Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/bi7Y-nCbYSZgijhN9Atl53Ti9kg.roa
File:                     bi7Y-nCbYSZgijhN9Atl53Ti9kg.roa (raw, json)
Hash identifier:          7r9QfUripck+fl0+Plls3Y4db3qXgMCAqIwK6HlK5aw=
Subject key identifier:   6E:2E:D8:FA:70:9B:61:26:60:8A:38:4D:F4:0B:65:E7:74:E2:F6:48
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0570
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bi7Y-nCbYSZgijhN9Atl53Ti9kg.roa
Signing time:             Fri 31 Jan 2025 01:39:44 +0000
ROA not before:           Fri 31 Jan 2025 01:39:44 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        180.233.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:44 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=6E2ED8FA709B6126608A384DF40B65E774E2F648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:d1:b9:fe:ae:c2:84:ff:ca:e4:10:57:49:
                    87:7b:d9:db:73:b3:9f:83:f3:30:a6:cd:62:15:06:
                    85:c0:04:a4:f3:b9:bc:05:8f:99:00:09:b0:3f:67:
                    5c:bb:37:03:0f:c0:ff:fd:1e:fa:dd:97:2a:0d:07:
                    5e:ee:87:d8:cc:63:e3:56:eb:43:3c:f8:88:cb:74:
                    5c:ee:17:ab:10:f6:5c:e4:d4:94:aa:98:a5:cd:f7:
                    a4:69:aa:45:66:a2:48:79:ab:e1:69:b2:c5:8d:7e:
                    01:7b:95:6d:da:a4:0a:86:b5:2a:5d:a6:bf:7e:e6:
                    18:f8:9f:79:38:81:37:f5:cf:34:ac:2b:84:90:47:
                    4d:ab:35:6d:91:e9:16:f1:c0:10:1c:a0:aa:fe:9e:
                    9f:0c:95:7f:2c:b2:d0:42:f6:86:a6:cd:53:e8:70:
                    74:90:4b:10:18:86:cd:50:8b:0a:1d:f2:b1:36:44:
                    f7:d4:d3:bb:a6:9a:26:d1:ce:51:cd:e8:e8:20:c3:
                    10:db:80:0d:09:c2:98:7f:e7:75:22:93:af:df:07:
                    3b:b8:a0:10:81:3b:f9:9c:ba:37:e7:39:19:f7:4d:
                    8c:88:b0:32:0d:8c:9c:c9:d2:bf:a5:63:8f:02:40:
                    20:0f:21:85:e0:b4:ba:86:92:41:92:49:59:77:ef:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2E:D8:FA:70:9B:61:26:60:8A:38:4D:F4:0B:65:E7:74:E2:F6:48
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/bi7Y-nCbYSZgijhN9Atl53Ti9kg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.233.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:03:57:5c:eb:bb:30:3e:f8:56:89:86:f5:3a:20:dc:f8:cf:
         c1:97:95:36:33:5a:15:40:52:46:ad:cd:fd:16:ed:49:c2:a7:
         3e:32:1b:54:f6:ff:25:65:97:eb:1c:13:20:cb:d9:88:20:ff:
         85:52:5e:9f:fb:41:60:df:c0:26:f0:b4:75:e0:24:86:c1:1b:
         5f:ec:d0:b1:5b:8d:43:80:81:95:6e:a1:f6:bb:53:95:16:58:
         85:ee:cd:3e:8d:6f:27:91:da:f7:2b:84:3e:61:96:65:36:da:
         e2:5b:b9:85:9d:19:6d:6b:09:50:bb:65:d6:d3:db:50:af:72:
         af:b9:8f:76:8d:19:3c:9c:a8:01:cc:5f:f0:2e:7c:d5:ae:bb:
         cb:a9:a0:88:a5:e4:f0:04:c3:70:e7:fd:ea:c7:6e:bd:90:eb:
         3e:10:fc:21:76:3a:19:bb:43:4b:9c:81:26:53:b7:ed:dd:1b:
         93:a6:33:0b:f1:6b:47:4d:ba:d9:0f:c8:0e:aa:7b:7e:49:c8:
         30:91:8c:77:93:1c:7b:f2:54:a5:14:2c:1f:49:da:c9:17:bc:
         43:75:7f:96:c6:2d:fe:ec:60:25:ae:d8:dd:8a:15:70:07:8e:
         b8:a4:cb:b2:8b:1d:53:a9:51:f2:6e:e5:c8:07:d9:db:4a:f2:
         67:cc:e8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:08 2025 by rpki-client