Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/LC6Q8LlYGiTqVYCL0yX88qKg35I.roa
File:                     LC6Q8LlYGiTqVYCL0yX88qKg35I.roa (raw, json)
Hash identifier:          21kx9lBJxdGSfAqkjZmARZcsnqIUyJwmtbuk6Hu6kdc=
Subject key identifier:   2C:2E:90:F0:B9:58:1A:24:EA:55:80:8B:D3:25:FC:F2:A2:A0:DF:92
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       1C
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/LC6Q8LlYGiTqVYCL0yX88qKg35I.roa
Signing time:             Sat 08 Feb 2025 06:48:22 +0000
ROA not before:           Sat 08 Feb 2025 06:48:22 +0000
ROA not after:            Fri 06 Feb 2026 03:05:32 +0000
asID:                     23831
IP address blocks:        202.179.32.0/19 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Feb  8 06:48:22 2025 GMT
            Not After : Feb  6 03:05:32 2026 GMT
        Subject: CN=2C2E90F0B9581A24EA55808BD325FCF2A2A0DF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:2b:a5:4f:28:a0:37:8b:67:02:88:fb:88:
                    1b:5e:f5:f9:9e:d4:83:dd:83:da:1a:67:f0:c5:79:
                    c3:28:c1:49:f9:a4:4a:01:67:03:25:d6:81:6a:91:
                    59:8f:71:e1:81:18:d6:9e:1b:c1:6f:3b:34:dc:b0:
                    87:c6:e9:55:52:9b:2d:a5:86:0b:9f:bd:5a:f7:46:
                    c1:4e:c4:4b:34:1e:21:b5:3e:a6:8d:58:1d:f3:f9:
                    fa:5f:92:10:f4:65:35:17:88:48:82:66:94:c2:6b:
                    7e:40:a3:fb:61:a4:4c:ae:1b:51:08:fb:f2:e6:55:
                    02:d1:27:82:b1:af:81:9d:be:a3:4c:1f:8c:e4:6f:
                    57:aa:e8:1f:60:30:c1:bd:50:99:44:86:f1:f4:bf:
                    5c:35:dd:67:1c:ec:e4:72:7f:22:fd:8c:09:b5:7f:
                    9f:ef:d1:fd:90:ca:98:00:aa:ea:15:55:8c:c3:03:
                    e3:e6:e7:44:1d:44:8b:71:ee:4f:f5:98:21:22:b6:
                    46:5c:6c:ba:8b:aa:f5:ec:92:a8:21:2b:42:e4:23:
                    a7:17:b3:aa:9b:92:f2:b6:db:00:ac:77:cf:61:be:
                    50:c6:60:4e:6a:af:6d:f8:43:87:72:51:0a:a8:bd:
                    70:c7:c0:d2:59:54:ab:24:aa:71:e8:67:5f:43:66:
                    42:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2E:90:F0:B9:58:1A:24:EA:55:80:8B:D3:25:FC:F2:A2:A0:DF:92
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/LC6Q8LlYGiTqVYCL0yX88qKg35I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:e8:d0:c9:89:85:75:76:9f:3d:0f:43:e9:20:e6:91:b0:52:
         58:f5:90:b3:49:93:b4:84:ee:0f:25:81:20:dd:da:b0:18:49:
         71:ee:83:1f:27:58:90:6e:7b:76:b6:7d:26:b4:b6:5f:e5:f6:
         6c:07:ae:e5:89:73:c5:c3:14:54:7b:d2:51:96:3d:cd:d1:45:
         09:b3:4b:14:3d:2b:b4:04:ed:6f:f3:7d:52:e2:8d:f9:3d:01:
         80:62:74:00:be:8d:1e:85:46:c7:8d:cf:4d:a2:44:88:75:03:
         4d:34:62:a7:14:dd:d5:2f:1b:03:e8:35:47:f1:56:23:c3:34:
         fc:93:a4:62:65:91:6d:ff:7f:54:16:11:f2:25:22:63:c7:e5:
         30:95:f7:73:d2:47:fb:b5:96:42:43:20:fc:1b:c6:fc:b9:5b:
         d9:69:f2:2d:56:80:8e:06:7d:d5:5f:27:40:fb:a4:99:b8:59:
         f6:c4:c6:ed:fc:9c:7a:63:59:b9:ac:a5:aa:2e:0b:03:ed:46:
         7c:c2:00:ee:91:45:c1:26:17:20:74:7b:42:97:96:c1:4d:d9:
         b4:4c:c0:85:a6:87:8c:cb:d7:5c:4e:e8:50:1d:e3:75:6c:9b:
         e7:59:e9:1a:c3:e9:b2:da:64:49:b4:30:3f:ae:58:4e:fc:32:
         db:03:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:38:57 2025 by rpki-client