb:e5:ab:64:b4:8e:9b:35:f6:91:aa:a7:3d:78:58:
         72:3a:0b:ce:d7:ae:b9:8a:0e:15:29:cf:73:0c:4c:9d:eb:ac:
         7c:5d:9b:23:1f:a8:2a:7a:94:5e:d2:ed:12:1a:b8:50:d4:89:
         33:95:ea:e6:45:12:ab:7d:96:c2:71:29:34:cc:03:68:f3:fc:
         42:9e:b6:a4:18:84:f8:23:7b:0b:c3:67:06:07:9c:5c:50:d9:
         5f:37:13:00:e3:0c:0e:1a:d2:44:26:d2:dc:97:29:80:fc:a0:
         07:44:2f:9e:20:e7:96:fa:de:a8:0e:8c:f1:14:88:fe:15:20:
         54:7b:92:36:9e:17:76:a2:f7:46:6e:84:2d:63:b9:53:0a:0c:
         a5:6b:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:41 2025 by rpki-client