Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/hDfazdaFXwIAesXY7uQz3fA0z-E.roa
File:                     hDfazdaFXwIAesXY7uQz3fA0z-E.roa (raw, json)
Hash identifier:          Fsl23N2WJ2kDzSGStFCeaA+pZKXBvtjCoyOXS2vhTks=
Subject key identifier:   84:37:DA:CD:D6:85:5F:02:00:7A:C5:D8:EE:E4:33:DD:F0:34:CF:E1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       059C
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hDfazdaFXwIAesXY7uQz3fA0z-E.roa
Signing time:             Fri 31 Jan 2025 01:42:14 +0000
ROA not before:           Fri 31 Jan 2025 01:42:14 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        219.96.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:42:14 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=8437DACDD6855F02007AC5D8EEE433DDF034CFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:6c:23:a6:48:18:5b:36:85:45:e8:b0:dc:
                    9f:24:e9:c4:5b:34:87:cf:4e:f9:11:77:ed:c7:10:
                    24:82:df:af:85:86:c0:53:86:23:f9:e0:4f:15:de:
                    d6:fe:b9:27:6e:cc:61:18:36:87:7c:da:3d:5b:a6:
                    aa:b2:05:30:f9:59:40:f7:ad:fb:b5:3e:0b:e6:ce:
                    53:05:66:d3:de:1f:40:d7:29:93:72:1c:7b:a2:90:
                    76:34:87:53:de:ce:60:85:0d:65:1f:f9:91:7d:a3:
                    a0:94:f5:90:0a:8b:d7:91:c2:d7:db:d5:bc:6b:45:
                    91:c3:17:8c:19:26:6e:69:98:ce:fb:77:a4:f3:bc:
                    2d:8f:42:0b:8a:0b:2a:d9:ff:1e:15:b4:71:e8:0b:
                    b9:ba:e5:10:0d:b0:8c:7d:49:61:1f:8b:9a:d9:2c:
                    3f:42:97:04:1b:7b:f8:82:16:d8:f3:d7:a8:27:34:
                    32:84:f9:af:a9:12:26:e2:55:7a:1d:4b:e8:f6:d6:
                    16:8a:21:e0:8c:53:02:08:4c:93:4a:b5:47:88:02:
                    38:45:89:ef:8f:18:5c:e2:43:f5:c9:23:b0:9f:ab:
                    b2:18:f4:99:38:ad:ea:fd:7f:63:d2:3b:ac:7a:46:
                    b3:03:45:de:8b:f9:ec:35:58:37:7e:50:a3:07:1f:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:DA:CD:D6:85:5F:02:00:7A:C5:D8:EE:E4:33:DD:F0:34:CF:E1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hDfazdaFXwIAesXY7uQz3fA0z-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:4f:15:54:a8:64:9a:49:17:fb:33:4e:a0:bf:38:3d:d4:47:
         dd:a4:c5:a7:91:f6:15:49:28:0a:0b:08:43:41:02:ef:1e:f3:
         51:00:75:31:51:0e:5c:28:e6:df:5e:91:69:3c:4c:1c:cf:62:
         22:36:8e:33:40:7c:2f:69:79:7a:b7:15:e6:83:4b:29:4e:00:
         97:68:a6:02:84:ca:09:32:15:aa:07:a5:bc:b2:29:b2:65:88:
         11:33:63:3f:84:38:46:7d:62:1d:bb:c6:b4:ea:f3:7a:6e:ca:
         48:c8:9a:35:89:77:8d:61:b5:2b:eb:dc:79:45:15:e1:20:7d:
         af:a9:ec:ea:88:8c:db:c2:9c:e5:69:70:8c:08:94:8e:ba:0a:
         8b:d7:11:74:30:db:9e:03:05:bc:af:72:45:60:ed:c2:46:62:
         39:a1:f8:43:ab:36:04:e0:1e:76:ed:78:09:f9:00:86:db:85:
         1b:75:b6:f1:a5:e2:e1:0a:82:37:ad:4b:6b:07:32:98:08:94:
         c6:b7:d2:94:2a:0d:fb:63:02:27:8a:b6:51:1d:36:42:54:24:
         b6:ce:fb:77:ff:30:fd:65:fc:10:c5:78:b2:f9:a9:e4:8e:c7:
         01:19:74:c9:fe:b0:95:02:99:ad:e2:0f:a0:0d:d8:94:9c:c7:
         4b:3d:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:51 2025 by rpki-client