Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/VODHkj_3SRNAiQrgyieVBSnP3EE.roa
File:                     VODHkj_3SRNAiQrgyieVBSnP3EE.roa (raw, json)
Hash identifier:          gWO3qSwutXzvDTkgGPf3w1K7idZEQVGOBK9bFrrzZ2w=
Subject key identifier:   54:E0:C7:92:3F:F7:49:13:40:89:0A:E0:CA:27:95:05:29:CF:DC:41
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0586
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/VODHkj_3SRNAiQrgyieVBSnP3EE.roa
Signing time:             Fri 31 Jan 2025 01:39:55 +0000
ROA not before:           Fri 31 Jan 2025 01:39:55 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        210.4.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:55 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=54E0C7923FF7491340890AE0CA27950529CFDC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:07:ed:40:14:86:7d:21:75:eb:79:01:36:
                    93:07:49:10:ec:59:fc:27:cc:e6:02:57:fb:97:f6:
                    73:ea:71:09:07:fe:7e:4f:21:f8:22:97:7a:ba:55:
                    a2:ab:6f:b1:80:4c:d2:2e:97:1b:71:50:8a:11:06:
                    62:2e:c9:67:60:4a:32:ea:82:39:eb:ac:b1:77:da:
                    67:6f:6a:cb:2b:81:52:b7:23:a6:83:0e:b6:9a:bd:
                    39:d9:e4:b3:36:de:4e:56:f7:22:1a:61:29:b2:ed:
                    10:74:ac:1e:a8:a6:17:38:b0:fb:c6:a8:75:a2:7f:
                    a8:8f:49:f3:db:35:2d:b2:84:dc:33:f3:52:c7:e2:
                    f5:ee:22:8c:2c:50:64:51:6d:1e:75:52:75:f9:8e:
                    38:db:64:fb:23:94:c4:e6:b7:6f:88:b1:76:14:4e:
                    42:5d:ac:dd:f2:08:9c:d7:f5:7d:d3:63:45:e2:c9:
                    95:1f:8a:ca:de:02:d5:17:bf:12:5e:94:78:6f:10:
                    f4:2c:ef:76:a0:04:17:ef:84:af:37:b8:9f:73:db:
                    d1:d6:aa:b7:27:ff:da:57:22:c2:b4:e8:e0:04:af:
                    be:85:35:6f:39:c7:23:a3:9e:5e:d7:7a:d9:5c:c6:
                    69:8b:73:cc:bf:09:8f:d0:81:59:56:2c:77:9e:1a:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E0:C7:92:3F:F7:49:13:40:89:0A:E0:CA:27:95:05:29:CF:DC:41
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/VODHkj_3SRNAiQrgyieVBSnP3EE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.4.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:e0:1a:58:fa:e4:a8:33:bb:f7:21:04:63:35:a6:35:d6:
         90:0c:5c:e8:d0:9e:6d:9d:6a:58:64:53:a6:90:33:87:24:15:
         4c:d1:b7:3f:2a:90:0d:57:ef:aa:d9:e0:11:15:c9:95:53:fd:
         e4:f2:df:af:4d:f6:df:6c:75:c7:56:27:11:15:b8:7a:14:80:
         51:62:ab:e8:21:5d:1b:6b:85:eb:f5:ef:59:70:03:fc:9f:71:
         48:3e:10:2c:5d:67:54:dd:3d:f8:70:e0:c8:ea:4c:24:f0:d2:
         81:07:9c:66:1a:9c:5f:ab:4b:dd:6d:a0:03:e7:8a:97:ca:15:
         9d:2c:b0:85:7b:2b:9d:e3:44:9d:65:8d:b9:ce:e2:40:3d:55:
         ea:70:aa:f4:b7:25:31:58:e0:09:04:43:3d:0e:6d:ce:07:b7:
         69:5b:af:79:ea:8f:45:84:b3:0e:10:fb:83:a2:fe:59:06:6c:
         e5:f4:34:49:32:b4:57:e4:7b:71:0e:1d:75:6f:24:a9:46:5d:
         ab:51:fa:26:47:eb:17:6a:ba:cf:c2:b6:16:fb:b2:14:15:10:
         c6:e0:64:ab:d6:9a:73:a1:5a:4b:be:40:6b:83:cc:6a:85:1e:
         0a:00:e0:68:a3:7c:21:fa:6e:9f:d8:39:f2:03:47:5c:c7:c8:
         8d:d1:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:04 2025 by rpki-client