Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/WeTkpD4tpow972ndoQpSIQfxjE0.roa
File:                     WeTkpD4tpow972ndoQpSIQfxjE0.roa (raw, json)
Hash identifier:          JmKb/VqSM16dLI7E2AawRSA8X6iCCdrhrvntkt1PT4U=
Subject key identifier:   59:E4:E4:A4:3E:2D:A6:8C:3D:EF:69:DD:A1:0A:52:21:07:F1:8C:4D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       058D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WeTkpD4tpow972ndoQpSIQfxjE0.roa
Signing time:             Fri 31 Jan 2025 01:42:08 +0000
ROA not before:           Fri 31 Jan 2025 01:42:08 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.68.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:42:08 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=59E4E4A43E2DA68C3DEF69DDA10A522107F18C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:6d:87:30:af:86:c9:5e:80:9e:a4:ec:96:
                    e7:b7:61:99:19:73:aa:6b:df:f2:f5:8f:78:4f:45:
                    88:83:45:c9:7e:2c:35:9e:97:0f:39:0f:08:fa:11:
                    85:3d:d1:df:39:57:33:fc:77:7c:91:64:c7:c2:2d:
                    9e:e5:96:56:61:bb:bd:e4:50:cf:ae:a2:bf:e6:f4:
                    4e:bb:3e:3c:36:f7:7d:36:ae:09:8b:0b:30:37:87:
                    5d:8d:35:c5:44:5a:a3:b1:03:6e:75:57:6e:f7:e9:
                    54:4f:5a:11:e3:51:78:f1:c4:55:04:6e:d2:4d:2f:
                    df:0f:21:de:0c:02:b9:d4:3f:4a:b6:ea:fe:5b:35:
                    ab:ee:a7:c5:85:9b:41:2e:10:bc:c6:dd:ab:54:11:
                    8f:53:db:b4:a7:2d:95:b0:80:c2:1c:30:dd:0f:6f:
                    8c:f0:08:5d:e6:5c:c3:b8:fc:af:7b:9e:ce:08:68:
                    56:66:8d:45:63:fd:66:1f:ff:b0:ea:e1:15:f5:4d:
                    e6:50:c9:3f:79:c0:ed:20:9c:b9:b1:69:dd:77:e8:
                    80:3f:17:14:cf:09:f9:2e:9f:66:bf:db:ba:8f:cd:
                    41:2e:2f:a0:64:50:0e:72:5f:69:3b:b8:23:46:05:
                    65:2b:c4:cd:fc:8b:df:d6:6e:f6:9e:48:31:ca:2c:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:E4:A4:3E:2D:A6:8C:3D:EF:69:DD:A1:0A:52:21:07:F1:8C:4D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/WeTkpD4tpow972ndoQpSIQfxjE0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:af:f2:13:5a:1e:7f:cd:ef:c8:9d:61:25:ef:39:e6:c4:
         58:6d:7c:75:44:ca:f1:cf:82:a0:e9:27:02:da:4a:27:56:de:
         86:31:79:ab:06:bc:05:ce:e5:07:91:22:a9:1f:f9:33:4d:4f:
         28:d1:90:25:9c:38:8b:eb:f1:a1:42:03:3d:c2:6a:bb:f7:27:
         54:e5:3a:23:1a:7c:20:4e:14:85:8b:42:0c:fc:4e:dd:e0:d3:
         4c:e7:f6:e5:7b:6b:4d:6d:c3:1e:f3:49:5a:5d:cd:56:34:c3:
         13:84:ed:8e:f7:60:c7:c6:19:b4:17:a5:f4:89:17:a3:ee:b5:
         e8:3b:a6:14:02:cb:16:a0:b8:66:00:b4:87:63:96:7b:7e:62:
         8b:30:ad:24:15:40:45:78:90:68:cc:e0:f8:0f:8c:4a:84:bc:
         2f:4d:08:a1:10:d1:a0:8c:9b:bb:53:e4:cb:41:2b:0c:31:8b:
         97:34:44:01:54:de:4c:1b:d2:68:c0:4b:f9:80:f8:e7:7d:50:
         73:27:8a:be:20:0b:73:ed:49:c5:d0:f2:59:05:ab:e0:12:83:
         f7:29:e4:30:5f:d0:4a:73:7b:1d:76:7f:15:a2:45:5f:0a:48:
         09:2b:15:b6:8f:ad:f1:e1:38:34:14:61:51:50:66:f9:ee:f9:
         00:55:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:00:56 2025 by rpki-client