Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/_FLXth3R9YBoN-oj9oLEtqVxlX4.roa
File:                     _FLXth3R9YBoN-oj9oLEtqVxlX4.roa (raw, json)
Hash identifier:          Ni6uCEKjg8pqkqG/6RhzOduLtVb6Sd96nOsRfF5vfMM=
Subject key identifier:   FC:52:D7:B6:1D:D1:F5:80:68:37:EA:23:F6:82:C4:B6:A5:71:95:7E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0203
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_FLXth3R9YBoN-oj9oLEtqVxlX4.roa
Signing time:             Sat 01 Mar 2025 01:31:04 +0000
ROA not before:           Sat 01 Mar 2025 01:31:04 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     4713
IP address blocks:        61.208.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar  1 01:31:04 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=FC52D7B61DD1F5806837EA23F682C4B6A571957E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:ce:e5:01:2e:01:93:45:49:db:54:98:c2:
                    6d:0d:cf:8d:40:e0:35:9c:20:e8:e5:40:ba:87:0e:
                    35:7d:ab:e2:52:ec:e8:e3:e6:8f:07:8c:8e:82:75:
                    24:1d:c0:39:14:24:d1:cf:c4:1a:23:34:35:cb:80:
                    12:3a:c8:3c:33:58:10:62:c8:7b:ee:2e:8a:d6:d5:
                    18:89:14:1c:57:b1:d7:58:5c:43:0d:f0:4e:a9:f7:
                    18:b0:19:cc:08:42:65:bf:61:d1:be:ed:0e:c0:90:
                    05:cb:72:d5:2f:2b:1e:0b:07:d0:61:51:6f:e0:aa:
                    cb:48:d2:83:c3:c7:2f:de:ae:84:58:eb:18:f3:d4:
                    ed:3d:4c:1b:7e:8f:8d:3b:02:bc:de:bf:73:37:51:
                    3d:4a:89:05:5d:64:06:53:cc:47:08:79:bb:9b:40:
                    3b:e8:c5:13:e3:d7:4e:88:28:50:d2:a1:68:53:61:
                    22:c6:76:37:68:30:15:3c:04:71:3e:9d:ae:de:8c:
                    f8:9d:d4:23:85:b4:b9:22:7a:06:21:fc:95:43:c5:
                    c2:86:8d:c7:ac:98:73:e0:dd:c8:b2:9b:39:7a:86:
                    ec:9e:4e:37:c3:31:78:03:31:bd:04:9b:3c:37:fe:
                    87:c0:69:b5:f3:8d:34:7b:84:4f:75:18:8e:0e:e6:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:52:D7:B6:1D:D1:F5:80:68:37:EA:23:F6:82:C4:B6:A5:71:95:7E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_FLXth3R9YBoN-oj9oLEtqVxlX4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:0c:8d:aa:7d:9d:db:86:9e:64:4d:a2:7d:08:63:d7:6e:aa:
         bc:cd:fe:19:f2:bf:45:5a:66:c7:a5:7b:c7:f9:bf:0f:92:58:
         45:c1:54:43:3a:a9:ee:4c:0e:57:71:19:71:f7:45:6b:5e:6d:
         fc:f1:d8:0c:79:c4:b2:55:7d:e5:b5:df:a0:7e:ad:35:7f:09:
         6c:1d:d9:fc:4c:6b:a4:ed:c7:cb:59:98:a1:c2:af:22:7d:38:
         1c:f0:ac:64:b3:dc:dd:b0:2b:05:c3:db:0c:4b:17:39:8b:09:
         0e:be:f8:2b:57:9f:a4:32:06:43:74:b2:a8:ee:92:a0:e2:bc:
         63:12:e8:ff:13:83:5d:4e:0a:c6:f2:60:82:80:d6:a4:72:e9:
         1d:81:4c:35:60:84:be:d4:70:cb:cb:bf:7a:e9:97:64:e1:64:
         4a:5b:18:6c:ee:36:58:9b:2b:a5:d5:a4:8c:7d:e4:8d:da:e0:
         1c:73:11:40:07:f4:b2:56:3d:e1:5a:49:4d:d1:b1:c0:98:99:
         f6:c9:45:ce:30:3b:c6:11:a0:e8:45:21:b7:33:19:dc:47:93:
         7d:be:08:cb:76:51:cb:3e:21:fb:a6:ca:80:5c:b1:ac:ea:3c:
         85:b3:57:12:03:f1:2b:87:c7:21:8d:bc:37:cf:b9:c2:dc:0a:
         5a:4f:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:32 2025 by rpki-client