Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/fJ03QB2ZSyTnn1MawJtjud869oY.roa
File:                     fJ03QB2ZSyTnn1MawJtjud869oY.roa (raw, json)
Hash identifier:          Gocury+MCxGnhrtAeu9A0gxv3YaQxWdAY1Tww38RaUk=
Subject key identifier:   7C:9D:37:40:1D:99:4B:24:E7:9F:53:1A:C0:9B:63:B9:DF:3A:F6:86
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       055B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fJ03QB2ZSyTnn1MawJtjud869oY.roa
Signing time:             Fri 31 Jan 2025 01:36:14 +0000
ROA not before:           Fri 31 Jan 2025 01:36:14 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        116.254.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:36:14 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=7C9D37401D994B24E79F531AC09B63B9DF3AF686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:31:be:42:d0:1a:c2:d9:8d:bc:95:f5:76:
                    b0:1d:7f:c1:94:53:77:74:22:e5:31:8b:74:66:25:
                    52:b9:28:1e:82:8b:3c:a0:6d:c4:fb:fc:9a:e0:23:
                    e1:11:05:12:28:d4:fd:60:2a:a0:10:77:9a:42:83:
                    1a:d8:4c:d5:e2:26:28:1c:98:28:42:0e:4b:c9:f0:
                    50:34:de:94:71:26:ef:5c:05:80:30:66:b1:e9:38:
                    d7:2a:5c:1a:9d:4b:96:28:e7:49:59:ef:9e:ae:ae:
                    a5:19:f7:a9:a2:ab:fd:fa:d0:55:44:5e:53:ba:f6:
                    f0:4e:d2:ea:40:ca:86:d3:08:a0:49:de:5b:07:6c:
                    2e:fe:39:a1:d0:fd:ef:b6:e1:19:e5:3e:0b:35:78:
                    46:8e:d3:90:49:33:08:a8:52:0f:5d:e1:00:12:e0:
                    ad:3b:14:2d:3f:5e:2f:f6:3b:41:be:b8:46:42:dc:
                    27:89:07:6d:86:94:69:ed:15:ba:1c:94:b2:01:47:
                    3e:c2:03:a2:23:eb:62:31:c6:9e:5b:00:bf:42:2d:
                    72:00:d5:e4:6f:b5:cb:6c:6d:24:b9:ef:90:71:c1:
                    e9:15:54:a4:1a:df:f9:b9:b1:b0:0e:9f:2d:7e:45:
                    41:75:9e:dc:b3:36:80:fb:13:88:cf:9a:28:da:4e:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9D:37:40:1D:99:4B:24:E7:9F:53:1A:C0:9B:63:B9:DF:3A:F6:86
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fJ03QB2ZSyTnn1MawJtjud869oY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:08:55:c8:76:44:d6:b5:a4:e9:2c:9e:26:51:6f:44:ff:
         95:96:d7:ef:42:85:f6:87:13:65:71:b1:80:f6:4d:77:32:7e:
         b5:7e:a0:c6:43:c3:c4:93:09:32:33:06:56:c0:20:77:e8:47:
         f0:0a:ea:76:54:16:ce:8d:1b:9c:de:50:dc:06:59:c6:ff:73:
         68:73:f8:9c:4d:d3:6f:57:af:e3:dc:5a:26:1f:c5:8d:ea:cc:
         79:19:3a:72:cf:1d:32:6a:e3:2c:0d:7c:a5:16:39:03:80:da:
         4b:33:bd:cd:ea:a0:34:d7:8e:c3:07:c3:a7:e2:41:4c:7b:a0:
         a4:26:28:e2:13:79:bf:9f:08:a2:84:d8:5d:43:3e:a4:a9:37:
         b3:3a:82:74:89:7b:65:e3:cc:c3:c8:70:5c:ce:3a:23:53:a0:
         a7:eb:be:f8:46:60:33:c7:50:e8:44:4f:22:a9:2e:23:09:20:
         2e:d2:5d:f3:5f:46:ee:b4:78:a9:e0:4a:74:12:74:ec:7a:1e:
         07:29:65:28:9b:b8:d1:7d:86:27:78:0e:af:e3:34:46:ca:66:
         44:a6:51:40:89:81:4e:68:6e:5f:c9:af:63:30:25:29:d2:20:
         5e:57:f3:b4:e3:11:f9:ab:ca:ab:38:c5:00:4c:6d:4d:20:bb:
         52:4e:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:34 2025 by rpki-client