Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/JnFuTpZh8A1QKJya2Ow8XzfskjQ.roa
File:                     JnFuTpZh8A1QKJya2Ow8XzfskjQ.roa (raw, json)
Hash identifier:          soF2C/V8kmL+f8dnzYOnWhzopjFNVVCw71A4wWj37A0=
Subject key identifier:   26:71:6E:4E:96:61:F0:0D:50:28:9C:9A:D8:EC:3C:5F:37:EC:92:34
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0204
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JnFuTpZh8A1QKJya2Ow8XzfskjQ.roa
Signing time:             Sat 01 Mar 2025 01:31:04 +0000
ROA not before:           Sat 01 Mar 2025 01:31:04 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        61.214.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:04 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=26716E4E9661F00D50289C9AD8EC3C5F37EC9234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:4a:20:36:e8:57:ab:e9:c3:7f:0e:f1:f3:
                    c5:63:26:a8:57:ac:e3:13:fa:1d:bf:70:37:d5:8d:
                    49:cf:cd:e5:19:46:c1:62:80:a7:3d:8d:69:cb:20:
                    2b:55:8e:ca:86:39:b6:af:6b:31:6b:03:1d:36:18:
                    20:3d:ef:4f:e7:78:e7:3e:17:0c:3d:35:65:40:1d:
                    3b:78:c9:bd:93:4e:2b:02:e9:02:0c:e1:33:3c:ac:
                    4a:e8:75:d0:a4:f4:c6:f2:ee:f3:97:ba:b4:33:43:
                    12:15:40:ec:6c:73:01:ef:8e:53:1e:0d:74:0e:16:
                    45:e2:d2:fd:2e:c7:fa:cd:87:cc:c1:5a:54:37:48:
                    9e:35:a7:54:dd:d0:dc:d7:c0:d9:ce:1c:e0:9d:ee:
                    b0:96:b4:5e:fe:49:c6:06:d6:18:2e:ad:31:10:79:
                    d5:f4:91:c0:5e:a4:5f:62:32:1b:ae:15:9a:67:97:
                    a6:45:9e:18:83:02:00:87:97:74:44:55:75:47:48:
                    15:09:f2:af:03:f1:71:eb:14:59:66:45:6a:b1:3b:
                    6b:fe:6f:3b:25:24:c2:c3:33:18:e8:e9:51:58:3d:
                    b5:0a:60:89:10:68:6a:17:46:e3:6a:57:67:52:68:
                    93:db:dd:e7:72:6e:99:be:da:7b:ce:dc:5a:d0:12:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:71:6E:4E:96:61:F0:0D:50:28:9C:9A:D8:EC:3C:5F:37:EC:92:34
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/JnFuTpZh8A1QKJya2Ow8XzfskjQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:04:aa:81:d3:e4:6d:71:51:b9:60:74:a8:bd:4a:8b:52:5e:
         62:4d:5a:2a:60:2c:f0:af:3d:bf:35:b8:ad:00:45:f3:7f:a4:
         83:70:b0:44:f8:f8:97:d9:db:27:97:b3:c5:c9:12:d4:c7:a8:
         b7:36:d5:c5:00:16:0d:ad:71:94:e2:22:f8:a8:76:5f:eb:f4:
         78:b2:c0:b1:08:0a:c0:bf:aa:63:cf:40:49:60:e4:3d:5d:09:
         de:b9:9b:9e:36:a2:c8:65:d1:23:5e:cd:0f:5b:7b:ca:a9:3e:
         e9:04:41:f8:77:38:2d:1e:49:c9:9d:97:7a:7c:d7:c5:b1:55:
         09:6c:c9:4d:44:73:35:8e:94:76:b2:7c:1f:6a:d5:3e:32:43:
         1d:eb:02:94:08:f6:04:32:f5:32:ad:8c:38:5b:e6:42:77:0f:
         3d:1e:e2:9f:8c:22:90:f8:28:8e:77:0e:af:eb:82:c7:a3:c8:
         a8:c2:1b:8b:70:ec:b2:f3:d4:65:44:5e:33:5b:6c:9f:e0:16:
         04:cc:d8:b9:b6:ea:49:c3:8f:68:a7:1f:3a:3d:bf:47:5c:d0:
         62:91:0d:c6:6d:ee:17:46:bd:c4:db:46:f6:8a:c3:14:e5:12:
         e8:ff:aa:90:48:bc:d7:83:fc:00:00:9d:e9:05:a4:da:9c:47:
         08:3a:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:47 2025 by rpki-client