Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/UaDtyf1r1m5-FezFTKBfGEXdpak.roa
File:                     UaDtyf1r1m5-FezFTKBfGEXdpak.roa (raw, json)
Hash identifier:          ReX5OoRaBSxbAVNz1VtrGeH+xEIEhj8SpLLQLXyvV2E=
Subject key identifier:   51:A0:ED:C9:FD:6B:D6:6E:7E:15:EC:C5:4C:A0:5F:18:45:DD:A5:A9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       058A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/UaDtyf1r1m5-FezFTKBfGEXdpak.roa
Signing time:             Fri 31 Jan 2025 01:42:06 +0000
ROA not before:           Fri 31 Jan 2025 01:42:06 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        59.86.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:42:06 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=51A0EDC9FD6BD66E7E15ECC54CA05F1845DDA5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b0:ef:67:d1:eb:4b:4d:0b:30:76:92:3e:ec:
                    51:29:0e:59:30:95:4a:4f:2d:bc:98:ae:40:2c:05:
                    55:3c:59:92:5f:6e:9f:86:f4:21:a5:f2:1c:45:1d:
                    f5:c4:99:41:43:9c:45:9b:0d:19:74:52:c2:15:47:
                    e6:5f:73:27:3c:f9:23:0c:ba:54:33:eb:41:16:05:
                    7f:6b:2f:8c:74:60:18:8c:cc:d9:ae:58:a4:2b:cd:
                    86:49:d4:aa:50:a4:0d:8a:f7:9f:59:89:57:40:af:
                    aa:32:a8:53:a2:c2:37:a1:08:d2:24:e4:06:af:cd:
                    ef:73:66:d4:92:85:69:a9:2f:c2:f9:86:8f:7d:0b:
                    eb:67:25:b7:47:2b:2a:65:aa:a2:b5:58:2b:10:4e:
                    62:56:0a:34:27:e1:af:25:b8:ae:2d:5c:f2:7e:2a:
                    b2:04:29:33:a0:2e:79:c1:1c:82:f8:4b:c5:6a:7a:
                    4e:6b:c2:c2:7f:2d:24:e5:8d:13:e0:90:b4:79:dc:
                    81:b1:79:ba:1f:97:8c:87:f6:11:ab:76:89:0c:b2:
                    3a:15:13:cd:bf:7f:cd:80:a9:89:3b:47:db:e7:c7:
                    31:aa:dd:7f:86:ae:f3:44:4c:cc:44:1e:ac:72:aa:
                    8c:a8:da:87:4a:80:4e:11:0f:d6:53:02:4e:f3:04:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A0:ED:C9:FD:6B:D6:6E:7E:15:EC:C5:4C:A0:5F:18:45:DD:A5:A9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/UaDtyf1r1m5-FezFTKBfGEXdpak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.86.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:0e:17:80:eb:7a:35:21:26:fd:e7:f5:37:10:a2:72:91:f9:
         12:4e:43:6e:5e:9c:bd:02:eb:f1:3f:2c:08:7d:47:6e:01:ab:
         65:07:b8:4c:f5:d5:57:25:13:13:c4:4f:86:d0:f9:d9:16:bc:
         51:7f:e3:9b:5a:3b:cd:d8:d9:56:b6:a4:ec:84:de:dd:23:34:
         2f:5c:87:d1:69:e3:fa:9a:33:e0:fc:3d:2c:48:ab:cb:6c:42:
         89:c5:12:cb:8b:7c:01:d2:18:82:d9:e5:84:6b:d4:47:2b:5c:
         f2:8d:00:d1:87:b5:f3:ab:17:18:27:6c:bb:92:f4:d2:bd:23:
         03:7a:58:e7:12:91:ed:d3:8a:0c:ea:b6:f7:8e:47:eb:c4:6a:
         6d:0b:16:90:95:d8:5b:7b:8e:ed:2a:ad:07:3a:eb:90:ed:48:
         bc:d1:86:7c:20:41:e5:04:6e:b1:c6:cd:7d:a1:93:ee:af:55:
         e0:1d:f7:fc:17:4a:78:fa:f6:b7:79:7d:e7:f3:62:26:a5:2b:
         10:e1:cd:34:dc:81:29:d4:94:94:cc:c2:66:bd:88:27:a4:c4:
         87:46:47:45:1c:c1:9d:4e:a2:92:4b:a1:2b:6a:5a:a3:e1:3b:
         cd:eb:2b:a5:20:c0:53:53:30:97:1e:32:c3:11:bf:cc:e9:4e:
         7a:68:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:21 2025 by rpki-client