Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30420/gs6axYA_tDmD7kFBwMLHkcqgtDs.roa
File:                     gs6axYA_tDmD7kFBwMLHkcqgtDs.roa (raw, json)
Hash identifier:          vQpmTsLFPPW8LIgu9WB36kpRHZbcSemsFRSzdnp+RGo=
Subject key identifier:   82:CE:9A:C5:80:3F:B4:39:83:EE:41:41:C0:C2:C7:91:CA:A0:B4:3B
Certificate issuer:       /CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
Certificate serial:       09
Authority key identifier: A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/gs6axYA_tDmD7kFBwMLHkcqgtDs.roa
Signing time:             Tue 12 Mar 2024 10:54:36 +0000
ROA not before:           Tue 12 Mar 2024 10:54:36 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     59098
IP address blocks:        2400:f7a0:5998::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
        Validity
            Not Before: Mar 12 10:54:36 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=82CE9AC5803FB43983EE4141C0C2C791CAA0B43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:0b:87:4b:c2:06:6d:76:7b:07:6d:f5:be:
                    aa:e2:a6:ae:77:d1:23:5c:51:a0:b2:2b:39:e9:dc:
                    e8:2c:e2:f6:0d:af:92:a3:a2:b6:dd:4b:a2:23:ef:
                    b8:5a:50:32:81:f8:da:26:71:e0:23:8a:8c:4e:73:
                    82:eb:d8:f4:7c:01:7b:26:35:48:61:a9:a4:98:db:
                    5c:e9:8d:30:ae:9c:a9:6b:d3:9a:d4:3b:22:10:e7:
                    c6:22:90:c2:7c:72:4f:47:1f:8a:9d:52:fb:60:c3:
                    28:5a:c8:bc:4f:c1:a3:0a:88:63:d5:8b:e2:02:91:
                    6a:f5:2f:1f:6b:ac:d1:65:55:28:98:76:4f:2b:e2:
                    6c:80:d5:2e:48:4d:f0:77:6b:09:39:96:94:61:0b:
                    26:a3:31:9a:a4:39:08:2c:ca:76:ac:91:cf:b9:68:
                    54:e0:2c:a7:ae:0b:f7:25:3a:c3:d2:ec:ce:50:4e:
                    77:29:e5:23:3e:29:91:96:ed:87:89:86:70:b1:4f:
                    c7:fd:69:29:4f:97:26:18:ed:fa:94:af:3a:b4:78:
                    06:4f:87:ef:41:1f:60:a4:08:13:e6:26:cc:61:b4:
                    8d:f3:64:32:9b:d9:2e:ef:59:68:b3:a4:0d:64:fe:
                    10:ef:6a:b6:02:5f:b4:84:a6:00:0f:08:79:7e:97:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:9A:C5:80:3F:B4:39:83:EE:41:41:C0:C2:C7:91:CA:A0:B4:3B
            X509v3 Authority Key Identifier:
                keyid:A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/gs6axYA_tDmD7kFBwMLHkcqgtDs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f7a0:5998::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:3d:9f:c6:7c:f4:54:99:69:34:fe:83:1a:78:27:0f:36:08:
         5c:0c:0c:67:a6:b3:13:2f:90:f9:15:c2:af:1a:3b:21:60:a2:
         af:1b:8a:06:d0:ed:e5:2a:b7:79:85:94:63:c0:dc:0e:fa:bf:
         16:4f:96:0c:72:4f:09:8f:f1:99:11:f6:61:91:24:10:fe:38:
         ba:58:c4:79:df:45:36:d6:f8:60:4c:bd:dd:15:34:a5:2b:63:
         aa:b6:0e:82:5a:b7:67:4b:10:aa:26:ea:9d:03:c4:15:17:de:
         2e:dc:ad:5f:33:62:28:d6:78:95:14:d6:00:de:86:aa:75:1d:
         92:a0:c8:22:31:f5:91:e1:30:ce:91:76:d9:7a:af:3a:d4:97:
         72:73:95:5d:ca:5c:a8:95:19:1c:6a:90:7b:13:cb:2a:f7:b1:
         cc:fa:ff:a2:1b:13:83:6c:0f:82:57:c2:fc:6f:9c:64:69:7a:
         77:45:60:21:e1:af:7a:b3:3d:be:ba:96:0f:d0:7d:a1:03:15:
         7a:3a:74:4e:cf:2a:99:4c:24:71:b8:d8:eb:74:53:c6:63:26:
         5b:b4:b9:f7:ad:72:37:c2:1f:09:98:c0:e4:5c:d0:5f:7a:17:
         14:de:24:3a:8a:da:07:95:06:b8:94:94:a0:93:8f:81:ce:b4:
         75:14:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:04 2025 by rpki-client