Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/zmgOWsplTWxntFhBNW4hSZS-oW0.roa
File:                     zmgOWsplTWxntFhBNW4hSZS-oW0.roa (raw, json)
Hash identifier:          XF035RJhIrgZQd3c3AfAESvhPpHDebd5aY0ulm3Xq1o=
Subject key identifier:   CE:68:0E:5A:CA:65:4D:6C:67:B4:58:41:35:6E:21:49:94:BE:A1:6D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0584
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zmgOWsplTWxntFhBNW4hSZS-oW0.roa
Signing time:             Fri 31 Jan 2025 01:39:54 +0000
ROA not before:           Fri 31 Jan 2025 01:39:54 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     10010
IP address blocks:        219.126.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Jan 31 01:39:54 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=CE680E5ACA654D6C67B45841356E214994BEA16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:fc:95:98:cc:8c:df:1e:ff:00:16:51:02:
                    4e:69:99:4d:f0:15:41:2d:10:28:12:79:88:0f:d8:
                    c4:db:63:b9:2c:6e:54:1d:97:73:86:a3:d2:ab:b8:
                    23:b9:3d:12:b5:1a:8e:7e:92:53:5f:3f:30:f9:4b:
                    35:97:a9:68:82:d0:41:56:1d:c6:4a:c2:77:3b:01:
                    cc:8e:3e:bf:06:bb:77:0c:18:80:34:3a:75:f8:56:
                    fb:2e:e4:24:59:1b:25:fa:98:36:b0:1f:0e:d9:fb:
                    76:88:a5:fc:06:8e:b1:e5:04:aa:31:52:01:5c:0d:
                    bb:79:15:89:78:ee:b2:36:c8:de:11:34:78:2b:e8:
                    7d:1e:1f:17:96:da:71:a4:80:35:14:64:78:3f:0c:
                    a5:75:c1:87:13:5c:81:70:e3:b7:04:27:47:52:cc:
                    0f:53:39:9e:0f:d9:f3:8f:86:00:62:26:8c:42:cc:
                    ac:21:e0:eb:f4:82:ce:48:cd:fa:dd:7b:76:1d:fe:
                    c2:d7:9d:ed:80:29:dd:d0:a6:58:0c:72:18:4d:3b:
                    5f:35:f7:c6:ac:98:a9:2e:43:d3:3d:20:80:7d:ee:
                    7e:14:46:16:8b:27:99:d1:12:cf:cb:25:3b:f4:a1:
                    9f:e5:80:79:a4:b2:6f:4c:ed:0c:ea:a9:b9:2b:16:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:0E:5A:CA:65:4D:6C:67:B4:58:41:35:6E:21:49:94:BE:A1:6D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/zmgOWsplTWxntFhBNW4hSZS-oW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:a5:9d:e9:2d:bb:68:48:c7:40:2b:8f:3f:22:8f:ee:43:
         08:f6:e9:4a:9e:cd:aa:db:8a:64:ad:da:ca:14:41:00:1e:c8:
         47:14:11:dc:9a:f4:cb:49:39:43:e0:7c:94:22:36:2b:5e:17:
         64:bb:65:86:ef:87:aa:ae:b8:b3:49:07:b2:2e:f3:61:c9:7f:
         04:14:0f:65:7a:73:0a:a7:c2:3a:be:1b:22:90:6c:24:38:05:
         12:82:29:68:33:39:7e:66:b8:15:19:8d:8f:36:fa:88:3e:81:
         13:5f:43:fc:bd:1d:d9:ad:bd:6f:dd:5d:d0:08:ea:88:b9:6a:
         fe:77:20:f7:d1:75:f3:21:72:cb:f3:36:3b:24:49:20:1a:6c:
         be:a9:69:ff:e4:7a:ba:23:d8:15:d6:2d:93:4b:2b:be:be:48:
         a3:47:46:a1:a5:34:0f:fd:f7:d3:c3:54:17:03:ca:d8:e4:76:
         29:9b:dd:50:5b:e3:e8:d6:90:ba:9b:5a:c8:e5:f8:d1:1c:05:
         16:5f:6e:ae:7e:60:a5:d7:ae:5b:fa:99:c1:d0:81:23:09:cd:
         f3:72:33:7f:e0:e9:55:94:b3:29:58:33:fc:52:e2:a9:9c:2a:
         48:67:8d:f9:f1:3d:30:fa:9a:76:50:d4:50:fa:4c:7e:4f:ea:
         cd:f6:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:11:11 2025 by rpki-client