Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/ogE4q5vGFovSnBKh6cl9VwdvxCE.roa
File:                     ogE4q5vGFovSnBKh6cl9VwdvxCE.roa (raw, json)
Hash identifier:          RCzr9Frm5q42Jz3U+eg54JoSQvDCPxdzOUlG5EAt1vg=
Subject key identifier:   A2:01:38:AB:9B:C6:16:8B:D2:9C:12:A1:E9:C9:7D:57:07:6F:C4:21
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0526
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ogE4q5vGFovSnBKh6cl9VwdvxCE.roa
Signing time:             Fri 31 Jan 2025 01:30:15 +0000
ROA not before:           Fri 31 Jan 2025 01:30:15 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        180.233.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:30:15 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=A20138AB9BC6168BD29C12A1E9C97D57076FC421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:7f:ef:c3:db:ff:45:7a:96:e8:f6:83:60:
                    20:a2:a2:3d:e1:68:51:a5:e8:9b:88:1e:56:08:96:
                    99:a4:37:f4:54:95:85:f4:97:00:30:88:c1:2c:65:
                    f5:42:6e:a1:92:93:8a:e8:de:c6:91:14:21:02:fb:
                    c6:9f:ad:d5:ec:a5:f7:f1:21:cc:60:bc:0e:f0:d9:
                    52:9d:d0:32:f6:58:50:cd:51:05:b0:b3:ec:04:97:
                    cb:e4:ca:2e:4f:1a:95:c5:5d:20:01:37:19:98:3a:
                    f8:1e:83:ef:f7:c0:05:5b:53:49:3d:0d:49:bd:37:
                    00:6e:93:5b:a0:fa:e5:24:c8:4d:12:14:eb:96:1f:
                    c9:33:ad:b9:61:2f:0d:c2:96:3e:c6:d5:1b:37:34:
                    c9:4f:c7:19:ff:b9:61:6d:4b:c2:ac:61:27:46:e5:
                    68:5b:59:76:a3:73:0b:d1:96:b8:bf:bb:8a:91:dc:
                    6f:dc:b4:b9:39:7d:fb:ba:69:ce:cc:24:b8:c4:ab:
                    4d:12:db:ab:36:7a:14:54:ad:2c:ac:47:55:4e:b8:
                    42:2e:88:81:85:92:8a:81:60:79:86:f4:92:29:b2:
                    42:06:35:f9:09:be:40:54:2f:bb:8d:d9:75:5c:2c:
                    e0:a4:f2:1d:4a:a3:65:f4:fb:9b:05:d8:9c:c0:01:
                    cf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:01:38:AB:9B:C6:16:8B:D2:9C:12:A1:E9:C9:7D:57:07:6F:C4:21
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/ogE4q5vGFovSnBKh6cl9VwdvxCE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.233.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:fc:39:62:53:bb:9a:ed:b0:4f:df:49:c8:12:a9:06:46:cb:
         bb:91:b5:cc:e2:52:02:c2:ba:61:14:8e:c2:be:a6:bc:53:76:
         34:a8:cf:97:f1:66:fe:8d:0d:74:c0:80:59:7d:a3:6b:e2:7d:
         8f:51:ca:8c:0c:3d:d2:e4:ab:62:1a:b5:57:86:24:0b:23:38:
         ed:ad:73:35:5e:70:37:ec:3e:69:3a:94:4d:b1:84:82:33:49:
         b9:26:09:6d:6c:70:9b:a4:1f:92:1a:c5:db:92:11:bd:02:bc:
         d8:48:59:46:88:94:ec:3e:9f:0e:c4:4a:2c:17:7e:32:47:00:
         74:b5:e4:78:de:0e:16:61:91:1a:1e:3d:bb:19:6f:cf:2f:55:
         2d:03:a0:cd:48:ce:1a:35:5f:04:b2:03:d9:5c:1a:ff:8d:cf:
         23:2e:3c:d3:15:a8:49:8d:6f:45:cf:4c:cc:bc:4f:07:e3:00:
         28:2b:ba:2b:3b:f9:2f:18:ee:cc:b1:9c:00:7c:ff:3e:84:0d:
         16:c7:3f:a0:64:98:89:de:03:14:50:5f:8e:64:c1:0e:c5:4f:
         bf:f9:aa:d3:f1:15:8e:b0:cd:b6:6c:51:02:59:d0:e7:9c:83:
         f3:6f:9e:fb:25:46:ee:e7:6a:71:cc:45:a2:09:7a:15:af:f6:
         4b:40:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:09 2025 by rpki-client