Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/mQUW5NVasZzmYiXE2CvzDbgePYw.roa
File:                     mQUW5NVasZzmYiXE2CvzDbgePYw.roa (raw, json)
Hash identifier:          E05A/mvOt6z/VbtNAapN5iRCs4ytdVhYe+MUbKazl0Y=
Subject key identifier:   99:05:16:E4:D5:5A:B1:9C:E6:62:25:C4:D8:2B:F3:0D:B8:1E:3D:8C
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       19
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/mQUW5NVasZzmYiXE2CvzDbgePYw.roa
Signing time:             Sat 08 Feb 2025 06:48:21 +0000
ROA not before:           Sat 08 Feb 2025 06:48:21 +0000
ROA not after:            Fri 06 Feb 2026 03:05:32 +0000
asID:                     23831
IP address blocks:        115.85.136.0/21 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Feb  8 06:48:21 2025 GMT
            Not After : Feb  6 03:05:32 2026 GMT
        Subject: CN=990516E4D55AB19CE66225C4D82BF30DB81E3D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:b5:b7:72:73:15:9d:84:13:4e:c2:5d:6d:
                    14:2e:a1:1d:fd:dc:87:35:86:b6:3d:e7:aa:9e:91:
                    40:d1:6e:f7:b9:26:f7:6f:19:37:80:33:ee:9a:19:
                    b4:ae:f6:1f:97:e9:17:b2:75:38:03:92:98:9d:a3:
                    32:1f:ff:b1:f9:08:b0:74:da:47:57:7e:75:4f:6d:
                    d6:38:0f:a2:18:1f:45:49:bd:0a:51:94:4c:96:6c:
                    db:f9:25:ae:1a:28:fe:90:9f:dc:38:5c:22:e9:f8:
                    4c:2f:93:82:ac:f8:77:2b:3b:40:3d:ce:dd:a7:1e:
                    dd:3d:e8:9a:85:7f:c9:df:9d:b7:c5:47:9f:12:83:
                    c7:ab:b7:fb:13:b4:e3:d6:e6:32:87:87:bb:7b:ca:
                    ad:33:62:26:58:4d:d8:54:d7:fe:d3:b5:dc:e9:d5:
                    5c:3a:23:9f:56:49:58:90:6c:25:7e:e2:ee:72:e1:
                    a8:46:d1:36:fa:5b:a2:1a:92:ee:d0:92:15:46:73:
                    b4:3e:37:a2:11:fa:ec:ad:96:46:ac:18:03:18:a6:
                    8a:dc:14:59:8a:a6:5f:44:20:cb:f1:80:b8:25:52:
                    e7:dc:3c:ac:31:9c:d7:f0:5c:19:58:21:63:27:b1:
                    44:ee:e3:1e:bf:17:36:8e:52:63:ba:33:68:39:f7:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:05:16:E4:D5:5A:B1:9C:E6:62:25:C4:D8:2B:F3:0D:B8:1E:3D:8C
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/mQUW5NVasZzmYiXE2CvzDbgePYw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.85.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:b7:46:4a:5b:fb:47:aa:cd:42:ec:79:de:c0:44:5a:82:09:
         f5:52:05:76:c4:d3:b1:78:31:a2:85:cf:fb:b8:59:44:d4:c6:
         49:a0:9b:a9:33:62:7d:7d:76:ba:f8:98:bb:c0:b2:4c:ac:89:
         5e:11:75:be:0f:c5:ae:61:7c:56:71:85:1c:02:ee:8c:25:90:
         4a:43:a7:a9:31:ad:76:11:0a:e5:95:7e:54:ba:78:4b:a8:c3:
         8b:e7:ec:da:26:5e:d2:bc:65:40:7e:89:c7:1d:d7:c5:08:7d:
         fa:fa:bb:8d:06:62:f3:08:e3:f2:5d:23:40:ea:bf:6e:55:5c:
         2b:13:0f:da:ca:6a:7f:2b:c0:76:8c:2d:87:fd:01:54:f4:36:
         53:44:fb:1b:fd:44:5e:af:2d:2e:19:3e:52:4f:1a:b8:8c:95:
         49:41:f4:66:d8:92:1c:5d:63:9d:14:cf:c7:3a:25:f7:20:5b:
         11:ae:14:86:8a:7a:06:74:7e:0c:c0:2b:da:a3:1b:1e:e7:9e:
         8d:35:8b:a0:57:4f:a4:60:84:5a:91:91:40:56:4a:cd:9c:0a:
         16:cc:c2:f3:f1:b4:4e:fe:08:d5:d2:79:0c:3b:5a:d2:99:4c:
         b4:68:46:20:be:1a:7b:c9:95:b8:a6:f6:fd:c5:1d:e2:42:50:
         0e:fb:00:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:06 2025 by rpki-client