Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/C7WSwaBaVWnZjz4pO8819PLJ8A0.roa
File:                     C7WSwaBaVWnZjz4pO8819PLJ8A0.roa (raw, json)
Hash identifier:          Tv0JjNo4zoecWqwoFRvku0rpTbkh7BstJNZHBHmI2+M=
Subject key identifier:   0B:B5:92:C1:A0:5A:55:69:D9:8F:3E:29:3B:CF:35:F4:F2:C9:F0:0D
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       42
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/C7WSwaBaVWnZjz4pO8819PLJ8A0.roa
Signing time:             Sat 30 Nov 2024 01:28:42 +0000
ROA not before:           Sat 30 Nov 2024 01:28:42 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        219.100.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Nov 30 01:28:42 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=0BB592C1A05A5569D98F3E293BCF35F4F2C9F00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f0:e0:70:cc:44:93:da:63:a3:e1:d3:b6:b8:
                    f1:0d:55:96:4e:a6:e7:8a:51:a4:81:9f:a5:f5:3a:
                    44:5f:44:5d:55:c7:61:fc:48:7d:16:d7:a9:de:a2:
                    d1:c5:2b:b9:cc:e9:2e:fa:d3:fc:15:09:c6:65:82:
                    c7:c2:11:24:02:74:15:b5:9a:4a:ae:9f:e5:60:3b:
                    2c:9e:1d:b5:f3:8a:2f:6e:73:40:17:5d:ab:98:09:
                    36:67:66:e9:26:89:90:a6:14:da:1c:1d:10:d4:0e:
                    1f:24:ef:d1:6b:0f:3d:e7:80:4d:66:c3:4d:26:c2:
                    ec:42:46:a7:38:a7:38:0b:e9:7f:02:32:22:16:99:
                    78:4c:56:01:62:78:bd:0e:40:20:40:75:e9:47:ca:
                    6b:e8:75:75:4f:43:ae:58:c9:30:6b:a7:e7:03:de:
                    d7:7d:ce:bc:5a:1f:f6:ef:a8:08:58:86:f9:a5:74:
                    2e:af:9e:13:2e:c8:4d:63:ba:98:4c:9b:8b:af:5d:
                    94:de:75:56:bb:37:91:dc:75:12:5a:cb:59:49:e3:
                    cb:c3:a3:89:a4:50:f0:7f:62:28:52:c0:6e:cf:77:
                    24:62:2c:30:3d:7f:18:f5:ea:ae:12:6e:af:60:10:
                    20:ac:56:18:18:9e:46:ef:24:19:36:38:3f:33:4f:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:92:C1:A0:5A:55:69:D9:8F:3E:29:3B:CF:35:F4:F2:C9:F0:0D
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/C7WSwaBaVWnZjz4pO8819PLJ8A0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:06:ea:85:03:16:b7:bc:df:df:ed:90:52:c3:4b:bc:90:4c:
         17:45:96:b5:ab:ad:1f:57:c5:24:25:ed:e1:60:65:24:ab:21:
         1b:87:97:d4:10:99:e1:bf:23:10:a0:d7:57:4f:fe:54:fc:96:
         3a:27:60:a8:ff:4f:e7:9e:1d:8b:a6:aa:56:24:b7:ae:17:8c:
         93:53:86:67:19:9b:c0:17:75:48:3a:d5:46:83:b4:63:b4:2f:
         1a:78:fb:ec:ef:bf:86:36:ff:99:51:98:1d:79:ca:4f:2b:da:
         eb:c2:9b:f1:b8:f2:08:a1:c0:4b:57:d1:35:2a:d2:d0:a9:be:
         1a:21:6f:8e:ee:f6:77:ab:4a:4a:2b:c5:84:c4:4f:f3:b7:5c:
         99:37:77:05:4c:15:55:b4:70:f3:80:eb:d2:bb:ae:4f:71:38:
         9f:9a:dd:ba:5d:7d:96:3d:03:02:9b:a2:a8:b9:0f:b8:10:58:
         ff:43:54:4d:8e:8d:4c:b2:6e:1b:f4:3a:3b:45:10:95:5a:17:
         ca:f6:cf:94:bd:83:c0:9d:f8:46:4a:ab:3f:70:b7:55:c8:c2:
         84:75:32:9a:27:40:68:a5:64:5f:49:ac:4c:16:43:bf:0b:10:
         93:b9:d5:57:4b:f0:0f:3c:2f:3c:9b:0f:37:ee:72:9b:ca:83:
         66:13:b9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:49 2025 by rpki-client