Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/kPmwf_foDJu7B7NiRi9Ic0xzNeU.roa
File:                     kPmwf_foDJu7B7NiRi9Ic0xzNeU.roa (raw, json)
Hash identifier:          bHiunTjsrx0z85SXPE1jaSP8ES7GfNdNW+aXuERUajg=
Subject key identifier:   90:F9:B0:7F:F7:E8:0C:9B:BB:07:B3:62:46:2F:48:73:4C:73:35:E5
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       054B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kPmwf_foDJu7B7NiRi9Ic0xzNeU.roa
Signing time:             Fri 31 Jan 2025 01:36:08 +0000
ROA not before:           Fri 31 Jan 2025 01:36:08 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        219.112.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:36:08 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=90F9B07FF7E80C9BBB07B362462F48734C7335E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:69:d1:29:ab:a1:99:f0:47:f2:9d:c2:ec:
                    19:75:de:01:9f:99:52:ce:e9:b4:ff:13:28:f4:a7:
                    ab:0b:e8:36:c0:e8:15:2a:72:f7:71:53:b0:2c:b3:
                    9e:0d:f5:ca:b7:a1:ae:1c:8e:92:ab:14:54:4f:05:
                    57:41:0f:67:af:02:98:0e:fb:6b:20:b7:b1:ea:1a:
                    da:de:a9:8d:e6:cc:db:a9:a9:45:7f:b0:ea:af:6a:
                    b4:3a:89:cc:55:f7:8d:48:62:a3:0e:8f:76:80:e9:
                    52:3d:20:2f:1a:b4:46:66:c6:cc:90:6f:63:44:ce:
                    92:2f:c5:dd:49:6c:05:e8:e3:9b:c0:66:ed:db:f1:
                    7a:d0:06:b4:26:6b:aa:bc:1e:9e:73:a9:8d:e9:ec:
                    41:a3:66:af:7c:94:c9:44:a6:e8:98:6f:99:e0:92:
                    58:7f:b4:93:1e:3f:53:f1:05:56:eb:96:3e:96:9d:
                    9a:96:ad:a2:33:e8:8d:98:c3:be:1d:34:98:6d:2b:
                    e0:dc:88:b2:ca:bd:13:6a:c7:ee:db:6c:1c:d7:22:
                    24:2c:d0:e8:7c:ed:ef:f8:55:62:b4:46:79:a4:67:
                    33:81:27:a8:2c:14:e6:bb:f8:e2:53:b8:95:66:0e:
                    6e:24:b7:0f:30:82:e0:be:fa:46:c3:67:3b:99:24:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F9:B0:7F:F7:E8:0C:9B:BB:07:B3:62:46:2F:48:73:4C:73:35:E5
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/kPmwf_foDJu7B7NiRi9Ic0xzNeU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:a7:5f:68:e8:b5:ca:9d:53:8b:3e:77:ae:dc:f4:bb:41:2b:
         c7:3a:0b:cc:e1:64:95:2d:5e:aa:1a:0a:8e:b0:07:e3:0c:18:
         b9:c0:ad:91:b8:42:ca:83:20:26:19:e3:21:9d:f1:09:cc:53:
         91:46:2b:7c:f1:07:e1:4f:f8:f8:90:23:e3:0b:8a:69:ce:b9:
         bb:94:8a:91:4e:fe:62:ff:41:2e:85:b6:d4:ee:72:b8:31:88:
         50:f2:d7:23:a0:f7:7e:1b:c6:31:62:7a:0f:64:59:47:07:6f:
         e6:d3:dd:7f:0c:ce:72:81:15:92:5e:d0:e1:36:57:1c:34:d8:
         3e:3d:df:89:29:21:ce:d2:3c:c9:74:27:d5:20:e8:11:9c:73:
         b5:f7:4f:ab:ca:31:1b:f5:33:62:a9:f4:50:b0:2e:40:8e:cf:
         ce:c2:e6:f1:13:25:a3:2e:c5:ac:1e:de:9c:ff:c1:cc:f2:1b:
         a7:dc:02:f1:c0:08:ec:d7:cf:81:af:96:89:84:35:23:be:a8:
         19:e4:d8:e1:8a:2a:16:e2:23:c7:70:88:4a:ce:a3:63:3a:fc:
         d1:c5:14:80:07:94:fb:e3:90:d2:5e:b9:59:e0:93:4c:9d:ef:
         65:7f:32:af:2d:fe:e2:b8:a7:76:e0:5a:db:08:e5:83:2f:61:
         b2:14:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:34 2025 by rpki-client